'\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r2, 0x0, 0x100000516) r6 = socket(0x0, 0x800000000000002, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88ed09f03dc751dc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) [ 1835.804989][ T3261] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:10:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0f000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:10:59 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a4000000240b0b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:10:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000f0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c363fe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) [ 1836.085622][ T3264] bond879: (slave bridge1106): making interface the new active one 10:11:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e54130039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1836.141416][ T3264] bond879: (slave bridge1106): Enslaving as an active interface with an up link [ 1836.197144][ T3261] 8021q: adding VLAN 0 to HW filter on device bond879 [ 1836.271546][ T3261] team0: Port device bond879 added [ 1836.307028][ T37] audit: type=1804 audit(1621764660.211:537): pid=3313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1402/cgroup.controllers" dev="sda1" ino=14658 res=1 errno=0 [ 1836.371658][ T3313] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1836.465943][ T3261] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x5c00}, 0x0) 10:11:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e60000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:00 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a4000000240c0b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e003f0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1185d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) [ 1836.626476][ T9557] net_ratelimit: 49 callbacks suppressed [ 1836.626496][ T9557] bond1: (slave bridge1): failed to get link speed/duplex [ 1836.710935][ T9] bond6: (slave bridge9): failed to get link speed/duplex [ 1836.740658][T12385] bond3: (slave gretap1): failed to get link speed/duplex [ 1836.803487][ T9557] bond1: (slave bridge1): failed to get link speed/duplex [ 1836.879970][ T108] bond6: (slave bridge9): failed to get link speed/duplex [ 1836.895986][ T3340] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1836.984222][ T9557] bond3: (slave gretap1): failed to get link speed/duplex 10:11:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2ef0000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e13540039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:01 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a4000000240e0b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f02a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) [ 1837.159491][ T3340] bond880: (slave bridge1107): making interface the new active one [ 1837.248280][ T3340] bond880: (slave bridge1107): Enslaving as an active interface with an up link 10:11:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00050039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00600039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1837.325825][ T3341] 8021q: adding VLAN 0 to HW filter on device bond880 [ 1837.434318][ T3341] team0: Port device bond880 added [ 1837.463398][ T3974] bond1: (slave bridge1): failed to get link speed/duplex [ 1837.538164][ T3340] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1837.571170][ T25] bond3: (slave gretap1): failed to get link speed/duplex 10:11:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x5d00}, 0x0) 10:11:01 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a4000000240f0b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00060039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f03a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) [ 1837.602180][T12385] bond6: (slave bridge9): failed to get link speed/duplex 10:11:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00f00039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1837.661262][T12385] bond1: (slave bridge1): failed to get link speed/duplex [ 1837.904802][ T3409] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1838.195192][ T3419] bond881: (slave bridge1108): making interface the new active one [ 1838.212504][ T3419] bond881: (slave bridge1108): Enslaving as an active interface with an up link [ 1838.235652][ T3446] 8021q: adding VLAN 0 to HW filter on device bond881 [ 1838.252664][ T37] audit: type=1804 audit(1621764662.162:538): pid=3395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1403/cgroup.controllers" dev="sda1" ino=14339 res=1 errno=0 [ 1838.264121][ T3446] team0: Port device bond881 added [ 1838.297185][ T37] audit: type=1804 audit(1621764662.192:539): pid=3397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1403/cgroup.controllers" dev="sda1" ino=14339 res=1 errno=0 [ 1838.351687][ T3409] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff2af7e8b32c17dc103076904ac336995c3c779f7fc06df4f5ca1ee060c6edef9a61f36da7e081638536755c1eb55956b59415fea9c3010a5e81d184f29613ceb6d3c1b41687c42cb7f8ae607dc25cc6317f8741f5e634e44ba22251d6ed5fdf873e8679187e3d1a8c69cbce5be02cb382d258aa559d348b796c50c0413d2f104e32abc686386a91ba9d65541a8941efb47d0eb66eb08bdd81a453260fa6c944d01ad8ab595eac3365957b7bdd4d37d897fa2eb0cc1309b06961ea9ef85d34276e703b700c893edd06481acfb244fc1f91840743bda3331a392eff7abb507e47fc716e69d6374e7c4c"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00070039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:02 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024100b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003f000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f05a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10:11:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x5e00}, 0x0) [ 1838.718394][ T3459] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:11:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f06a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10:11:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00020039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1838.906510][ T3458] 8021q: adding VLAN 0 to HW filter on device bond882 10:11:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00090039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1838.996040][ T3458] team0: Port device bond882 added [ 1839.058137][ T37] audit: type=1804 audit(1621764662.962:540): pid=3509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1404/cgroup.controllers" dev="sda1" ino=14339 res=1 errno=0 10:11:03 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024110b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:03 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f08a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10:11:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00040039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x5f00}, 0x0) 10:11:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000e0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:03 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024600b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:03 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f10a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10:11:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00050039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000f0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1839.600669][ T3532] validate_nla: 2 callbacks suppressed [ 1839.600688][ T3532] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00060039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:03 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024700b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1839.721610][ T37] audit: type=1804 audit(1621764663.632:541): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1405/cgroup.controllers" dev="sda1" ino=14930 res=1 errno=0 10:11:03 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000214000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00070039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e15110039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1840.085647][ T3535] bond883: (slave bridge1111): making interface the new active one [ 1840.179356][ T3535] bond883: (slave bridge1111): Enslaving as an active interface with an up link [ 1840.245039][ T3541] 8021q: adding VLAN 0 to HW filter on device bond883 [ 1840.316652][ T3541] team0: Port device bond883 added [ 1840.426887][ T3532] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1840.442894][ T37] audit: type=1804 audit(1621764664.342:542): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1405/cgroup.controllers" dev="sda1" ino=14930 res=1 errno=0 10:11:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6000}, 0x0) 10:11:04 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000314000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="a50000020100000000000000000000000000008046d55a981559336e48897c41b1a496333ec2f745a067a496f85ddec85eddfb8ff820e152a834a70df985b3eb0c778e3f3b981de5d8ab3e9639389f91ad8fe5de7e7491d7278afe86740221d35ed417ce77bd471e50bff1724066358cbced6a4216f2dd3f547d463c5b1bc70d443b7bb7eefe9139375efa93b525d64068c241a08c0a3bf3e2ad7e75", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth1\x00', 0x4}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e11150039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00080039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a70bbb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10:11:04 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000514000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e003f0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1840.826789][ T3612] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00090039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1840.904582][ T37] audit: type=1804 audit(1621764664.812:543): pid=3614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1406/cgroup.controllers" dev="sda1" ino=15023 res=1 errno=0 10:11:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c189f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) [ 1840.948417][ T3613] bond884: (slave bridge1112): making interface the new active one [ 1840.962753][ T3613] bond884: (slave bridge1112): Enslaving as an active interface with an up link [ 1841.059935][ T3613] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1841.075108][ T3617] 8021q: adding VLAN 0 to HW filter on device bond884 10:11:05 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024001014000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) [ 1841.176810][ T3617] team0: Port device bond884 added 10:11:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6100}, 0x0) 10:11:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00600039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000e0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:05 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0xf}, 0x0) [ 1841.399603][ T37] audit: type=1804 audit(1621764665.312:544): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1407/cgroup.controllers" dev="sda1" ino=15009 res=1 errno=0 10:11:05 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b840d0000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1841.458273][ T3663] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00f00039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000f0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1841.618458][ T3675] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00600039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003f000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="080fdd"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000210000002dbd7000fcdbdf2502a00005020000051700010008000b00b500000008000b00ffffff7f08000b00090000000c200c400000000000000006"], 0x40}, 0x1, 0x0, 0x0, 0x20040850}, 0x10) accept4(r4, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) sendfile(r3, r1, 0x0, 0x100000516) 10:11:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00f00039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1842.033067][ T3679] bond885: (slave bridge1113): making interface the new active one [ 1842.086085][ T3679] bond885: (slave bridge1113): Enslaving as an active interface with an up link [ 1842.105885][ T3729] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1842.123736][ T3703] 8021q: adding VLAN 0 to HW filter on device bond885 [ 1842.166575][ T3703] team0: Port device bond885 added 10:11:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000539000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1842.226142][ T9557] net_ratelimit: 56 callbacks suppressed [ 1842.226167][ T9557] bond1: (slave bridge1): failed to get link speed/duplex [ 1842.333351][ T3675] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1842.391946][ T9557] bond6: (slave bridge9): failed to get link speed/duplex [ 1842.421245][ T25] bond3: (slave gretap1): failed to get link speed/duplex 10:11:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6200}, 0x0) 10:11:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00020039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:06 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x18}, 0x0) 10:11:06 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140c0000000000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1842.449937][ T57] bond1: (slave bridge1): failed to get link speed/duplex 10:11:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000639000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1842.518953][ T57] bond6: (slave bridge9): failed to get link speed/duplex [ 1842.548831][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1842.561199][ T25] bond1: (slave bridge1): failed to get link speed/duplex 10:11:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00040039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1842.628905][ T25] bond6: (slave bridge9): failed to get link speed/duplex [ 1842.659525][ T25] bond3: (slave gretap1): failed to get link speed/duplex 10:11:06 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000030000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:06 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x24}, 0x0) [ 1842.728758][ T25] bond1: (slave bridge1): failed to get link speed/duplex [ 1842.755952][ T3747] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000739000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x74, 0x4a, 0x400, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0xa9}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004010}, 0x44000) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x10, 0x10, 0x0, 0xfffff000, {{0x10, 0x4, 0x1, 0x0, 0x40, 0x68, 0x0, 0x66, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x14, 0xba, 0x0, 0x7, [0xff, 0x1000, 0x7fffffff, 0x5]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x66, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x9}, {@rand_addr=0x64010100, 0x1f}]}]}}}}}) recvfrom(r3, &(0x7f0000000100)=""/55, 0x37, 0x2021, &(0x7f0000000280)=@xdp={0x2c, 0x8, r6, 0x1e}, 0x80) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0, 0xff, 0x2, 0x2}]}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r7, r1, 0x0, 0x100000516) 10:11:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00050039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000939000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1843.217766][ T3750] bond886: (slave bridge1114): making interface the new active one [ 1843.267040][ T3750] bond886: (slave bridge1114): Enslaving as an active interface with an up link [ 1843.308236][ T3757] 8021q: adding VLAN 0 to HW filter on device bond886 [ 1843.350302][ T3757] team0: Port device bond886 added [ 1843.427869][ T3747] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6300}, 0x0) 10:11:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000e39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00060039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x28}, 0x0) [ 1843.462219][ T37] audit: type=1804 audit(1621764667.372:545): pid=3807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1409/cgroup.controllers" dev="sda1" ino=14786 res=1 errno=0 [ 1843.466810][ T3807] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:07 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140000000b0000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0xb8}, 0x0) 10:11:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000f39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1843.735227][ T3820] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00070039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd55008fc8d82f12d7ef9f43b0cafa94f365d69fb74bb2a670a8e1b2013c0f4e4c41523d8b632593a891d9be0b078c496b283675b3f01ff008241d3a47d6aaeda6debca1cf76af4eb7c19cbf1396c52d773de2ca6c1dd1cfabb8e6894b07bc974b9574e942aca01f9d", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00541339000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00080039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1844.229830][ T3823] bond887: (slave bridge1115): making interface the new active one [ 1844.280312][ T37] audit: type=1804 audit(1621764668.192:546): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1410/cgroup.controllers" dev="sda1" ino=14639 res=1 errno=0 [ 1844.288065][ T3823] bond887: (slave bridge1115): Enslaving as an active interface with an up link [ 1844.341875][ T3825] 8021q: adding VLAN 0 to HW filter on device bond887 [ 1844.367625][ T3825] team0: Port device bond887 added 10:11:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00003f39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1844.553048][ T3820] bond887: (slave bridge1116): Enslaving as an active interface with a down link 10:11:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6400}, 0x0) 10:11:08 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14020000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:08 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10c8}, 0x0) 10:11:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00090039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40000000) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffde3, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYBLOB="ec665f33ae3d23e44acac822fdab0ddb2643c5259a8fed8977cda91b986723355ad3d966f22669e371ed1225a2521426e0e5c08e9aea04de5fedc2b31cc40ae2acfe63a03a390de54ae75641ba40bb7ab63513f01171afc7b0fbd1c76b1dd75df6c7a6ad2e79d106f59724cb76dccf8098fbaae82f2c3a5b50039a62a78c71c247f42d12a6da881c7e938663720705fb6f866751c3cc774da2840c9b6a18fa3f48750482c0ebba18d960dd6d95bb8868c7115f36", @ANYRES64=r1], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r2, 0x0, 0x100000516) 10:11:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00135439000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000e0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:08 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x5000}, 0x0) 10:11:08 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14030000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1844.992835][ T3900] validate_nla: 1 callbacks suppressed [ 1844.992854][ T3900] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00006039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1845.069719][ T37] audit: type=1804 audit(1621764668.982:547): pid=3902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1411/cgroup.controllers" dev="sda1" ino=15038 res=1 errno=0 10:11:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000f039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000f0039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1845.447197][ T3903] bond888: (slave bridge1117): making interface the new active one [ 1845.549066][ T3903] bond888: (slave bridge1117): Enslaving as an active interface with an up link [ 1845.572979][ T3907] 8021q: adding VLAN 0 to HW filter on device bond888 [ 1845.644599][ T3907] team0: Port device bond888 added [ 1845.762233][ T3900] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6500}, 0x0) 10:11:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00600039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:09 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14040000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000000f000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:09 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x20002ab8}, 0x0) 10:11:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, ',]1.*'}, {0x20, 'cgroup.controllers\x00'}, {}]}, 0x26) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd55001f7359b73ef01270997626c15acf241284dd3d9c3a", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept(r2, &(0x7f00000017c0)=@ethernet={0x0, @local}, &(0x7f0000000740)=0x80) sendmsg$nl_route(r5, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=@ipv4_getnetconf={0x44, 0x52, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x200}, @NETCONFA_FORWARDING={0x8, 0x2, 0x400}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x800) sendfile(r4, r1, 0x0, 0x100000516) 10:11:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00f00039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:10 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14050000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1846.067140][ T3971] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1846.081076][ T37] audit: type=1804 audit(1621764669.992:548): pid=3972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1412/cgroup.controllers" dev="sda1" ino=14818 res=1 errno=0 10:11:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000239000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:10 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10:11:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000539000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1846.264444][ T37] audit: type=1800 audit(1621764670.052:549): pid=3972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=14818 res=0 errno=0 [ 1846.321048][ T37] audit: type=1804 audit(1621764670.052:550): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1412/cgroup.controllers" dev="sda1" ino=14818 res=1 errno=0 10:11:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000439000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1846.472023][ T37] audit: type=1804 audit(1621764670.322:551): pid=3972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1412/cgroup.controllers" dev="sda1" ino=14818 res=1 errno=0 [ 1846.576061][ T3975] bond889: (slave bridge1118): making interface the new active one [ 1846.627937][ T3975] bond889: (slave bridge1118): Enslaving as an active interface with an up link [ 1846.698707][ T3988] 8021q: adding VLAN 0 to HW filter on device bond889 [ 1846.724143][ T3988] team0: Port device bond889 added [ 1846.887037][ T3971] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6600}, 0x0) 10:11:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) 10:11:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000639000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000539000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:10 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x2}, 0x0) 10:11:10 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14060000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000739000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000639000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1847.206686][ T4058] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:11 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14070000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1847.237708][ T37] audit: type=1804 audit(1621764671.142:552): pid=4057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1413/cgroup.controllers" dev="sda1" ino=15064 res=1 errno=0 10:11:11 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x3}, 0x0) [ 1847.338731][ T4059] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1847.485375][ T4060] 8021q: adding VLAN 0 to HW filter on device bond890 [ 1847.548018][ T4060] team0: Port device bond890 added [ 1847.589396][T12385] net_ratelimit: 51 callbacks suppressed [ 1847.589414][T12385] bond6: (slave bridge9): failed to get link speed/duplex 10:11:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000939000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000739000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1847.681607][ T4058] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1847.731822][ T57] bond1: (slave bridge1): failed to get link speed/duplex [ 1847.820862][ T57] bond6: (slave bridge9): failed to get link speed/duplex [ 1847.862545][T12385] bond3: (slave gretap1): failed to get link speed/duplex 10:11:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6700}, 0x0) 10:11:11 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4}, 0x0) 10:11:11 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14080000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x1, @default, @bpq0, 0x5, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @bcast]}) [ 1847.928564][ T9557] bond1: (slave bridge1): failed to get link speed/duplex 10:11:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000e39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1848.012052][ T9557] bond6: (slave bridge9): failed to get link speed/duplex [ 1848.069614][ T9557] bond3: (slave gretap1): failed to get link speed/duplex 10:11:12 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x5}, 0x0) [ 1848.111719][ T4133] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:12 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14090000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1848.208820][T12385] bond1: (slave bridge1): failed to get link speed/duplex [ 1848.308326][ T37] audit: type=1804 audit(1621764672.202:553): pid=4166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1414/cgroup.controllers" dev="sda1" ino=15040 res=1 errno=0 10:11:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000839000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000f39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1848.466061][ T4136] bond891: (slave bridge1120): making interface the new active one 10:11:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000939000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1848.567978][ T4136] bond891: (slave bridge1120): Enslaving as an active interface with an up link 10:11:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00151139000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1848.615697][ T4133] 8021q: adding VLAN 0 to HW filter on device bond891 [ 1848.681108][ T4133] team0: Port device bond891 added [ 1848.704723][ T3974] bond3: (slave gretap1): failed to get link speed/duplex [ 1848.721905][T12385] bond1: (slave bridge1): failed to get link speed/duplex 10:11:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) [ 1848.793333][ T4136] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6800}, 0x0) 10:11:12 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x6}, 0x0) 10:11:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000e39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:12 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140a0000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00111539000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1849.056732][ T4215] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000f39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1849.160249][ T37] audit: type=1804 audit(1621764673.072:554): pid=4212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1415/cgroup.controllers" dev="sda1" ino=15045 res=1 errno=0 10:11:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00006039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00003f39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1849.305208][ T4218] bond892: (slave bridge1121): making interface the new active one [ 1849.371119][ T4218] bond892: (slave bridge1121): Enslaving as an active interface with an up link [ 1849.421623][ T4217] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:13 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x7}, 0x0) [ 1849.473077][ T4218] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:13 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140b0000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003f000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1849.606858][ T4218] bond892: (slave bridge1122): Enslaving as an active interface with a down link [ 1849.663599][ T4244] 8021q: adding VLAN 0 to HW filter on device bond892 [ 1849.720846][ T4244] team0: Port device bond892 added 10:11:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00006039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6900}, 0x0) 10:11:13 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x8}, 0x0) 10:11:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000000f000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:13 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140c0000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x4, 0xed, 0xf5, 0xf, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x700, 0x8, 0x9}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x240, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r9, r7, 0x0, 0x100000516) 10:11:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000f039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:14 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x9}, 0x0) [ 1850.146781][ T4299] validate_nla: 1 callbacks suppressed [ 1850.146800][ T4299] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000000f000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1850.331711][ T37] audit: type=1804 audit(1621764674.242:555): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1416/cgroup.controllers" dev="sda1" ino=15085 res=1 errno=0 10:11:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039020511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1850.495652][ T4302] bond893: (slave bridge1123): making interface the new active one 10:11:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000239000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1850.556615][ T4302] bond893: (slave bridge1123): Enslaving as an active interface with an up link [ 1850.567144][ T4307] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1850.592997][ T4308] 8021q: adding VLAN 0 to HW filter on device bond893 [ 1850.625408][ T4308] team0: Port device bond893 added [ 1850.637826][ T4361] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000439000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:14 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xa}, 0x0) [ 1850.718262][ T4308] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6a00}, 0x0) 10:11:14 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140e0000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039040511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000539000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039050511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:15 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x11}, 0x0) 10:11:15 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140f0000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1851.148336][ T4387] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd55009194b6896a75304cdad5704e4e55f08eb4b9ce6823ee29ddb328b3c28fd73753b7bd5b584597c37c858d", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r5 = gettid() r6 = accept4$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @fixed}, &(0x7f0000000500)=0xe, 0x800) write(r6, &(0x7f0000000540)="081975ca990f2c7d154b287f3d7d6e7add76d0910a92be5dec7dbc62ee54487a2df5a626bef924a9507ecf42295d31140dd68236401b0424ae3bfb12c0cea7d26b99ad605fb977214df153b72e6d1f70ae1d314334e2f7cbf0668c476eb5f28bd62e0475a35dd6cc96a6eb04f45b183087e43f84649b87045943e9c2463d79650155d08ac246b15729ba1ebc3496b6c50a8bf6829e4f60e27f2ed63d8b8a6d148cfbc0ac978d01e355853dd4a4d3a001151a9bdc9e617d5028ed242219", 0xbd) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000040)=r5) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000600)={r3, 0xba5, 0x6800000000000000, 0x80000001}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000007c0)={0x0, 0x0, "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", "aec71c3ee0cd34e95a85782e10544d8a740b10d37b2dac031dba56b87921e824eefd12d7a2a5ac570d6ccc5c963bfb1f9bdf38253e0497a3de5c9d1efa15459ac3181dabceede9dc8d2387ccf5ac13e21806c7856ab28097b97b9ac4e4e67d9a5d03488ec34d3c406b898475dc96f709445e3990c10537b7497cdb8b2df6392b7b2494327ffb61dde7c5e8ce6d91573f32bbaac2625ad50709bcd34308b52eee8c11e5a58e94fc691141452d802f6a436014e9181492bc61fe5b9766b79864d6dd180d5920f9e13e0ce1b16bcf5a0bc47a2db22be8eece8e4d8d606fddfd357295f6efb736a3432fbfc0f54ffed0134fb6ec0357f89288a7cfafaf2adeb0c510c247acb0db2e82ffb23ded69b56e5492b6871d167af1f19465c6695279efb29b3a3722fa07ac73463d6cd9fa2e4c9b6e693a5c287ecdffdadf01264cc26baed8ba0d8c0e41858b6c06e85cd3bbbf037796986f8c4ecfbec9fefbc2a36e9a265c40f5998b187d7e50c3bc6f0165c6d290ef289fd4c0f7baa624b969064d6ea809ea8b64fa5e5a51fbd5cc2e127835e04267db224dc57f6029267af3de0172ec55ed425bc334cd963b56a4227b43339754c04a43284f10a29970cbbbedcf41f99a874aaf3056a732e7beba456441b1ff7c948d61c89ff9bdf7ebdf3d81f466ba5bd58f2fad4777d63e703ddee62fad18983a08414ed0a8ea950d60fab60450a5510aca8bf2b683c44d984a6253339c5e563adbe341f69236096d344a0237008380ef11e5499e57e8553ab5e632f135bf9ffffaec27eed589b40db62d1e8410eefb760086572324b95905cc0b323f322ce06ace0c1d2fc3e6a16d4b7bb1ea61bab13fb2d6505a83b8194e762ad3f7bb249b6850c914b9c5819c0b1a74e9224eeac08e0100427a6d4fc713f015ff41488d44e923b1a3fff5fd2f5872ea2827bdd0a45a8586f13aaf5bee4cad46e98a1555055bb5c8c675b46450b6f1680662c0cef55808d806758c500e22f5419784c64a3ef8c1da71358d5e7b639945735a7bdc7aa128bfe0c300d7a5bcd3adaa134ba6ec167f5291081d7edffb4481e69c5d9ba4aa20add0e2cc11fcd6528d7be56e930565f3e29f8472e5c2a82fb01aeb97733c6f4834043bd7d043eb1e9f1a5d42c4feada23ccd386de536e39a24c43026a85496eeb122ca3204497503052cee985fa4e779577ee9abcb8809b5f6eae30442ee28167fe74cb1c399de5bb4301f3ff471395cc951424b171edfb8c9a3c2aa565ed38b4bd0c12d0bbe08e415a335bebd53fbea2a7e0f79472fc9393dd86aef2147517631f3288b620318b546a6e82a35663cca12d4c0f9785ae90f51b483b17296faf541e044f405280d26f2cecc3451bd1ef8dd99fe303375c78cfb8e052cd034ca5dbb39cb8689344792acbea93bbd4455c37685602429fd1fb0b2af1d00a1932f7243865f9f59d5841dc0c51a34b25cefed48fde0856681c792405dbcdf091b5015233846b659a47cee93f2ccea1308c9d110d4fdf8cfbc2228a09480179d998edc5084450fac5673c181547148bfe35dd73c82cbb5c712a96fb90a7c94e9696e726b0d02adf964d26c082987425b7cc90b57757a82bb30cd295dec30a2c0e3821fa667a82aa152d3c6ebbbd981495659bfb23aa54ae11974360299b323ba335382414ea2c9d34cfbd56b7c0a97d08b165e9361b60f2cd04e93663008a3dc7519131a6c577912c6d013e2486fa84cdae7c309fba6c59110438210151db7f5dfbf1f3a57064df84666dd8b3cd69370b9577c01bb2ec9b6e2a632bbd47c79df18cadcb5b034bc1276ab65993cc47205fd48f738b83bc4f010c6ec242285e8290a64c7f4be8a31938977082ac424061e01dc2b8758c6a532bd3ec261ee6da965b53188b2d4d4d59d8c8fcfd3b3e02704b419e06e58a1c4eea79af5a81db20ded6a030ba81f4fdcb19e6536eb9f7810994f5d5112f080e86fa2938286f4c0fb7ecbc5fe0f924d4ac5a74e6d43ba2ff4a16d86bfeddfd58e6084ecf88a1be281d6e0440ae27d6caa93571c7a63f13113c8a1acab002afa6e51dc02f1bf4f814c85f8a19545df137aa80b2b03c48570fc1416d2e2645cb76f97f17f9ab7a5f3c6061f663294ca28b28499f5582546d4da0bf0cae99d4ad04e7cc17fa3b5f62cf8dac230896f294691cdce97edd8a4ffb2e01be2dcb176aaac16fc86fc191dee370800f28ad87cad40ecfd37b8bbf157d6a548024261f2eebda75a1572962ff1f43be85f986453df4fda794fea800a292bedbb79a70e12f8fed2bd3c417ff0b481ba34265c67cdf7fb9973c55bbac3516469dc584c0989a4b55e7930a594a77f812cea64808a59a7d98cec91277552dfd403479cd5d30d8b1d07e8cfef02c4d2cd8e2f4ad64332ee81e5d4466d4dfb64a16434b7818cad3233bc3dc7d684e0851b7c361318b903d8f3d224480a1a4691dcc94f03f90bbf62cfaa763489f0f42830e09736784a0d8659c26bb86a5590273d1d60df186c391509cbf8d0f7f1d8698e0e5e730c374013a39b7796eb20bf8dfc84f021c3eb263972611b61fd1de047db27f92ffd4808efbc73e70f694589c53a12f0c4fc857e413e512f7f47ced9a84cb664673d99673fe6040d38a0af6dc262ae93656053921c953280ac0bbefc840844b7972e5842ce0b757d22d67e4463ba7f032b5e15a291e80b5f5fe97e40ab7b6fcea44c0b93bb383ed5825a6ab8ae9d830815ebd950fed997caaef315e3fb448934d04eaaa8e229a996b8a3a2e2ebd781a710b82ee5f6dd2980c9ef8bff08510b683f60a0db8ae4d22174b275fcf11f6ad988250839eb489666a7cefeda420fa88e4e138b580a2876f9e478441fe9c99d66562357209be7ddae6442853712fd1d616ac196d9e3a961e87333e923ec312fbb0a733731af657f9d68563aa20c12f4258667a3fea0e27d8c1f26838ddc5cf2f9dc9359007887aef281c70e3850cc5a782258c7ad31c6d84688a48da2b3b33d804e05886ab5bca883b1ed97db669d25de1dd48a9a24e963c96d84afbeae6424269448a402efe507fc793cf36d7b6cba728d03dac2e37ee542181bdbd51751c37210063ef95162925348198a5bacea86e2a1793eb8a0d852e7b52efe3f0ee90002dcde61a2a7b5e6e6d837945764a60ba704778626e18f50efdb84b2dc64722e63b549e94591e85e02c7085af57e1d09cf5a127eaf137734278d1c21ddaf4557446421201775111046e8e63d16ec77f9e83c9a5546a280bb241cb13eead97631d5e2f76fc90da0e728bff7136f3f686843d3c3770f258289c8a7839dcc7ed562f81f912605cd4b58b2160f1aacbdbdf3287126a1e0593af2665dd75835766d2c39908f92ddb7fcbea83e797df730c212b08c86459b0d51343e6ed1ad24d8ea8e46a109fac30d8505c5c78b65f699d55e5423dc5193bf62cc1765bfc5b9a78d5c7f6e13821c0134ad648ae6f48322cdb62bb0a96d7ee0556fcaf4f8864dbd5a7eeb43f50c5b4ed359fff2732b824852a19730342130ae1d3208bc577bf711e3aa3706191a170eecefb0d859c55e58d440d3b0c0dca47dcfbee05d31c0089201261fba34637d89aa42e31aa3ff1d22387a27930ec903401fa8c9e98bc829ee6d1f09a16b804c23cb008513a7b1473ce5df713583d3f9aedfc25bda34f4048ea942f069dcfc6257bbe83097a65ddfdb2764b00babea312e43453d2b5a2f04765b234a4bc9473cc737e957a9e30f6a3293cf97fa2768768718e532dc279d6929607d1c24c3b7f5008dee9d95a973b937cc1014ad45079ba58a1224eb4b1942528cce3ae77dddca1b6e554ede73f7168501057fd836c0b3e2d97b35091789a8375f4e04303813233a89d920b88cd4eceae2389bc0ce8f3044b19cc784a131d9e76c7935e0d5371015b519ac44b0c4f764cc55383ae1dcfd95f42f07cbb42edcaf1b4751d9eeb92d06102307f9e88d6df319e3c798f9ed0456db92f71218e20e07223b5705f5b171b8260581007de22dcffa152381279161db73bbdb0ac68415b96a4994ba1fc964e20ce28963342a722298789d03e88c10da8be2754cb8840d25326cc8d22bc260433e892e2368711b7c6f435fe5a10fe9bd825b0508e7cde8e16469b28e69f075166e40a429ef96dcd291a350e09bd3dd778a5696203275f28e9ac42fa5d44bd5e6fe3d283406f7d7ff46b44061895d36050ed5b22536a96e83b23a960e6a1377b0a182b9af860fba6a4910db8a76d421746fc748f265b1acd77829daa4ba919cb64a776453e997cbaf45c09d123269f772e2cd7f6b0a696c84c14bc44bbdfedd324358baeec03750aa6547f7fa476c9a8376db18ff80354ac7710527bca4553bd7b0db846b3d9b2a60a8ba6c8c26255f8eea2ec2d97c75f4107a311c3d9b3fa04ecb239435cf24dceafa3ef95497c34634a1ec3fbb243dbd7348b733d1666515bb1c6ffd184cd6a646a05a00d79b2f027fec0873b9ec915f899b79e4ca65ed33b5bd086fadb92f09cec0d69f3562639e55d9c91bd91ef4258614820c2dddfe2a985fbaed3c7e11511af34acfda900579192b3b6883630a6e332290000aa9c5246dee657f9535a0dc02534935bd77e09a9096d35ee14df0381ae766359f426bd5af630c5cf1661ee878e78cd620ac563727c96e62af6d2cea577e80a81aeffd8466c731abf26320ef6d894023fa0c71e0b7ad7961d277696eb0f86a772f0e6ba7235c9693a4d36d202d000dc5f54bd59aed73785f269d178296dadd9a41c3363b15a79773729d73dac066b26cfd1998d5947ed3ef4864acd3f8314b18e80ec5ca5658a8e628489130d6570f4f2dbe6bbcf14d148115fa5addc881f75ff5890de729846d09f09c1961599ebffa0c5cc7c9a67099123532cfe874175491befec746aa37622c4f039116bdffb285f5baedd9b67bd507a6c08b368486bc1cfb9cf049b8a3595fd1f47e86dd778276a11a9282a6c9f46d67631d81416b05d89faeecf709d13afd4e7829c3c9be3846d1721fe25f05f92c8f6758ad833d1632aa6b823c3565f2a369a7442c300cbee231772502923b7a56e29cd1a4a1a8204f8e0e842282396629e8e131d3b8c1d4f4ee0430e016eba489f95580449856dbb28087e88ce464d7cb49be68c6c85777f0cdabbba91ee226027ddc0af89b0b2afe29fbf7ca19ed38c1af7fb556394029466055a848413171a8665d9358a2dc7fcbf482f9426cccd27fbeb025bb8582ed83861be99bd15847468566902adb8bbafc954bfc1694ca04cfe1590fb9e3b311a8288245fce797771e518dc1055f743383eb5bcfa9f62578ed547c67d1d6de8693b82a9f6f35c016134c62530822565c4ddb8e4d4740af38a227966cec42170a3b3a024c42d0d2ec141c429db0d74bcb66"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f00000017c0)={0x0, r8, "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", "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"}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x284, 0xf, 0x8, 0x801, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0x3}, [@typed={0x8, 0x4c, 0x0, 0x0, @pid=r5}, @generic="ab81254451b7268c659cbf49fec19bdab4cd04fa6ca303cb290d4b208a10ed2906b7b0b9b66e44d039b8ea1b117a2e5a4206365832d95cbefca71e292b30a59ecee15553d7bc4803197f3d2ac21ec2b60a5f660fbe115e76a29804ce86c1e62438cb1965d5fedf51441202af", @typed={0x8, 0x29, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x5}, @generic="1eb2a34861a6c007ad82f8dfed026d3ba1503203756a14afc533152d10332fd2ba5801fe5fba6d72fb24c0bb8f62cb0b89e10b820261c00823eee8cd8cdcd8de4223e10463afbef6315fb654a6d6902e27c85a27feeaf0ad9b3353b8dd1f94506913e43205edb81072e9754a074ed145d37c76e690b146c536830197c964a50144a7786dacfba901225588d9be5160951557672150bb16173499c1429ac45de28618c1d9d286c5ce92e33d838a6d26a3cac854383b49db8049fd3379c04dbf3e01487458992440b36554b797561eb9", @generic="df7e3d0e430b577867b7027d10db69fb468e58309d8a454643dd68dec4697f1e8baa1d4832c0ff84df1b7862ad96e550be1561a362d725f0f3031a2e23bd98cdd9cc27728dcaf9d961b81ec6c0aa0b4cf0e211c924ac446d7fbb38f29a2f063c357fc309dcacd77a17b7ac74b4b9b24d8324793ed9ba0fee894116795b7a515dc418381dfcce86ef5426f0f572bca47fc1d606545e7b25cd018d9fd5181297af00a54b052529309827cba113e7cd11ae41d322efa7017ebeba92dd1449b24dff12f39edf9a37ef975d1ecbe909be8918867aaada6926f031e427a928fbed719e84d58ea1e54045d4", @nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @u32=0x1}]}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xc, 0x96, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@remote}]}, 0x284}, 0x1, 0x0, 0x0, 0x45}, 0x800) 10:11:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039060511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000639000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1851.521549][ T37] audit: type=1804 audit(1621764675.432:556): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1417/cgroup.controllers" dev="sda1" ino=13921 res=1 errno=0 [ 1851.531910][ T4389] bond894: (slave bridge1124): making interface the new active one [ 1851.584549][ T4389] bond894: (slave bridge1124): Enslaving as an active interface with an up link [ 1851.609620][ T4387] 8021q: adding VLAN 0 to HW filter on device bond894 [ 1851.656354][ T4387] team0: Port device bond894 added 10:11:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000739000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:15 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x18}, 0x0) [ 1851.784353][ T4389] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6b00}, 0x0) 10:11:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039070511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:15 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14100000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:15 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x48}, 0x0) 10:11:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000839000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="e500000024f80a00e204a400000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x2, 0x96c7, 0x2, 0x100, 0x1a0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x40) sendfile(r1, r4, 0x0, 0x100000516) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x18000, 0x5e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9f, 0x5a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9e, 0x1e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x18000, 0x5e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) pipe(&(0x7f0000000b00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9f, 0x5a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1ff, 0x41}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0xf3}, @device_b, @random="5f32e22e7e87"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x119, 0x33, @mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xbd}, @device_b, @device_b, @initial, {0x0, 0x7f}}, 0x80, 0x4, {0x0, 0x6, @random="3af2f45e3bd2"}, @void, @void, [{0xdd, 0xbe, "3ae4ff6d58a6c46639f948afc4560c5194274706070fc222112e80ce64fe1700528c27e18695dff7646a947e459760d6f0d40c2af23476485bf64c09d4cf2e35ea12460ccfb51f119890cfdc38f34f197a369fbd93393cbf1f505ca8dc98cdbddbf6f544bdacf9bf0926d986e9930858e526655adcb7036949c001cc41d52816f1185af06a85eb02d37b0a31b9a45260d0f8a43e4cea08e4cdc2d8295b8f2f252084f66fe4680ead0ff2d97d6dcc768c4a31e9c39ca61d7a101466d7bdbf"}, {0xdd, 0x8, "b742a72238553042"}, {0xdd, 0x25, "1a74c7cadccddc769131e0531bf50fe8c76de485622c163621570b1a3d3b37cd91a12f10e5"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x7}, @device_a, @device_b, @basic={{}, {0x8, 0xfb}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x24005804}, 0x40) ioctl$sock_ifreq(r3, 0x891f, &(0x7f0000000180)={'veth1_macvtap\x00', @ifru_data=&(0x7f0000000100)="0dfea76ed0132d38fb79904c52edc7229185c035ee956333b8c62971f248a5fe"}) [ 1852.163273][ T4456] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039080511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000939000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1852.469930][ T4461] bond895: (slave bridge1125): making interface the new active one [ 1852.546227][ T4461] bond895: (slave bridge1125): Enslaving as an active interface with an up link [ 1852.562404][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.568955][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 10:11:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000e39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039090511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1852.663541][ T4478] 8021q: adding VLAN 0 to HW filter on device bond895 [ 1852.701351][ T4478] team0: Port device bond895 added [ 1852.715731][T12366] net_ratelimit: 45 callbacks suppressed [ 1852.715749][T12366] bond1: (slave bridge1): failed to get link speed/duplex 10:11:16 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14110000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:16 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4c}, 0x0) [ 1852.788071][ T4461] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1852.797499][ T108] bond3: (slave gretap1): failed to get link speed/duplex [ 1852.943265][ T4461] bond895: (slave bridge1126): Enslaving as an active interface with a down link 10:11:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6c00}, 0x0) 10:11:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000390e0511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000f39000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1853.058098][ T108] bond6: (slave bridge9): failed to get link speed/duplex [ 1853.093318][T29674] bond3: (slave gretap1): failed to get link speed/duplex 10:11:17 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14600000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1853.139140][T29674] bond1: (slave bridge1): failed to get link speed/duplex [ 1853.192146][ T9557] bond6: (slave bridge9): failed to get link speed/duplex 10:11:17 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x63}, 0x0) [ 1853.255082][ T4534] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00006039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000390f0511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) [ 1853.507120][ T4537] bond896: (slave bridge1127): making interface the new active one 10:11:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003f000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1853.620740][ T4537] bond896: (slave bridge1127): Enslaving as an active interface with an up link 10:11:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039600511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1853.698985][ T9557] bond6: (slave bridge9): failed to get link speed/duplex 10:11:17 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14700000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1853.744039][ T9557] bond3: (slave gretap1): failed to get link speed/duplex [ 1853.814103][ T4562] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1853.835228][ T37] audit: type=1804 audit(1621764677.742:557): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1420/cgroup.controllers" dev="sda1" ino=15167 res=1 errno=0 [ 1853.890661][ T108] bond6: (slave bridge9): failed to get link speed/duplex [ 1853.914161][ T4594] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1853.948663][ T108] bond3: (slave gretap1): failed to get link speed/duplex 10:11:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6d00}, 0x0) 10:11:17 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x68}, 0x0) 10:11:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000000f000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0300fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:18 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14f00000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:18 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x6c}, 0x0) [ 1854.222579][ T4604] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039020511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0224fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1854.584038][ T4605] bond897: (slave bridge1128): making interface the new active one [ 1854.646323][ T4605] bond897: (slave bridge1128): Enslaving as an active interface with an up link 10:11:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0724fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039040511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1854.707623][ T4611] 8021q: adding VLAN 0 to HW filter on device bond897 [ 1854.810660][ T4611] team0: Port device bond897 added 10:11:18 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000300800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1855.039804][ T4604] bond897: (slave bridge1129): Enslaving as an active interface with a down link 10:11:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6e00}, 0x0) 10:11:19 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x74}, 0x0) 10:11:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x101}, {0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}, 0xfff9, [0x1, 0x1, 0xfffffffc, 0x6, 0x2, 0x0, 0xff]}, 0x5c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffffb157e2564599b21338fe3d8aa0b2b7d12477667be3c7655666ee4bda696a0c15dba395a1c6078b3f90533b7d942838d79d088b9824e34e49eb298453f622a8920f43815a1bb59997ec726b"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept(r1, &(0x7f0000000700)=@ipx, &(0x7f00000017c0)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv4_delroute={0x3c, 0x19, 0x601, 0x70bd29, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x0, 0x0, 0x2, 0x0, 0xf, 0x100}, [@RTA_OIF={0x8}, @RTA_FLOW={0x8}, @RTA_FLOW={0x8, 0xb, 0x5}, @RTA_SRC={0x8, 0x2, @remote}]}, 0x3c}}, 0xc1) r6 = socket(0x22, 0x80000, 0x8) r7 = accept4$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001800)={r6}) sendfile(r4, r1, 0x0, 0x100000516) 10:11:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0824fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039050511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:19 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000500800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1855.375184][ T37] audit: type=1804 audit(1621764679.283:558): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1422/cgroup.controllers" dev="sda1" ino=15189 res=1 errno=0 10:11:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0b24fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039060511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:19 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x7a}, 0x0) [ 1855.445828][ T4688] validate_nla: 1 callbacks suppressed [ 1855.445845][ T4688] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60020035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039070511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:19 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000600800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1855.790246][ T4691] bond898: (slave bridge1130): making interface the new active one [ 1855.885712][ T4691] bond898: (slave bridge1130): Enslaving as an active interface with an up link [ 1855.943281][ T4694] 8021q: adding VLAN 0 to HW filter on device bond898 [ 1855.997169][ T4694] team0: Port device bond898 added [ 1856.094969][ T4691] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1856.177676][ T4691] bond898: (slave bridge1131): Enslaving as an active interface with a down link 10:11:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x6f00}, 0x0) 10:11:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0xa, 0x7fff) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0xff, 0x13, 0x1}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="ee0000e3dc82e8bb"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) socket$inet(0x2, 0x3, 0x7) 10:11:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60040035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039080511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:20 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xc0}, 0x0) 10:11:20 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000700800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039090511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:20 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000900800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60060035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1856.534533][ T37] audit: type=1804 audit(1621764680.443:559): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1423/cgroup.controllers" dev="sda1" ino=15208 res=1 errno=0 [ 1856.546213][ T4759] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:20 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x106}, 0x0) [ 1856.704433][ T4762] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60080035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000390e0511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1857.070920][ T4765] bond899: (slave bridge1132): making interface the new active one [ 1857.114976][ T4765] bond899: (slave bridge1132): Enslaving as an active interface with an up link [ 1857.134736][ T4771] 8021q: adding VLAN 0 to HW filter on device bond899 [ 1857.164519][ T4771] team0: Port device bond899 added 10:11:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7000}, 0x0) 10:11:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc600a0035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000390f0511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$TUNSETLINK(r1, 0x8912, 0x304) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffe7, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="a5000000f2000be3090000000000000000bd5500", @ANYRES32, @ANYRESOCT=r1], 0xa4}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x67, 0x80, 0x80000000, 0x3, 0x3, 0x7, 0x143, 0x40, 0x1b7, 0x1ff, 0x0, 0x38, 0x2, 0x73ed, 0x3, 0x6}, [{0x323a72af, 0x0, 0x6, 0x463, 0x80000000, 0x4, 0x0, 0xffff}, {0x4, 0xff, 0x0, 0x1, 0x6, 0x57e, 0x4, 0x7fff}], "c265b57744514984303c4c7af9baa0b5b8e809a06e9e11a887e7b01b41654652daa10d6cacfa", ['\x00', '\x00']}, 0x2d6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:21 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x110}, 0x0) [ 1857.194518][ T4762] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:21 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000a00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc600c0035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:21 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x300}, 0x0) 10:11:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039600511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1857.460627][ T4840] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1857.485093][ T37] audit: type=1804 audit(1621764681.393:560): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1424/cgroup.controllers" dev="sda1" ino=14195 res=1 errno=0 [ 1857.737300][ T4871] net_ratelimit: 47 callbacks suppressed [ 1857.737319][ T4871] openvswitch: netlink: Message has 2 unknown bytes. 10:11:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0300fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60586535400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1857.939400][ T4842] bond900: (slave bridge1133): making interface the new active one [ 1858.027185][ T4842] bond900: (slave bridge1133): Enslaving as an active interface with an up link [ 1858.060150][ T4896] openvswitch: netlink: Message has 2 unknown bytes. [ 1858.137025][ T4855] 8021q: adding VLAN 0 to HW filter on device bond900 [ 1858.169723][ T4899] openvswitch: netlink: Message has 2 unknown bytes. [ 1858.190739][ T4855] team0: Port device bond900 added [ 1858.197943][ T37] audit: type=1804 audit(1621764682.103:561): pid=4841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1424/cgroup.controllers" dev="sda1" ino=14195 res=1 errno=0 10:11:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0224fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1858.261324][T29674] bond6: (slave bridge9): failed to get link speed/duplex [ 1858.287798][ T9] bond1: (slave bridge1): failed to get link speed/duplex [ 1858.317704][ T4840] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1858.381882][ T9] bond6: (slave bridge9): failed to get link speed/duplex 10:11:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7100}, 0x0) 10:11:22 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000b00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:22 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x500}, 0x0) 10:11:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60008135400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000200)={{r0}, 0x2, &(0x7f0000000100)=[0x5, 0x9], 0x1, 0x4, [0xfffffffffffffffe, 0x97, 0x7ff, 0x7ff]}) openat$cgroup_ro(r0, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @loopback}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) mmap(&(0x7f0000177000/0x1000)=nil, 0x1000, 0x5800008, 0x100010, r1, 0x296b3000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r2, 0x0, 0x100000516) 10:11:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0324fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1858.431639][ T4902] openvswitch: netlink: Message has 2 unknown bytes. [ 1858.463704][ T9] bond1: (slave bridge1): failed to get link speed/duplex [ 1858.528841][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1858.557751][ T57] bond6: (slave bridge9): failed to get link speed/duplex 10:11:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100235400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:22 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x600}, 0x0) [ 1858.676030][ T4917] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:22 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000c00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0724fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100435400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100535400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1859.067438][ T4920] bond901: (slave bridge1134): making interface the new active one [ 1859.161238][ T4920] bond901: (slave bridge1134): Enslaving as an active interface with an up link [ 1859.264199][ T4936] 8021q: adding VLAN 0 to HW filter on device bond901 [ 1859.312066][ T4936] team0: Port device bond901 added [ 1859.368682][ T4917] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7200}, 0x0) 10:11:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0824fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100635400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:23 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x601}, 0x0) [ 1859.498362][ T37] audit: type=1804 audit(1621764683.413:562): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1425/cgroup.controllers" dev="sda1" ino=14226 res=1 errno=0 [ 1859.662163][ T37] audit: type=1804 audit(1621764683.433:563): pid=4933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1425/cgroup.controllers" dev="sda1" ino=14226 res=1 errno=0 [ 1859.732521][ T4989] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00de0029cc76de21d33ef1ffff00"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000008c0)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@ipv6_getaddr={0x34, 0x16, 0x400, 0x70bd25, 0x25dfdbfb, {0xa, 0x8, 0x2, 0xfd}, [@IFA_FLAGS={0x8, 0x8, 0x320}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x40004) sendfile(r3, r1, 0x0, 0x100000516) 10:11:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0b24fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:23 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000e00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100735400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:23 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x700}, 0x0) [ 1860.014409][ T4992] bond902: (slave bridge1135): making interface the new active one [ 1860.133752][ T4992] bond902: (slave bridge1135): Enslaving as an active interface with an up link 10:11:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60020035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100835400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1860.196018][ T4989] 8021q: adding VLAN 0 to HW filter on device bond902 [ 1860.292952][ T4989] team0: Port device bond902 added [ 1860.319063][ T37] audit: type=1804 audit(1621764684.233:564): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1426/cgroup.controllers" dev="sda1" ino=14035 res=1 errno=0 [ 1860.410484][ T4989] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60040035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:24 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000f00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7300}, 0x0) 10:11:24 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x718}, 0x0) 10:11:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100935400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1860.732238][ T5061] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00cbe78bcbdaa2"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60060035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:24 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14001100800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100e35400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:24 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x900}, 0x0) [ 1861.047281][ T5065] bond903: (slave bridge1136): making interface the new active one [ 1861.068979][ T37] audit: type=1804 audit(1621764684.983:565): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1427/cgroup.controllers" dev="sda1" ino=14209 res=1 errno=0 10:11:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60070035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100f35400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1861.166738][ T5065] bond903: (slave bridge1136): Enslaving as an active interface with an up link 10:11:25 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xa00}, 0x0) [ 1861.259430][ T5061] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1861.267229][ T37] audit: type=1800 audit(1621764684.983:566): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=14209 res=0 errno=0 [ 1861.284542][ T5067] 8021q: adding VLAN 0 to HW filter on device bond903 10:11:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0xfff, 0x3f, 0x9, 0x1000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) sendfile(r6, r1, 0x0, 0x100000516) [ 1861.406923][ T37] audit: type=1804 audit(1621764685.023:567): pid=5106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1427/cgroup.controllers" dev="sda1" ino=14209 res=1 errno=0 [ 1861.421518][ T5067] team0: Port device bond903 added 10:11:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7400}, 0x0) 10:11:25 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b145d1200800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc600a0035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:25 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x1001}, 0x0) 10:11:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60106035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32=r0, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc600c0035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:25 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14655800800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1861.807258][ T5138] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc6010003540030002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:25 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x1100}, 0x0) [ 1862.028792][ T37] audit: type=1804 audit(1621764685.943:568): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1429/cgroup.controllers" dev="sda1" ino=13985 res=1 errno=0 [ 1862.044022][ T5184] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1862.140586][ T5140] bond904: (slave bridge1137): making interface the new active one [ 1862.173038][ T5140] bond904: (slave bridge1137): Enslaving as an active interface with an up link [ 1862.185859][ T5149] 8021q: adding VLAN 0 to HW filter on device bond904 [ 1862.205737][ T5149] team0: Port device bond904 added [ 1862.229878][ T5178] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60586535400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1862.258546][ T5138] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc6010003540090002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7500}, 0x0) 10:11:26 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14125d00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:26 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x1800}, 0x0) 10:11:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0941e4a4dc0521925ffb364a7f1018dcb4c9ad2ba616204e75e7e6ce200b99a1b9e304cb565913de46eaac613a8d99cf693dc9ceb666ca642d42276b63f95b4a810d48516c70fea5d48f3ae363e31dcd25ac693375ca39a0b2e67f460dbf9291b939f79a433f6f61efa3f0d7359ccff728bb5c58ad586d87aca2775b5cdf1d0cf821d927363e74baae0a010ea863fdd150d2098743d3b9c7a832d8222056a97921324025105def1a59ff8a09d65815abaf8a4405665ef5e79a555c7c45d9f250257dfc0831590fec71b5b591b57eb368c9b89101d6"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffff51fbd4e545ffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60008135400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc6010003540160002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1862.589411][ T5202] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc6010003540280002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1862.771494][ T5219] net_ratelimit: 67 callbacks suppressed [ 1862.771525][ T5219] openvswitch: netlink: Flow key attr not present in new flow. [ 1862.825995][ T5236] openvswitch: netlink: Message has 2 unknown bytes. 10:11:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100235400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1862.863385][ T37] audit: type=1804 audit(1621764686.773:569): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1430/cgroup.controllers" dev="sda1" ino=13844 res=1 errno=0 [ 1862.888456][ T3974] bond1: (slave bridge1): failed to get link speed/duplex 10:11:26 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14006000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1862.999097][ T5206] bond905: (slave bridge1138): making interface the new active one [ 1863.044838][ T5255] openvswitch: netlink: Message has 2 unknown bytes. [ 1863.076153][ T5256] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'. 10:11:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100435400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1863.118629][ T5206] bond905: (slave bridge1138): Enslaving as an active interface with an up link [ 1863.121363][ T5256] openvswitch: netlink: Flow key attr not present in new flow. [ 1863.187611][ T3974] bond6: (slave bridge9): failed to get link speed/duplex [ 1863.225743][ T5202] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x1807}, 0x0) 10:11:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0202000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1863.260422][ T5206] 8021q: adding VLAN 0 to HW filter on device bond905 [ 1863.332373][ T5206] team0: Port device bond905 added [ 1863.363455][ T5262] openvswitch: netlink: Message has 2 unknown bytes. [ 1863.388378][ T57] bond6: (slave bridge9): failed to get link speed/duplex [ 1863.395639][ T57] bond1: (slave bridge1): failed to get link speed/duplex [ 1863.450016][ T3974] bond3: (slave gretap1): failed to get link speed/duplex [ 1863.472518][ T37] audit: type=1804 audit(1621764687.383:570): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1430/cgroup.controllers" dev="sda1" ino=13844 res=1 errno=0 10:11:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7600}, 0x0) 10:11:27 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14586500800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100535400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1863.536092][ T5265] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'. 10:11:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000180)=0x3f, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r1, 0x0, 0x100000516) 10:11:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x1f00}, 0x0) 10:11:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0402000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:27 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14007000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100635400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1863.801781][ T5274] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100735400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0502000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1864.109726][ T37] audit: type=1804 audit(1621764688.023:571): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1431/cgroup.controllers" dev="sda1" ino=14659 res=1 errno=0 10:11:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100835400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1864.180725][ T5279] bond906: (slave bridge1139): making interface the new active one [ 1864.235191][ T5279] bond906: (slave bridge1139): Enslaving as an active interface with an up link [ 1864.251345][ T5306] 8021q: adding VLAN 0 to HW filter on device bond906 [ 1864.305991][ T5306] team0: Port device bond906 added [ 1864.322937][ T5327] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1864.341197][ T5333] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1864.358456][ T5274] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100935400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7700}, 0x0) 10:11:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0602000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:28 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x224e}, 0x0) [ 1864.679005][ T5342] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1864.706646][ T5344] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'. 10:11:28 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14008100800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1864.787870][ T37] audit: type=1804 audit(1621764688.693:572): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1431/cgroup.controllers" dev="sda1" ino=14659 res=1 errno=0 10:11:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100e35400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0702000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1865.073915][ T5345] bond907: (slave bridge1140): making interface the new active one 10:11:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100f35400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1865.134029][ T5391] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1865.183711][ T5345] bond907: (slave bridge1140): Enslaving as an active interface with an up link [ 1865.246544][ T5342] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:29 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x234e}, 0x0) [ 1865.301471][ T5347] 8021q: adding VLAN 0 to HW filter on device bond907 10:11:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0802000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60106035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:29 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400f000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1865.406671][ T5347] team0: Port device bond907 added 10:11:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7800}, 0x0) [ 1865.511697][ T5400] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'. 10:11:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) mmap(&(0x7f000089b000/0x1000)=nil, 0x1000, 0x4, 0x70, r4, 0x43807000) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=@newtaction={0x1558, 0x30, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{0x144, 0x1, [@m_bpf={0x88, 0xa, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x0, 0xf8, 0x5, 0x7}, {0xb5f3, 0x7, 0x1f, 0x3}, {0x8, 0xc0, 0x20, 0x2}, {0x5, 0x3, 0x1, 0x4a400000}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x1f, 0x6, "27609d4b340c70d94531821bde93b92ad92d94d583f79109060345"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xb8, 0x16, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x80000000, 0x7, 0x400, 0xdc18}, 0x3}}, @TCA_MPLS_BOS={0x5}]}, {0x67, 0x6, "7a869bf306a6ec7cc8234a9e1f3e291ee269f7eb7907c8c7b618091d2617fe2136b4746a0b9433cfdbd08fda7d693ebc21b6f41a137922323b68783dcef6434cd06532bc98072a658e3afa415d1e85eea26b010c6bd82638889764d40412cb51f54555"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x12f4, 0x1, [@m_csum={0x1084, 0x16, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x4, 0xffffffffffffffff, 0x5, 0x4}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xa754, 0x4, 0x17, 0xffff}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x7, 0x1, 0x6, 0x1000}, 0x2a}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x154, 0x19, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x233b, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1f72, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xb16, 0x1, 0x7, 0x80000001}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5de, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc9f}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xdf4, 0x10000000}}]}, {0xd1, 0x6, "fdd6095fe496a778e92d794477d872db6ed119142e82a6a688aee6611427f386ffa573aa2a10571714b769f4857188742e00eae95caab96778ec926474b7a237cf9a4ca91500bd1d813ce16daa23cc43a1694f78dc983d9862ab3df1d5c3abf89e9c9072d2ab79ec7f8d6a3eba3853e0e6206cf07b140b48dbad292325adcb1038ddca9d87c6ff46f256bd8129761fe36daf9664da5f5bb74e858cfe734026d7807fd24e1ec7c1db2b8ed8b3fbaa7c5eea470bb73310813fbc83afbc8f20a7a9e1f3f563f94845722739013eab"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x118, 0x11, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xa0d}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0xd3, 0x6, "369344c0f232d3182da56cb4de343ea1d0b976f848b874ab73bf703a7069265307cddad301ececf688cc932dda05cab6ba241e9252f26c1fb4e4664e6e56555bf1debd7fecfeca28993c43076c16e85f1b3824a58662728d32b4ae262ee9613246601e4044aea4610710171dc75b6ec1a839dc3359270ba1f47ad6f36a2fc001f81950b45cbb4178dcab2034f558a9d8be72f483328c88c3b2b0fb682d1edd6939a113047f01e7b1c9eaac5fcf931726fb1170aa40f82abdd2f89e04fbd80aed196f57b244ba04162d6f7bcdc3ed40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x10c, 0x1, [@m_vlan={0x108, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x404}]}, {0xd3, 0x6, "819505688cdbf3e83d2329112dbe69a965d52302100b064de13888d4394d15f899f4ce9b467b7661dd54016589e8904315dfe00330c879f48a16600522804f40caeb79c41923ddd12031cc9209344001cc269ee87dc241949e0f2af8b1b9cc96c06d4d316babb615285f9d888c225fd5a7c00646e9db6c48388ff82b92c26ab2cb48b32dc506b108cb068c5f4fde14b7deb14f50b0aba6c2e9d5a825888f8daea7c022ad58f9bb4a5d96eb8caf7d89c53ad7644c363ca9ef7b189a6f8d5d45c837a1447813bdb31a3f861c832a911e"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x1558}}, 0x20040015) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff53a9a01267d75edb00", @ANYRES32=r7], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x800, 0x70bd29, 0x25dfdc00, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x66e9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r8, r1, 0x0, 0x100000516) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000001d40)={{r4}, "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"}) 10:11:29 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x244e}, 0x0) 10:11:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0902000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:29 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000200800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc6010003540030002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1865.758809][ T5410] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1865.862102][ T5419] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1865.883436][ T37] audit: type=1804 audit(1621764689.793:573): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1432/cgroup.controllers" dev="sda1" ino=14035 res=1 errno=0 10:11:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc6010003540080002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0e02000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1866.194969][ T5414] bond908: (slave bridge1141): making interface the new active one 10:11:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc6010003540160002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1866.307557][ T5414] bond908: (slave bridge1141): Enslaving as an active interface with an up link 10:11:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0f02000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:30 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x2c4e}, 0x0) [ 1866.452923][ T5410] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:30 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000300800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7900}, 0x0) 10:11:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc6010003540280002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x1) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x80000001, 0x7ffffffe, 0x2, 0x0, 0xc9, 0x804}, {0x3a00ccd2, 0x8, 0x9d48, 0x8, 0x9, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) 10:11:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c6002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:30 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x3f00}, 0x0) 10:11:30 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000400800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1866.966771][ T5484] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0202000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1867.035044][ T37] audit: type=1804 audit(1621764690.943:574): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1433/cgroup.controllers" dev="sda1" ino=14610 res=1 errno=0 10:11:31 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4800}, 0x0) 10:11:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0003000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1867.254640][ T5492] 8021q: adding VLAN 0 to HW filter on device bond909 [ 1867.323404][ T5492] team0: Port device bond909 added [ 1867.368971][ T5536] __nla_validate_parse: 6 callbacks suppressed [ 1867.368991][ T5536] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1867.448548][ T5505] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1867.486164][ T5484] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000b000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:31 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4c00}, 0x0) 10:11:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0402000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7a00}, 0x0) 10:11:31 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000500800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1867.848036][ T5549] net_ratelimit: 76 callbacks suppressed [ 1867.848056][ T5549] openvswitch: netlink: Flow actions attr not present in new flow. [ 1867.867558][ T9] bond6: (slave bridge9): failed to get link speed/duplex [ 1867.893525][ T25] bond1: (slave bridge1): failed to get link speed/duplex [ 1867.937184][ T25] bond3: (slave gretap1): failed to get link speed/duplex [ 1867.983157][ T5552] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1868.246669][ T5556] bond910: (slave bridge1143): making interface the new active one [ 1868.305517][ T5556] bond910: (slave bridge1143): Enslaving as an active interface with an up link [ 1868.351553][ T5558] 8021q: adding VLAN 0 to HW filter on device bond910 [ 1868.425613][ T5558] team0: Port device bond910 added [ 1868.489795][ T5556] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1868.538814][T29674] bond3: (slave gretap1): failed to get link speed/duplex [ 1868.545999][T29674] bond6: (slave bridge9): failed to get link speed/duplex [ 1868.615521][T29674] bond1: (slave bridge1): failed to get link speed/duplex [ 1868.673430][ T3974] bond3: (slave gretap1): failed to get link speed/duplex [ 1868.717331][ T3974] bond6: (slave bridge9): failed to get link speed/duplex [ 1868.770056][T29674] bond1: (slave bridge1): failed to get link speed/duplex 10:11:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000685000/0x2000)=nil, 0x2000, 0x2000001, 0x30, r1, 0xb8743000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x4000) r2 = accept(r0, 0x0, &(0x7f0000000180)) getpeername$netrom(r2, &(0x7f00000006c0)={{0x3, @null}, [@rose, @null, @remote, @netrom, @rose, @remote, @default, @null]}, &(0x7f0000000740)=0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r3, 0x0, 0x100000516) 10:11:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0502000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:32 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4e22}, 0x0) 10:11:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0003000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:32 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000600800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7b00}, 0x0) [ 1868.981951][ T5606] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1869.043259][ T5610] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. 10:11:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0008000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:33 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4e23}, 0x0) [ 1869.165452][ T37] audit: type=1804 audit(1621764693.073:575): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1434/cgroup.controllers" dev="sda1" ino=14713 res=1 errno=0 [ 1869.235855][ T5612] bond911: (slave bridge1144): making interface the new active one 10:11:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0602000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1869.300794][ T5612] bond911: (slave bridge1144): Enslaving as an active interface with an up link 10:11:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000b000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1869.375591][ T5645] 8021q: adding VLAN 0 to HW filter on device bond911 [ 1869.421412][ T5660] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1869.422864][ T5645] team0: Port device bond911 added [ 1869.480959][ T5608] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:33 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000700800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0702000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1869.540136][ T5612] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1869.763170][ T5667] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. 10:11:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002020200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:33 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4e24}, 0x0) 10:11:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7c00}, 0x0) 10:11:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0802000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:33 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000800800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x44, 0x1, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x7}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000180)=0x3, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x268, 0x0, 0x5, 0x600, 0x0, 0x0, {0xa, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x1}, 0x2, 0xfc, 0xdd, 0x1, 0x28, 'syz0\x00', "bff59d6c1a74ad980d2386fb43edaef3a20668035cc9b5a353d4522d4a9ddaff", "92ff46b2211ec87f517955eb6b2e35c5fae301aacc129c6e2a7c78b0f9627fa3", [{0xa29, 0x0, {0x3, 0x5}}, {0xf2, 0x9, {0x1, 0x5}}, {0x5, 0x6, {0x3, 0x1f}}, {0x100, 0xfc01, {0x0, 0x20}}, {0x401, 0x0, {0x2, 0x3}}, {0x4, 0x9, {0x0, 0x6}}, {0x4, 0x2, {0x3, 0x400}}, {0x185e, 0x0, {0x1, 0x12}}, {0x800, 0xe016, {0x2, 0xffffffff}}, {0x7, 0x401, {0x0, 0x4}}, {0xd9c6, 0xd8, {0x1, 0x3}}, {0x4, 0x1f, {0x2, 0x1000}}, {0x7, 0xffff, {0x3, 0x40}}, {0x9, 0x9, {0x3, 0x9}}, {0x2, 0x9, {0x1, 0x5}}, {0x8, 0xffff, {0x1, 0x7}}, {0x4, 0x0, {0x0, 0x26}}, {0x386, 0x6, {0x3, 0x5}}, {0x1ff, 0x3, {0x3, 0x180}}, {0x0, 0x8001, {0x3, 0x1}}, {0x1, 0x8, {0x2}}, {0x0, 0x2, {0x1, 0x7}}, {0x9, 0x6, {0x3, 0x9}}, {0x81, 0x5, {0x0, 0x8000}}, {0x8718, 0x8, {0x2, 0xc90b}}, {0x8, 0x3, {0x3, 0x4}}, {0xff01, 0x0, {0x1, 0x5}}, {0x9d5, 0x1, {0x0, 0x800}}, {0x4, 0x3, {0x1, 0x7fff}}, {0x3e, 0x81, {0x2, 0x4}}, {0x8, 0x97e, {0x2, 0x8}}, {0x6, 0x8, {0x3, 0xffff}}, {0x1, 0x6, {0x2, 0x6}}, {0x3, 0x5, {0x1, 0x5}}, {0x604b, 0x0, {0x1, 0x34e}}, {0xb6, 0x6, {0x0, 0xea}}, {0x1, 0x7ff, {0x2, 0x100}}, {0x7fff, 0x38e1, {0x3, 0x401}}, {0x7, 0x9}, {0x8, 0xd5, {0x2, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44000000}, 0x20000000) sendfile(r5, r2, 0x0, 0x100000516) ioctl$sock_ifreq(r6, 0x8917, &(0x7f0000000200)={'macsec0\x00', @ifru_names}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@local, @local}, 0x8) 10:11:34 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4e2c}, 0x0) 10:11:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002040200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1870.123361][ T5682] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1870.133015][ T5681] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1870.292570][ T5686] bond912: (slave bridge1145): making interface the new active one [ 1870.315055][ T37] audit: type=1804 audit(1621764694.223:576): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1435/cgroup.controllers" dev="sda1" ino=14803 res=1 errno=0 10:11:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0902000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1870.357339][ T5686] bond912: (slave bridge1145): Enslaving as an active interface with an up link 10:11:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002050200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1870.417585][ T5681] 8021q: adding VLAN 0 to HW filter on device bond912 [ 1870.453334][ T5681] team0: Port device bond912 added [ 1870.473659][ T5690] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1870.511222][ T5735] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1870.561460][ T5686] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:34 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000900800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:34 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x6300}, 0x0) 10:11:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0e02000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7d00}, 0x0) 10:11:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002060200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1870.857949][ T5746] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. 10:11:34 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000a00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002070200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0f02000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1871.024755][ T5753] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:35 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x6800}, 0x0) 10:11:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002080200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002090200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1871.361461][ T5756] bond913: (slave bridge1147): making interface the new active one 10:11:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c6002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1871.452665][ T5756] bond913: (slave bridge1147): Enslaving as an active interface with an up link 10:11:35 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000b00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1871.550386][ T5753] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:35 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x6c00}, 0x0) 10:11:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7e00}, 0x0) [ 1871.864424][ T37] audit: type=1804 audit(1621764695.774:577): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1436/cgroup.controllers" dev="sda1" ino=14915 res=1 errno=0 [ 1871.892978][ T5824] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1871.995072][ T37] audit: type=1804 audit(1621764695.804:578): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1436/cgroup.controllers" dev="sda1" ino=14915 res=1 errno=0 10:11:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0003000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020e0200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:36 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000c00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:36 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x7400}, 0x0) 10:11:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5a, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRESOCT=r4], 0xa4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="5401f4ff07000000850000001a0000004d5a1800fcffffff61e8c900080000008500000027000000c788c0ffffffffff18000000010000000000000001000000850000003b000000850000006600000018250000", @ANYRES32=r1, @ANYBLOB="00000000082306ad"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x64, &(0x7f0000000280)=""/100, 0x40f00, 0x5, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xe, 0x2, 0x2}, 0x10}, 0x78) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x100000001, 0x7ff}) sendfile(r5, r1, 0x0, 0x100000516) [ 1872.229285][ T5825] bond914: (slave bridge1148): making interface the new active one [ 1872.318775][ T5825] bond914: (slave bridge1148): Enslaving as an active interface with an up link [ 1872.392315][ T5827] 8021q: adding VLAN 0 to HW filter on device bond914 10:11:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020f0200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000b000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1872.455446][ T5827] team0: Port device bond914 added [ 1872.524746][ T5824] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:36 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x7a00}, 0x0) 10:11:36 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000e00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1872.560431][ T37] audit: type=1804 audit(1621764696.474:579): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1437/cgroup.controllers" dev="sda1" ino=15215 res=1 errno=0 10:11:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x7f00}, 0x0) 10:11:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002600200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0003000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:36 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xc000}, 0x0) 10:11:36 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000f00800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1872.934449][ T5890] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1872.938808][ T5892] net_ratelimit: 80 callbacks suppressed [ 1872.938826][ T5892] openvswitch: netlink: Flow actions attr not present in new flow. 10:11:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0008000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1873.006398][ T5893] openvswitch: netlink: Flow actions attr not present in new flow. 10:11:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000b000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) [ 1873.316599][ T5894] bond915: (slave bridge1149): making interface the new active one [ 1873.332144][ T5942] openvswitch: netlink: Flow actions attr not present in new flow. 10:11:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000300000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1873.374097][ T5894] bond915: (slave bridge1149): Enslaving as an active interface with an up link [ 1873.401864][ T5896] 8021q: adding VLAN 0 to HW filter on device bond915 10:11:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002020200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1873.454390][ T5896] team0: Port device bond915 added [ 1873.519656][ T3974] bond6: (slave bridge9): failed to get link speed/duplex [ 1873.547044][ T25] bond3: (slave gretap1): failed to get link speed/duplex [ 1873.560978][ T5946] openvswitch: netlink: Message has 2 unknown bytes. 10:11:37 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xff00}, 0x0) 10:11:37 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14001000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1873.583602][ T5890] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8100}, 0x0) [ 1873.656798][ T25] bond1: (slave bridge1): failed to get link speed/duplex [ 1873.671691][ T5951] openvswitch: netlink: Flow actions attr not present in new flow. 10:11:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000b00000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1873.728030][ T3974] bond6: (slave bridge9): failed to get link speed/duplex [ 1873.735205][ T3974] bond3: (slave gretap1): failed to get link speed/duplex 10:11:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002040200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000040)={&(0x7f0000000200)=""/74, 0x4a, 0x5, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000518) 10:11:37 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14001100800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1873.923475][ T5959] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000300000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002050200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000800000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1874.216101][ T5963] bond916: (slave bridge1150): making interface the new active one [ 1874.310761][ T5963] bond916: (slave bridge1150): Enslaving as an active interface with an up link 10:11:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002060200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1874.364825][ T5990] 8021q: adding VLAN 0 to HW filter on device bond916 [ 1874.388591][ T37] audit: type=1804 audit(1621764698.294:580): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1439/cgroup.controllers" dev="sda1" ino=15216 res=1 errno=0 [ 1874.452917][ T5990] team0: Port device bond916 added 10:11:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000b00000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x34000}, 0x0) 10:11:38 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14006000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1874.578880][ T5963] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8200}, 0x0) 10:11:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x10000) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYBLOB="1eda76fecd45e71f3c52014aebc221c847e8a6f13f34010a03e5dcc8ca5933dd58a93c857ab48009b8a1cc2334c711aeab4fe18ecf067124b8e2ef2fb3e321bf5c025e1474d60064467d669116cfff0af43383881ad2e1235f0dc32f5331cdcb3c016f57873671ac217298339a14e2252012b32e5c05f3ac115872bef603a7923970ac8d0d394e11829d540d155606a1245842eafbc3c7bbc6620137eb3657841ae985c1c961aa974cac0e55dad88bf0a97db95536d9850632358396287e176e88e1b9e8884049679f8bd7635e478a29503d4ffdc2abc7ab54389d17d1aebec77b00dc74d9c1e62c", @ANYRESOCT=r2], 0x1d3a762) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000516) 10:11:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002070200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000202000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x40000}, 0x0) 10:11:38 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14007000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002080200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1874.993620][ T6036] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000100)="308effe0b1eff852b5360de58ac30cf307b039857a83651a9395149836649ace77662eabcd1fee90b8b8181595cf7f0ecb26", 0xffffffffffffffec, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {}, {0x20, '\x00'}, {0x20, '^,-\\.}}(,\'\\'}, {0x20, '\x00'}], 0xa, "912fdd031495e3bef953f344ce2b402ab7faea0d4ddbcef3f9c0636aa6ff17eabd12e216de85455d22d4106a7e09b6780fcefdae794db788457198e4f41564ec29899fb8da033ec5c5dea787b131f94ff597225f8408b15e8616591d3c9d7ef6227ea084a685d35bc28abfced3af9296347123e1d4e67eb54db2840bac07b53dc7d22c133b8c468ad5ab8cfb24e16b6c61d106025827c34d10f54fbc7f7b806ca124a6e13c08514150808a88dbbd3792d4"}, 0xe1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x401, 0x7, 0x208, 0x9, 0x8, 0x6, 0x200, 0x1}, 0x20) [ 1875.151944][ T6039] bond917: (slave bridge1151): making interface the new active one [ 1875.173293][ T6039] bond917: (slave bridge1151): Enslaving as an active interface with an up link [ 1875.212639][ T6039] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000204000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:39 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400f000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1875.292148][ T6039] 8021q: adding VLAN 0 to HW filter on device bond917 [ 1875.389550][ T6039] team0: Port device bond917 added 10:11:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002090200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x400300}, 0x0) 10:11:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8300}, 0x0) 10:11:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000205000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:39 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000003800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x1000000}, 0x0) 10:11:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020e0200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000206000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1875.984452][ T6126] 8021q: adding VLAN 0 to HW filter on device bond918 10:11:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020f0200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1876.068793][ T6126] team0: Port device bond918 added [ 1876.135691][ T6104] validate_nla: 1 callbacks suppressed [ 1876.135711][ T6104] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000207000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:40 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x2000000}, 0x0) 10:11:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r5) 10:11:40 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000005800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002600200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8400}, 0x0) 10:11:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000208000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:40 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x3000000}, 0x0) 10:11:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000300000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1876.600505][ T6173] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:40 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000006800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000209000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000b00000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(r3, r0, 0x0, 0x80000001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="308effe0b1eff852b5360de58ac30cf307b039857a83651a9395149836649ace77662eabcd1fee90b8b8181595cf7f0ecb26", 0xffffffffffffffec, 0x0, 0x0, 0x0) r5 = accept4$phonet_pipe(r3, &(0x7f0000000040), &(0x7f0000000100)=0x10, 0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000100)="308effe0b1eff852b5360de58ac30cf307b039857a83651a9395149836649ace77662eabcd1fee90b8b8181595cf7f0ecb26", 0xffffffffffffffec, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000200)={0x3, 0x80000001, 0x7, 0x0, 0x0, [{{}, 0x100}, {{}, 0x808}, {{r5}, 0x5}, {{r1}, 0x3}, {{}, 0x200000000}, {{}, 0xc91}, {{r7}, 0xffff}]}) [ 1877.022706][ T6176] bond919: (slave bridge1154): making interface the new active one [ 1877.077628][ T6176] bond919: (slave bridge1154): Enslaving as an active interface with an up link [ 1877.120333][ T6180] 8021q: adding VLAN 0 to HW filter on device bond919 10:11:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000200020e000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1877.168528][ T6180] team0: Port device bond919 added 10:11:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000300000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1877.222594][ T6173] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:41 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4000000}, 0x0) 10:11:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='free_extent_state\x00', r1}, 0x10) sendfile(r3, r1, 0x0, 0x100000516) 10:11:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8500}, 0x0) 10:11:41 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000007800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000200020f000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000800000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1877.725995][ T6246] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x10, 0x10, 0x4, 0x5, {{0x4a, 0x4, 0x1, 0x5, 0x128, 0x67, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x7, 0x2}, {0x1, 0x10, "78ef0c5c260882b5266a24165be5"}, {0x2, 0x5, "9ae60f"}, {0x3, 0xc, "85c1cf139f87f1f3588f"}, {0x0, 0xf, "0e3a0990d799bd12aa65e34b08"}, {0x6, 0xb, "d27e50622f9aac1c29"}, {0x5, 0x7, "d7086d8b9b"}]}, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x9, [{@broadcast}, {@remote, 0xffffffff}]}, @end, @generic={0x94, 0x10, "853671d7c46e2168223918448b96"}, @cipso={0x86, 0x7c, 0x3, [{0x2, 0x10, "4bb927070e1860f2e5e110e91201"}, {0x1, 0xb, "b291fddc6f291c1f61"}, {0x7, 0x5, "73b1d3"}, {0xb910f6fb43fb8bd, 0x10, "a6d53915ad5d0c1f437d9393204b"}, {0x2, 0xe, "415d377be1ebf88a4f10228c"}, {0x1, 0xc, "8ff36e31a56e79b1a34a"}, {0x1, 0xe, "780a9b263832270c53b2ae29"}, {0x7, 0x8, "6671ec766364"}, {0x5, 0xf, "e7e54d2455538d0d25823b6e1d"}, {0x7, 0x7, "1fcb52f872"}]}, @cipso={0x86, 0xc, 0x3, [{0x6, 0x6, "046fd828"}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x6, [{@multicast2, 0x4}]}, @generic={0x86, 0xa, "543c7ee874d2600b"}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@mpls_delroute={0x28, 0x19, 0x200, 0x70bd28, 0x25dfdbfe, {0x1c, 0x10, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x2, 0x100}, [@RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x4a, 0x72, r4}}]}, 0x28}}, 0x80) r5 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r5, r1, 0x0, 0x100000516) 10:11:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000260000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1878.020942][ T37] audit: type=1804 audit(1621764701.934:581): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1445/cgroup.controllers" dev="sda1" ino=15237 res=1 errno=0 10:11:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000b00000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1878.124721][ T6298] net_ratelimit: 85 callbacks suppressed [ 1878.124742][ T6298] openvswitch: netlink: Message has 2 unknown bytes. [ 1878.149563][ T6252] bond920: (slave bridge1155): making interface the new active one [ 1878.209289][ T6252] bond920: (slave bridge1155): Enslaving as an active interface with an up link 10:11:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002f0000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1878.276292][ T6256] 8021q: adding VLAN 0 to HW filter on device bond920 [ 1878.358633][ T6256] team0: Port device bond920 added [ 1878.369357][ T6302] openvswitch: netlink: Message has 2 unknown bytes. [ 1878.435698][ T9] bond1: (slave bridge1): failed to get link speed/duplex [ 1878.487706][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1878.502732][ T6246] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:42 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000009800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x5000000}, 0x0) [ 1878.528677][ T3974] bond6: (slave bridge9): failed to get link speed/duplex 10:11:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000202000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8600}, 0x0) [ 1878.602933][T12366] bond3: (slave gretap1): failed to get link speed/duplex [ 1878.612077][ T6305] openvswitch: netlink: Message has 2 unknown bytes. [ 1878.640367][T12366] bond6: (slave bridge9): failed to get link speed/duplex [ 1878.736595][T12366] bond1: (slave bridge1): failed to get link speed/duplex [ 1878.776741][T12366] bond3: (slave gretap1): failed to get link speed/duplex 10:11:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200050037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1878.863485][ T6313] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000204000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x6000000}, 0x0) 10:11:43 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200060037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1879.310079][ T6317] bond921: (slave bridge1156): making interface the new active one [ 1879.394330][ T6317] bond921: (slave bridge1156): Enslaving as an active interface with an up link [ 1879.431993][ T6319] 8021q: adding VLAN 0 to HW filter on device bond921 [ 1879.475710][ T6319] team0: Port device bond921 added [ 1879.553909][ T6313] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="f3fffffffeffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000205000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:44 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000a800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:44 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x6010000}, 0x0) 10:11:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8700}, 0x0) 10:11:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200070037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1880.270370][ T6375] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000206000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1880.449064][ T6380] bond922: (slave bridge1157): making interface the new active one [ 1880.462409][ T6380] bond922: (slave bridge1157): Enslaving as an active interface with an up link 10:11:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000207000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200090037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1880.531598][ T6399] 8021q: adding VLAN 0 to HW filter on device bond922 10:11:44 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x7000000}, 0x0) [ 1880.605156][ T6399] team0: Port device bond922 added 10:11:44 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000b800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1880.712223][ T6375] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000208000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8800}, 0x0) 10:11:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002000e0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:44 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x7180000}, 0x0) 10:11:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="a9"], 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f000000b880)={&(0x7f000000b7c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000b840)={&(0x7f000000b800)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x41}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x6c, 0x28, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6, 0x2}, {0x2, 0x1}, {0x5, 0x1a}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x4}}, @TCA_RATE={0x6, 0x5, {0x50, 0x20}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xff, 0x30}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x10000}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x80}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004802}, 0x40000) 10:11:45 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000c800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000209000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002000f0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1881.150794][ T6445] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1881.433216][ T6449] bond923: (slave bridge1158): making interface the new active one [ 1881.446572][ T6449] bond923: (slave bridge1158): Enslaving as an active interface with an up link [ 1881.459855][ T6453] 8021q: adding VLAN 0 to HW filter on device bond923 10:11:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000200020e000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1881.517495][ T6453] team0: Port device bond923 added [ 1881.537629][ T6455] __nla_validate_parse: 2 callbacks suppressed [ 1881.537648][ T6455] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:45 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x8000000}, 0x0) [ 1881.604031][ T6445] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @loopback}, 0x1c) recvfrom$inet6(r2, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2], 0x53d62d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="000000008d60193d753d8000f966845d18be44107d7493e00743844eba8bb7bf4c602318d592bbef4448949249e3235af74486144d7fd5691d1d3a1bae196472ec1f5331c9f57bf35b3d84cb8ae80049cd22b1def323c2460d91cac29e55fd30e394b937315b6ce92ced7dbbfed5eb16be9f49c75b1c3bd19584ac7b9ecf7a1c3e5cb82f73b159734a9f01fc6d1d065672a014fe"], 0xa4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r3, 0x0, 0x100000516) 10:11:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000254130037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:45 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000e800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8900}, 0x0) 10:11:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000200020f000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:45 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x9000000}, 0x0) 10:11:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0xffffffe7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x10000) ioctl$TUNSETLINK(r2, 0x8912, 0x302) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="a500001fdb000be30943a773c900000000000000ba50acf703208d1b95e4081da6efef7866986641fd20587d483332bf988e00a626e7f45ac60200f167ccff98fd58f46b7986bace2f59d5562537a51478990101007f000000d890b4d7f84f9c93fa3ccf95f32437a4b47038df3aab5419f29c037b027e38f43c8da88d41bd66b2c89ac0fe5a3e0f9a3ab771e54d36927cbea7ca697ee81d68027ecb6c9a60bce24690d3d362b82e5c90d2014af366065a5c815e437160848130f255605c62fc1ec016122c47f310ccd0c235557b64e36e9ee53c6a1f0000000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000516) [ 1882.056635][ T6512] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002003f0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000260000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000213540037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002f0000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1882.421628][ T6515] bond924: (slave bridge1159): making interface the new active one 10:11:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x3, &(0x7f0000000300)=@framed={{}, [], {0x95, 0x8}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x1000, 0x5, 0x1000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r2, 0x0, 0x100000516) 10:11:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200600037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1882.535383][ T6515] bond924: (slave bridge1159): Enslaving as an active interface with an up link [ 1882.590227][ T6529] 8021q: adding VLAN 0 to HW filter on device bond924 [ 1882.633191][ T6529] team0: Port device bond924 added 10:11:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200050037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:46 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000f800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1882.733997][ T6512] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8a00}, 0x0) 10:11:46 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xa000000}, 0x0) 10:11:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200f00037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1882.879674][ T37] audit: type=1804 audit(1621764706.784:582): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1450/cgroup.controllers" dev="sda1" ino=15252 res=1 errno=0 10:11:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200060037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:47 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000011800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1883.104608][ T37] audit: type=1800 audit(1621764706.824:583): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15252 res=0 errno=0 10:11:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x2c, 0x66, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x9, 0xd}, {0x9, 0xd}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8885) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x80, 0x4) accept4$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c, 0xc0000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="af", 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000240)={&(0x7f0000000180)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="1e", 0x1}], 0x1}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)={r6, 0x0, 0x1, 'I'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r6, 0x5}, 0x3) 10:11:47 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200020037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1883.148037][ T25] net_ratelimit: 90 callbacks suppressed [ 1883.148055][ T25] bond3: (slave gretap1): failed to get link speed/duplex 10:11:47 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x10010000}, 0x0) [ 1883.228599][ T6587] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1883.261199][ T6590] openvswitch: netlink: Message has 2 unknown bytes. [ 1883.375213][ T6591] bond925: (slave bridge1160): making interface the new active one [ 1883.415149][ T6591] bond925: (slave bridge1160): Enslaving as an active interface with an up link [ 1883.426755][ T9557] bond3: (slave gretap1): failed to get link speed/duplex [ 1883.445144][ T37] audit: type=1804 audit(1621764706.824:584): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1450/cgroup.controllers" dev="sda1" ino=15252 res=1 errno=0 [ 1883.474314][T12385] bond1: (slave bridge1): failed to get link speed/duplex 10:11:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200070037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1883.519218][ T6591] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1883.520890][ T6635] openvswitch: netlink: Message has 2 unknown bytes. [ 1883.622235][ T6602] bond925: (slave bridge1161): Enslaving as an active interface with a down link [ 1883.623747][ T37] audit: type=1804 audit(1621764707.474:585): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1451/cgroup.controllers" dev="sda1" ino=15272 res=1 errno=0 10:11:47 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200040037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1883.675067][ T6591] 8021q: adding VLAN 0 to HW filter on device bond925 10:11:47 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14005d12800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1883.753942][ T6644] openvswitch: netlink: Message has 2 unknown bytes. [ 1883.764086][ T6591] team0: Port device bond925 added [ 1883.830115][ T3974] bond6: (slave bridge9): failed to get link speed/duplex [ 1883.859780][ T6648] openvswitch: netlink: Message has 2 unknown bytes. [ 1883.877485][ T57] bond1: (slave bridge1): failed to get link speed/duplex 10:11:47 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x11000000}, 0x0) 10:11:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8b00}, 0x0) 10:11:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200090037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1883.904338][ T108] bond3: (slave gretap1): failed to get link speed/duplex 10:11:47 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200050037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:48 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14006558800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002000e0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1884.179842][ T6658] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1884.334594][ T37] audit: type=1804 audit(1621764708.234:586): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1451/cgroup.controllers" dev="sda1" ino=15272 res=1 errno=0 10:11:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x18000000}, 0x0) 10:11:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='hugetlb.2MB.limit_in_bytes\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1b, &(0x7f00000006c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r7, r2, 0x0, 0x100000516) [ 1884.432591][ T6664] 8021q: adding VLAN 0 to HW filter on device bond926 10:11:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200060037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002000f0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1884.533440][ T6664] team0: Port device bond926 added [ 1884.594255][ T6658] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8c00}, 0x0) 10:11:48 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400125d800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x1f000000}, 0x0) 10:11:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200070037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x5) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040)=0x275, 0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) 10:11:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000215110037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200080037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:49 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000060800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1885.111298][ T6734] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:49 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x224e0000}, 0x0) 10:11:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000211150037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x1, 0x101, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) r2 = socket(0x0, 0x800000000000002, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000) accept4(r2, &(0x7f0000000200)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x80, 0x800) sendmmsg$sock(r1, &(0x7f0000002740)=[{{&(0x7f00000002c0)=@qipcrtr={0x2a, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000400)="3ccfeb2e4cd809148c97ec5cc1343e1a3410c2c45c6db473f7b2692bea238953d240c2b6ff0cb31791b77ef7b718dcc753df4a42ed26f900d06b967c2209617672e258a8b74ac2dd1dea6327687c9f1f6ab402c4c788154e8f482bd713096d4da33d138be9717ce89aec9f5add06253463cf0227688d828a7be8baef0d0929e568e83acf692d15e9a0e40c63b9eb68c47232e5f715f48c34828439265f429c93f202daf30080652cd655b63ffb90fa022191dea0b75dc836561d20dcb9c2fe40f1ef9a3b92259953", 0xc8}, {&(0x7f0000000500)="094428974f6f49d2b6ec6c29eb9886d67f69aec1b00cacbdd989a80fb415402c96a0496f72c29b5a033a5960eeb6a072eb17380c9e6f57de9d70504581c7eedf0c1542e66acaa8b8dac91200563d0b3182ff203ef25651a82db081701b6b4ac8c284d5cee7d19f31aa45f91e51fd86ab22c7035035260f3b4fa3ee609bb018ca6254", 0x82}, {&(0x7f00000005c0)="88bb7b3092bd19227c7e25c84c5c2877511da6357f8ff79c2ae7cd29fe265116c11b0672c501bb80991042c1f1f2059f1417431516ba376af4cd6222ffcc9f0455f723ad8b10e41672377b951f98ace3ad6f4a4da39db1b2f5c82babb13a10cf5daa3e9ab262353176260704ae374904bff5ea86c354fbd4b26176cce54e63cf369fd0a6f04d1dcb2f60c42e4d9dbb05d9e4bc0e7c9ead67643f5858bf7de0103daac60bd824d82c3158bb6de0d5d0d9b1b7792923cbc1f4a88961014a5994083d8b6dd54abba9", 0xc7}], 0x3, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x475}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}}, {{&(0x7f0000001040)=@isdn={0x22, 0x2, 0x1f, 0x1}, 0x80, &(0x7f0000000740)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000380)}], 0x2, &(0x7f00000020c0)=[@mark={{0x14, 0x1, 0x24, 0x100}}], 0x18}}, {{&(0x7f0000002100)=@ipx={0x4, 0x3, 0x6, "7ce32abb613e", 0x6}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002180)="7c462f46b7feaa810e5bf5c184d0df6039aba507945d8e135f2eb23d586e8794b99c55ccb9c7a7306347333b52ce4e71899f4f726a0d2950117c5f61c378040d043bea445fdd202668964c4bd12790a3f02a109d45bbfc09d71cf2e681300431733e9eba06181eef27097eb9bc3921c395d54776e6b0dcb3f17b59c18e03cf563bedcbf7e190340ac3a4ee3c38819ac174782c223b63dce3544ce9", 0x9b}, {&(0x7f0000002240)="11be0e13f3749dfa0354f3dfebd48a276d89f57d75415578ee765051a1b3be2ed2d3d21081088c29c0efadb2f2320f4b9c3bb890026006e81b5a862329a74f035cb71f421f63de6891dc7882f52a42c1b530680aa08ba2aab74cec8816fdb1824ce828b748cf36baf5299f9955f5f10a14a77482289fb2ac52c050afccdfa110799806be0013de22817a2bbf8b09cdf708873b190000ce6c68ec031e9b1cd514c3ed88937ad309f0504f8cefcb407dd2d20da97ba2e7efa8757e11869b085c2e204ed3fd3ec820c7668e8b7f63b24d17cc8412b93b50d19741bfe49eb97e9d368fbf146690b8a7d16a", 0xe9}, {&(0x7f0000002340)="a57268826464bfd754b8cccaa1039bf7fa67f38a07b856cebb5ee7ace8b6ec9d58644907ce609db151efd8569ca795fc789dd1f339444e79104f491627f648f68c1d75988901eb987945e91632ca00d0a71212d342ac5ef2c8fe4d388ede7e8e71ee", 0x62}, {&(0x7f00000023c0)="c147f1d91a9963f469113ae893c7c5c2d7e14c42e529bae866a239679d9a157d47326a78291b522cce14151c049c7db338de8e434a1f448ab3c227fba47ee62eb0ee6f729987f1d4010ec47f02e84b0a800e5faf4bed2e55dde7fa10df53a66a176a6cbe3534483e1a6dd886c9214a6d4e54d9c15ae59a2a84da064720d83c8f59fa7905d326aedbc5bd3dbcbb20d4ab86206785f41778c7", 0x98}], 0x4}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002540)="68eb6d8f699fa91bb495ecf10999e843cb8f832ef8e2666b0119e4b5bfd3de84da944d38429f3c6c5708f646c4b113b535d6f2b6cf1996f0f70026ca1871a1b71b2045eec4eeb78f5bd61d21f66fef0de094ac95b7248b150361291be22a67c832d86a74a6d53b6677149cb7e848fc0e72bb344fb754568d985e183138b844ec26cb6ce95058b3730552db41d98007482c5039b86cc9e1ee4a323a9e10d7ebcf4ba7db9d4df30dd2500118ce4c8404eec1c49d7c728aaeea51f5a47b4265fdf8c161a08e", 0xc4}], 0x1, &(0x7f0000002680)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xae}}], 0xc0}}], 0x4, 0x1) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)={'syz0'}, 0x4) write$binfmt_elf64(r0, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7, 0x0, 0x8, 0xbaff, 0x2, 0x3, 0x4, 0x2c0, 0x40, 0x1b7, 0x6, 0x2, 0x38, 0x2, 0x9000, 0x63d7, 0x7}, [{0x6474e551, 0x800, 0x4, 0x8001, 0x1, 0x5, 0x100000000, 0x4}], "14a4084e03a7b7f5b4dd8971a31339609d2f807ccf9a979206148a9f5f4df85a2090f36b44a705f71d4b97824fd72fc09798ed978fef0981e9f3c545362aec8dcd55352df1f97b9f948b6ce805d373f054b6ef757a0c2219657a36e7577edf8fb1a1474de0817425d2b2cbd5dc408fd62ac8473ee9cb3e0b1b8536fda99ed44054c0d27f7ce92f618d8acfbe9a59b77411f6d2a86c66087615f9adb78bbad1786fe1848e27900eec1c87de03f4567fdfe678e059c02c6108d2c9faeba5c34eb716832b097235a15d0b81459231b46c699f8be1edecbf686b17b377f67646633ffc16021d39921603a508d44dc2e8e96578", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x869) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r3, 0x0, 0x100000516) [ 1885.399168][ T6737] bond927: (slave bridge1164): making interface the new active one [ 1885.479805][ T6737] bond927: (slave bridge1164): Enslaving as an active interface with an up link 10:11:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002003f0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1885.553758][ T6752] 8021q: adding VLAN 0 to HW filter on device bond927 [ 1885.674765][ T6752] team0: Port device bond927 added [ 1885.774286][ T6734] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8d00}, 0x0) 10:11:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200090037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:49 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x234e0000}, 0x0) 10:11:49 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14005865800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200600037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000629000/0x3000)=nil, 0x3000, 0x4, 0x50, r2, 0x676fa000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) recvmsg$can_j1939(r0, &(0x7f0000000400)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000100)=""/33, 0x21}], 0x2, &(0x7f0000000380)=""/128, 0x80}, 0x80000021) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000004c0)={0xffffffffffffffff, r6, 0x84, 0x7b, &(0x7f0000000440)="1714209d85a9ae9b436f5c257721bced6957006b9b65eb86e0e9fcaf49e0078083cc1139a6ca1158262b3ecdb1444de4c19adf65f5789d3165a6d7af850e7a2f456162be546ed5e8d1f95c1c85a642aa28195aff92e5175e91e03c82c1181c9f49d92800409ce43ecc286cb3f581df866c97b68786755dbecd9413", 0x98, 0x9, 0x6, 0x400, 0x400, 0x2, 0xffffffff, 'syz0\x00'}) sendfile(r4, r1, 0x0, 0x100000516) 10:11:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002000e0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200f00037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:50 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000070800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:50 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x244e0000}, 0x0) [ 1886.358081][ T6822] bond928: (slave bridge1165): making interface the new active one 10:11:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002000f0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1886.391762][ T37] audit: type=1804 audit(1621764710.294:587): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1455/cgroup.controllers" dev="sda1" ino=13985 res=1 errno=0 [ 1886.458449][ T6822] bond928: (slave bridge1165): Enslaving as an active interface with an up link [ 1886.478258][ T6844] 8021q: adding VLAN 0 to HW filter on device bond928 10:11:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200020037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1886.505746][ T6844] team0: Port device bond928 added [ 1886.522630][ T6860] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1886.585858][ T6811] validate_nla: 1 callbacks suppressed [ 1886.585876][ T6811] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8e00}, 0x0) 10:11:50 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x2c4e0000}, 0x0) 10:11:50 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000081800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200600037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200040037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1886.987940][ T6878] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1887.046329][ T37] audit: type=1804 audit(1621764710.944:588): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1455/cgroup.controllers" dev="sda1" ino=13985 res=1 errno=0 10:11:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200f00037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:51 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x36cd6b7c}, 0x0) 10:11:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000537153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200050037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:51 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140000f0800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{r7}, r8, 0x12, @inherit={0x50, &(0x7f0000001800)=ANY=[@ANYBLOB="010000000000000000ffffffffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000002000000000200000"]}, @subvolid=0x1f}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"f01b6972773ec0c46eb0cf23e58904ed", 0x0, r8, {0xb3c, 0x9}, {0x3, 0x7}, 0x0, [0x7, 0x10000, 0x3, 0xbdde, 0x5, 0x1, 0x9, 0xffff, 0x101, 0x6, 0x2, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffe01]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000007c0)={{r2}, r8, 0x8, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0xdd7, 0x8, {0x2, 0x9, 0x2, 0x2, 0x8000}, [0x80, 0x1]}}, @subvolid=0xe76}) sendfile(r3, r1, 0x0, 0x100000516) [ 1887.410561][ T6881] bond929: (slave bridge1166): making interface the new active one 10:11:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200060037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1887.484647][ T6881] bond929: (slave bridge1166): Enslaving as an active interface with an up link [ 1887.545737][ T6883] 8021q: adding VLAN 0 to HW filter on device bond929 [ 1887.649831][ T6883] team0: Port device bond929 added [ 1887.682739][ T37] audit: type=1804 audit(1621764711.584:589): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1456/cgroup.controllers" dev="sda1" ino=14193 res=1 errno=0 [ 1887.800984][ T6878] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1887.935350][ T6878] bond929: (slave bridge1167): Enslaving as an active interface with a down link 10:11:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x8f00}, 0x0) 10:11:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000637153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:51 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x3f000000}, 0x0) 10:11:51 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000030000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200070037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000737153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200080037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x48000000}, 0x0) 10:11:52 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140000000b0000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1888.191596][ T6954] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000007c0)={{r3}, "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"}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'ip6gre0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x6}, 0xc) sendfile(r4, r1, 0x0, 0x100000516) [ 1888.434426][ T6995] net_ratelimit: 79 callbacks suppressed [ 1888.434445][ T6995] openvswitch: netlink: Message has 2 unknown bytes. [ 1888.471097][ T6955] bond930: (slave bridge1168): making interface the new active one [ 1888.479415][ T6996] openvswitch: netlink: Message has 2 unknown bytes. 10:11:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000937153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200090037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1888.551254][ T6955] bond930: (slave bridge1168): Enslaving as an active interface with an up link [ 1888.620293][ T6972] 8021q: adding VLAN 0 to HW filter on device bond930 [ 1888.682758][ T6972] team0: Port device bond930 added [ 1888.729402][ T9557] bond1: (slave bridge1): failed to get link speed/duplex [ 1888.762866][ T7009] openvswitch: netlink: Message has 2 unknown bytes. [ 1888.787196][ T37] audit: type=1804 audit(1621764712.695:590): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1457/cgroup.controllers" dev="sda1" ino=13844 res=1 errno=0 [ 1888.808628][ T9557] bond3: (slave gretap1): failed to get link speed/duplex [ 1888.871960][ T7012] openvswitch: netlink: Message has 2 unknown bytes. [ 1888.911185][ T9557] bond1: (slave bridge1): failed to get link speed/duplex [ 1888.965412][ T6955] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1889.007870][ T9557] bond6: (slave bridge9): failed to get link speed/duplex [ 1889.019116][ T2564] bond3: (slave gretap1): failed to get link speed/duplex 10:11:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9000}, 0x0) 10:11:53 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000002800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x4c000000}, 0x0) 10:11:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000e37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002000e0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:53 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket(0x1, 0x5, 0x8001) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r3, @ANYBLOB="00000000ffffffffa0b82b23e354bc89e161b829a13c3f91c70eb7f090c04ae0e4f5f032410d034730c88454acb424d5b82caf1cb1400dab89db38"], 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r7, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x18000, 0x5e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) pipe(&(0x7f0000000b00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9f, 0x5a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x1c054) sendfile(r6, r0, 0x0, 0x100000516) [ 1889.089795][T12385] bond1: (slave bridge1): failed to get link speed/duplex 10:11:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x63000000}, 0x0) 10:11:53 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000003800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000f37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c00020002000f0037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1889.329215][ T7026] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200541337153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200003f37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1889.644737][ T7029] bond931: (slave bridge1169): making interface the new active one [ 1889.681540][ T7029] bond931: (slave bridge1169): Enslaving as an active interface with an up link [ 1889.698063][ T7053] 8021q: adding VLAN 0 to HW filter on device bond931 [ 1889.720606][ T7053] team0: Port device bond931 added [ 1889.819765][ T7026] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9100}, 0x0) 10:11:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200600037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200135437153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x68000000}, 0x0) 10:11:53 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000004800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000001000000000002000000000000000900000000000000050000000000000000000000000000000000000000000000000000000000000006000000f1090000020000000000000080000000000000000500000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001217c6863aa654d1c15d36fa656ae41f54c50f92804d776ac5a46736c190bb"]) close(r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="b200000024000b29c5daf2c7975683000000000000001fbd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfffffffffffffc7f) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000040)={0x6, 0x3, 0x1, 0x401, 0x1, [0x6, 0x8, 0x1, 0x1]}) 10:11:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200f00037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:54 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000005800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1890.220776][ T37] audit: type=1804 audit(1621764714.125:591): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1459/cgroup.controllers" dev="sda1" ino=14513 res=1 errno=0 10:11:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200006037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x6c000000}, 0x0) [ 1890.307464][ T7101] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000537153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x74000000}, 0x0) [ 1890.531839][ T7135] 8021q: adding VLAN 0 to HW filter on device bond932 [ 1890.602275][ T7135] team0: Port device bond932 added [ 1890.681674][ T7101] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9200}, 0x0) 10:11:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000200020000f037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:54 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000006800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x23, 0x61, &(0x7f0000000240)="8d3e1846110cca9d8344bc1324f7077a8a3a1a96df5167b82e5d3300d25be868268371", &(0x7f0000000300)=""/97, 0x2, 0x0, 0x1000, 0xeb, &(0x7f0000001a00)="4361ca370fa7cb03ed3ab8bb6144065bbb3c0dccf13816ca4d57b8a998fbc1eda2e0c07ca72456ca8ee7568558866f608b62c9fe09e864be01b013f88ec715b7f94c210172c2657ec505b151c995dd3c7a02f6a8a65294ec3ae9a15b615ccb2b7cb2ae81213543bddbff7051fa0f14f0f56239944f914e1c2514f9da5c72466bb2b49ec37e95d15976eab13c1369e3bd145dc48939df7f702b27d057e896dae49d4b79ca5b094d5dc34e0203a75a7ddca98e5695a164aa233551e050d1b9b26598c090b5a2a879444e146ceb6aa6c257d3bf346f062e35338361dc2b047ddcc2dfc3232b7997765548f6ca14b4f58a38c574b6b4ddd64f367b6c60e96312de67842b7461d5c53922e0a8f623df66d97e636d32d841a96b846cba221fb5e585b83d2b2490dddd7bbf17cbf6df32e929aedd62ef95d3d2b42ce8a84c87b32e8a5bd1f322d951294c715ce8c164a07f75c7a812ad9a4aea6ddce4ee22a2978c0fe8dbb7f940cc554660d3d554e24eab7fc77ad7621fdacb9c4b7204d040498944a2802878ce59da23dd288b3e135a7269f1e922edcea1e50c579a4db140f7bb0093c371c92a996f59131f4f2125be77357a85186c7ac65abd2a65be4438ef881338f529950b6dd69ddc9550df8d367cbf2735e64effcd9091412846d2db3910e37e1720ad7adf9ad113e9949ec1c2eb8ff72942e137f174fe35011e41a5d0d4988dd75b8daf3882486d070d9ab9e6c5e142494eeb2b68dc18f1b1c9f5fa477c8707409c2897889bedf746d06f7cd194aa348460b862a823ee878ab44f3b9c450e20b558ed2aaf6ab20694a0d6a9bab400e6443a19a64b04abadee41de11d8fae1b8287249bc4115ed5a169ca983e79ee8cb25e984ea79e31f94b88b7eeddd109821a83a54094430952a32c98929c7b9e9cf054a2781b7bd98258e3c84cddb7029633d0b235f910764d25d4b9e7ad6d4f77b96b91a707d2d5b94fdc1aa82818aa2b12c339a8daf0a17992ad6103f470378099a2fbde59cbbf3c2f18f2a3bff7ce872dcd4aacd959eea082bd983e6441ccef8dcdba9e65a5e0afd3abaec87589dd02c42a20c3c413fd2c2830422e8004db1411c2df02e13e3a67ebfe75e6c73982a7903da048dd4e22066051eb560a009d35ac6750b2ec6bdce715822fb74f9ae578af8a88b31fa1e79367e55c90330267dd3956b0cca01ffa02d72f4893abc991c8512b89bef6b84268b56e464bd77b27944265a4a8a66ad9a5a1438bc5f686c5625f6497961c8f5a3375fae6bb0d606be758497d027dcf85d7ed27e503d575214bbc3282378ab032ef50e4fa0254d5038d275eba56d49fee348c07fed3506e6bdd3328ffae6c5c48e2e6952a4f82d00521d898e5374584b558a9dfb175ac88ca6f93213fe16bfc0991c4d2fa285ae696ed295c9a24cb2a2f68455dc1a7aa145b09269a5064355b4722a4c5bdfabfe8d175545af1dd397fe693880c83c11711485a66ab2395e05b1c03bce9e7594e833c0605f52dad11e652348add7f9ee708488ea7a74f0eac997d0b806f7e4be6089a580ccdae07da6f8537a55c0fa9ad7c8b4542e221b454d4a6ca73a0cae6fff9ddc66d4fde404cb8476d8554bdeab3afeb9bae14ef2d32654a4e02a83b58ef413a0db85afac2184b67c2decafea07f6e52774cd72c27f918efef11ea9280bf1583858f5ddce6e7d56b11c36ec6079202e096045bfa7e6833758fae56a03d4d3eeb1e2bdb67974cae55846bae83f8108c622fa57dd9897a5ee7587542624de13b25cac435995b6d458e62758d1fd7df5d7cdacddb8293453177453d0f356f04e99c0464b83158371b14870ecf7de6135a13f4389e03cccddae97940e91088314ea1d20d62897d61af973b1caf9d97511d1a59d340a1f7070086e4e2231bd3e0b3f7d64c6245a4a49d4940b72f37e3c5b30b6e723d91721bc79bbd77e77a9fbe7880ad0821f512f28f4c82b8e997821082a17df40d88bb8e6eceb7bf60aab7fb50d587f2fed7cb991f4c6fd0325f8af3c4b9d998411e1a63ffeedfa82b6b31a2e74b8bce0d93dc47f31bc70e6a8e3e5a50dde4a1191cc3af3a4e107019baad82b99722fbb904a0e941e916d33a2c96c402a13a82c361841696d1cb8f525981688c73ba6922704748f036c4806a5637c30286d1fd466d240b9034ef477f9f74acd2eaa439782267333366035d2be295cd70c6df2d6466adb47ffdfb2c290ef0c6287bec8d2dd5595183339358f26ebd010bbe35033d53f5796b315c1e06c7e88df80a33b67d656d212668dc42a3dab5f83bcd1e70acc67b0ffbcfee167529e7dca7286fb9640adae2026b13c9fbb891a0f6d2f7483bb7e57e0e82f97ca042d6154c98a77311baaaa1e09349953f0f91c043ef8d3f31fd8465062adcdf5e8e45839e1cc6a74648e889f937943ba7d508ae3e2c9e7dffc1f8a0eebd9f77d9418e3838174b348f59598bf697d3652e047e5d7e554537dae63706239ffbbf1e930be7fe1059957d8589cf8e69a0867df2d8ffbaf3c081954a796038df48af22fb055d5688163fda3d54f976a2085e1d8721778d68fef023e69aaab8b31459fd592fc4b88ee2aa950bb35c0a0459a9a0112f8d2858216a56a74fa838ebb8d5cb404fe836c6727a9c88b14b07cdb6d93deea7460ac2c80f3900ba9e987b95db8802efaf943031d6b2050d862472cebd846b3d31e09b610dcd30d8b5db8bac0cda83e9d052d8e069d1a9198505499fa90a4793f32fa67be81518b1ab38d5757ca112e055b81a3bef74e6a211ae56d1fc073253f88efc9ef438c854b015a6af8ba63783813edb34b07302b477fd7176890f6b5200e9a61b58bd4ae7b84aae57341fd5ffcf22f648341fa67f465293602e1e9996d091c7b8aaa397f979be6e01dbe1afa5b03b46c1ce2561927c8c0feda32d6145663b4b392f4cadec9f4787121208cb19eb0eb054a7f4d4dfdc83cf864e86941d3265f311a61c19224a2dc583bc033179ac00e2c143eaadf03fdefd7c232c0313427f18b3b8d7b094417fe7053668a28b7a20aefc3031a043ee049bc8c1be1dd05066736da63d6fb98d841faee7bc853165bddd188ed316825be97ed4ae6b9784e59e97dc2dbdc72284c65157a670f2c59bfd635ce95d7239e81415182947670b2c22c68ae8b5eff69de19c6d5715ef0efb20feb5f30f13aa671b2960ab3437e87a54362360685880b30ae6ee16cbe580aea981293d0357fcd84b94338633a19643beb0358a31940b85612f62bebc542d24ed686efee39c11e2a15299b9a0fa5dd3dcc9b4b1801e12713a1b87c6f4bb997d7d767fc8889629d3371afc40167718883053f82f9e3beb036c7f8e94d1928c0b52cf989f3b95e8b0a3de5c01aedc2124afc164569e641e291f27ac9f1e315069da85489df63cba0af3783522cd9a1a18e31faf2026cc4afca118f5c62aede298ef591df2a1f0bbc381edc94f08ec1269bdef377f3612cebb3792449feebb7fcbbc010268b66f122a428d3a85851848c05ec57295fa0810d253a9e0a03c3706af6c54ad3cedb3761b10a049f1c25320ff8681fc7333d7c985e2c7364b2f2e183b5334aff51981dd860c9a8ff85e6fe8b04515793e55c50325adc100e4a923f75e5deaafaa70d3a5a9dc432b69f1004cbc118c6ca7b7485c279950de4ff1347b9caf117a27c434860fe2a094872256bc732398cf3d03705e74818e4f0c1616464b8e888807d61d723d96dcad9d3e68631dd31b6a4c27251f971eb5aa4db1448c5c7b619f89b820d0aa390cdad9f063979ba513a4953bd2cbf192159a4dedd78528c947c793f4f6a8cebc37577c6a4820488bf10f3a1bc43ad9891599cc707288134c7f23221d2642adb8a3b57092f20deee46fb9ea294ab0821157c393281092796f5af5a4363df6157e2c7baece0c877d12c9fadaaca7310a3abf980676f3b8decc9f00cf89b633b304c76591d2b413a6c32f625dcc3c06a3e75440f0fb13fbe613a20ec6b08fad173ac5ea584ba4501a24e8c3559a6771973649aa31490ffb6daad78f6bbb61bf775109fc0277d9becfd2c271e27044f780e6d0c7607ca2f566044cd5d284f0489a08b51482bdbc59f4fbb412b99bd192e36d099b59f15b9d5086420a5dd83917c0e9b86f5b381f18692620231f97caa20ab5b0c3df8599d1151224dc3d3b55a5f31c8e55b0b4f66fc57cb17765cfeffa153e4acc390ee653731824803acff474eeb7e517489891a737e4a0c5c1962b4f61c56542d3a1f36be8743cfdb016e345b40a567a813d422985890e8b1c70712a972e63e2a68ca0a566c630ccaccb586ac2e7f3fea0e2895d76ce040e36d248716b555957544d527fcfa7d59818ccde66592111d9d61933d45aab8637f8dec16200c12b66168f4253bc7ec225b11910829247703b6c9469ff71ff974ab34374f7923e87451b309015020472c78b745ddaf42b76c925c065534a8b7d8b2b979825e66b19a9bdb6b50ab7ef9b5e839d417b7f2688639c6a3e07bedce2e9c1a63460a111c7f8509fa3abc77a9057e7542dca84bb5a37e626421d04ade151dfad89ca27816b9a7bd70b31ee5e04c94d73421d90f1dbd80aa17204268e7260b76fdf9b93a46222c88d24fe1299743a7de266c5886ea03f4337499f10fc18c22982d2e4e7c994946868b26af2cd50a28013294fe6ce85e04ceeacf93167c56ad8710631f3d881c07f137aac99e5e1262b5d24e62a1f1ac9fa464b41543f61bfb1538d6087b0e4b501e6abad43a5a13a7e26d4d6d02d3cca242316cf668679acc2584a1acd41df86b2505d48cc10f056c46977280c59a42927cf4436e82166d093c77af1b2586c77b439bc4b76fc8a443bbb44af50ac4571e56206df3f90a2f0e8fb0ed8b1c8c0c9bc9c55aba2865c5e953355abb1ab0dda703a4e738e99fc82c83c5bbeb16572cab4991ba8114183b3e6dfe623d2eca5ee482831002d9260be551f06258a9a8d35c9563ec28a6898d038e07790855c13cd6ae7a59e1442bc93d23894718b39227fc4dd185ea135d855fd8f28d5f1661f55595ec877e7b434b672601d3e7e219abeef3332200155e8002adcf5f4e9d8ffca6900caa2914abbb2bc56ac86bb8f51ee7bfda223b5812d11c6a4a9316ade3b65e2540021365220bdaaff416c05440fd356d4c88d85974316681ac31d02c14080694bbdc406c02f37291cdae27d55b0f8767a4f03eebdb97fad623dd412c4323280f81e06f6fd3473130d1d45608c126c0137b5b34df1c66409f98d911031f42d5e269bd7ab49c10fa21a3ae7da48f0190b004f4087f161880726075fea283e988b19fc66338edcaf5b7ef5dc8eec8653a4fd32e8efc8f0f45ba69a855c030e1990076ded9f7d526a767d4118a25d44645d0e837d08b49aa3f80003293ce571189606ea1d0c8287a7f3875950575d008b2c5480b6c5ec7d7239c47dae2059f99550613768be83b69f600a7889995c0bc8579dfeed4c157529a5232c24f55bce9515b58cc32fde5356a4a98980fb0f6293de94cef2fe96f4a0c0c43f283a8b245cc203cdf9e55b022b977e5cb6f58481cfa3d3e847a9f7e65a944e0304f1881fbb4ec1bb9333506d7ad32ac2b585077944293ca561bc9837a299f7e3fd62ad46468f17f72c39c79e88bc54144ae2ffb8b68dbb7f57f89b909579194237418e6217e84f472771fed1f54f8217c9a856aff2d247656352bdd3185a901e5678d46e7bc5abcc628992b9e9ff5a8f5c4e2cdcbab5e5b31073fbdbe7adcc1902b3b027c4aeab820207053762d", &(0x7f0000000380)="48eafa025a1b1befb6e80466e87e9ab2c4cfd4b58b35d64be4936aad2913fea0848bd9fc2fb8f23c1c14753ff8fd79afde5ad1966a00d2c032008a9576239a4b75e17db83723e042df8f82450e5dd7f8af71a54cbe2a71ca6a7235d7710ee02bd59d53a139ff423cf4fcd5b2d088d73469fe55efac06e86899255baa2a140d4be9453769ba8f0f561246072242f7c5c3d83b07d6b98396ddbb3ed55d291eb63e9317280ad1b47958cb38cee06a37f61170c337011f23b7f861817d2c9b2440bcf8cf276d882275325e53b7e7f577d563a9dea9930eaf05e6c608720f61577e58ed29b306fa38b6f1a644ff", 0x1, 0x6}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) sendfile(r3, r1, 0x0, 0x100000516) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0x1210, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x11fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "8693d80d4c8050534fb93b661f9ee20090a0530e270b9827d5c6f9319f9a1f839690be82217b16934271c78d57b3d859aead0b60be57a53c898736af757f723b4af2b171a733d1d88df683a618bafde466015294877777f8b3d0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xdc, 0x5, "2603b69845682b855ced556fa4b2fb38cd2b33d6de910d0775188bf75de5c5b62540ec7f393389fa5f11dafc7de6ac537f209dda36b161c96ae8cea26abcf24c9b5a348c67b5b0fe5dac1fbc9a91b05acafe03e036b596dcdb3052dc91962eb7e6a73543db3a46b53e47a23eb3f2d0be368d182b8b1ff9fbf811905b19bdd20b9196c3a0c9d3b0c689833ae19fc47f82ab8a74dd8f1eca442f6ae114194c2590caf8178e26687c6e7cb573579aa5ac9ac9e2c45e87f2aa3828c6f94a4d2b1966c4c20510d52a959f9bec8efef0c2020bde2a404bb6fe846d"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'[+*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}]}]}]}, 0x1210}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 10:11:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x7a000000}, 0x0) 10:11:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000637153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000737153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1891.007542][ T37] audit: type=1804 audit(1621764714.915:592): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1460/cgroup.controllers" dev="sda1" ino=14577 res=1 errno=0 10:11:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000237153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:55 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000007800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1891.057387][ T7170] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:55 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x7c6bcd36}, 0x0) 10:11:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000937153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1891.144543][ T37] audit: type=1800 audit(1621764714.955:593): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=14577 res=0 errno=0 10:11:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000e37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1891.283834][ T37] audit: type=1804 audit(1621764714.955:594): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1460/cgroup.controllers" dev="sda1" ino=14577 res=1 errno=0 [ 1891.513406][ T7172] bond933: (slave bridge1171): making interface the new active one [ 1891.542991][ T7172] bond933: (slave bridge1171): Enslaving as an active interface with an up link [ 1891.592027][ T7166] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1891.616324][ T7176] 8021q: adding VLAN 0 to HW filter on device bond933 [ 1891.651301][ T7176] team0: Port device bond933 added [ 1891.771953][ T7170] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9300}, 0x0) 10:11:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000f37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000437153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000516) 10:11:55 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xc0000000}, 0x0) 10:11:55 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000008800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200151137153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000537153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:56 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000009800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1892.146467][ T7246] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xe4ffffff}, 0x0) [ 1892.290578][ T7250] bond934: (slave bridge1172): making interface the new active one [ 1892.324464][ T7250] bond934: (slave bridge1172): Enslaving as an active interface with an up link 10:11:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200111537153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1892.337218][ T7246] 8021q: adding VLAN 0 to HW filter on device bond934 [ 1892.360380][ T7246] team0: Port device bond934 added [ 1892.403493][ T7250] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000637153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9400}, 0x0) 10:11:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xeffdffff}, 0x0) 10:11:56 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000a800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1892.834159][ T37] audit: type=1804 audit(1621764716.735:595): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1461/cgroup.controllers" dev="sda1" ino=14577 res=1 errno=0 [ 1892.886629][ T7307] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1892.951089][ T37] audit: type=1804 audit(1621764716.735:596): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1461/cgroup.controllers" dev="sda1" ino=14577 res=1 errno=0 10:11:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000737153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200003f37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfeffffff}, 0x0) 10:11:56 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000b800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000100)="308effe0b1eff852b5360de58ac30cf307b039857a83651a9395149836649ace77662eabcd1fee90b8b8181595cf7f0ecb26", 0xffffffffffffffec, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRESDEC=r5, @ANYRES16=r2], 0xa4}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r6, r1, 0x0, 0x100000516) 10:11:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200006037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1893.249064][ T7308] bond935: (slave bridge1174): making interface the new active one 10:11:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000837153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1893.357870][ T7308] bond935: (slave bridge1174): Enslaving as an active interface with an up link 10:11:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c000200020000f037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1893.406307][ T7317] 8021q: adding VLAN 0 to HW filter on device bond935 [ 1893.432943][ T37] audit: type=1804 audit(1621764717.335:597): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1462/cgroup.controllers" dev="sda1" ino=14751 res=1 errno=0 [ 1893.448298][ T7317] team0: Port device bond935 added [ 1893.549235][ T7364] net_ratelimit: 85 callbacks suppressed [ 1893.549254][ T7364] openvswitch: netlink: Message has 2 unknown bytes. [ 1893.609213][ T2564] bond6: (slave bridge9): failed to get link speed/duplex 10:11:57 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000c800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1893.702089][ T7307] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1893.735784][T12385] bond1: (slave bridge1): failed to get link speed/duplex [ 1893.779362][ T7369] openvswitch: netlink: Message has 2 unknown bytes. 10:11:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9500}, 0x0) 10:11:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000937153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xff000000}, 0x0) 10:11:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000237153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1893.834844][ T3974] bond3: (slave gretap1): failed to get link speed/duplex [ 1893.906239][T12366] bond6: (slave bridge9): failed to get link speed/duplex [ 1893.917631][T12366] bond1: (slave bridge1): failed to get link speed/duplex 10:11:57 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000e800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1894.000513][T16946] bond3: (slave gretap1): failed to get link speed/duplex [ 1894.003110][ T7380] openvswitch: netlink: Message has 2 unknown bytes. [ 1894.019771][ T7381] openvswitch: netlink: Message has 2 unknown bytes. 10:11:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffdef}, 0x0) 10:11:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000437153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1894.083075][ T7383] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64, @ANYRES16, @ANYRES64=r0, @ANYRES32, @ANYBLOB="ed854f99881f6dfbbb3d89a2ade5ced114a1e1379d77763a1d4275345b73875f6de0f92830a749c58d4ef5456b79917a3fcff632501974bf6f6410663a58", @ANYRESHEX=r0, @ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r4, 0x1080}, {0xffffffffffffffff, 0x2000}, {r5, 0x240}, {r6, 0x8804}, {r2, 0x8004}, {r1, 0x2}, {r2, 0x2202}], 0x7, &(0x7f0000000180)={r7, r8+10000000}, &(0x7f0000000200)={[0x1000]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r9, r1, 0x0, 0x100000516) 10:11:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000e37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1894.220381][ T7386] bond936: (slave bridge1175): making interface the new active one [ 1894.292429][ T7386] bond936: (slave bridge1175): Enslaving as an active interface with an up link 10:11:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000537153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1894.406782][ T7383] 8021q: adding VLAN 0 to HW filter on device bond936 [ 1894.461088][ T7383] team0: Port device bond936 added 10:11:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xffffffe4}, 0x0) [ 1894.530026][ T7386] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000f37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1894.574899][ T37] audit: type=1804 audit(1621764718.475:598): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1463/cgroup.controllers" dev="sda1" ino=14689 res=1 errno=0 [ 1894.655174][ T7434] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9600}, 0x0) 10:11:58 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000f800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000637153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x800000000000002, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000200)={{0x0, 0x80000000, 0x7f, 0xfff, 0x56, 0x6, 0xffffffffffffffff, 0x0, 0x9, 0x2, 0x4, 0x5, 0x81, 0x5, 0x58}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendfile(r3, r1, 0x0, 0x100000516) 10:11:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200006037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffffe}, 0x0) 10:11:58 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000010800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1894.987453][ T7451] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000737153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1895.128427][ T7455] bond937: (slave bridge1177): making interface the new active one [ 1895.142871][ T7455] bond937: (slave bridge1177): Enslaving as an active interface with an up link [ 1895.209439][ T7455] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1895.283593][ T7455] bond937: (slave bridge1178): Enslaving as an active interface with a down link 10:11:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x2) 10:11:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370300018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1895.332889][ T37] audit: type=1804 audit(1621764719.235:599): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1464/cgroup.controllers" dev="sda1" ino=14762 res=1 errno=0 10:11:59 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000011800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:11:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000837153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1895.504665][ T7505] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9700}, 0x0) 10:11:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x3) [ 1895.660981][ T7514] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 10:11:59 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000060800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1895.841011][ T7522] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:11:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="74a13c2a860d2225ba1544", 0xb, 0xc1, &(0x7f0000000100)={0xa, 0x4e24, 0xd3a3, @dev={0xfe, 0x80, '\x00', 0xe}, 0x46d1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) 10:11:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a03008004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:11:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000937153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1896.039791][ T7525] bond938: (slave bridge1179): making interface the new active one 10:12:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000e37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1896.082401][ T7525] bond938: (slave bridge1179): Enslaving as an active interface with an up link [ 1896.139811][ T7571] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1896.181827][ T7536] 8021q: adding VLAN 0 to HW filter on device bond938 10:12:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a04008004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1896.252915][ T37] audit: type=1804 audit(1621764720.155:600): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1465/cgroup.controllers" dev="sda1" ino=14773 res=1 errno=0 [ 1896.258336][ T7536] team0: Port device bond938 added 10:12:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000f37153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1896.380473][ T7578] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1896.410758][ T7572] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4) 10:12:00 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000070800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9800}, 0x0) 10:12:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a02018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200006037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1896.706008][ T7591] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 10:12:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a04018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1896.961879][ T7635] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1897.019818][ T7623] bond939: (slave bridge1180): making interface the new active one [ 1897.050206][ T7623] bond939: (slave bridge1180): Enslaving as an active interface with an up link 10:12:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x1) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x120) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r4 = accept$packet(r1, &(0x7f0000000140), &(0x7f0000000240)=0x14) accept4$packet(r4, &(0x7f0000000280), &(0x7f00000002c0)=0x14, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a500000024000be3090000000000000000bd5500", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r1, 0x0, 0x100000516) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@can_delroute={0x1c, 0x19, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x3, 0x4, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004003}, 0x800) sendto$inet6(r3, &(0x7f0000000440)="e078f9c7ec48da23814ac3b0743d8bd790eea241602cb310f084aa4e8612619ab5f764c9ade7aaff433d11a4e6565a8dec76e5a975bd9a53dd75770a60c28904288bfefab292ef6f41c10aeb986512ed94c6b738a846520dc40a9b862d340256780fb5e235ad91019fd2ab17e049bbd15d91a38c43ec1d9e16fa21804483ccc04aa8a4bc2c0c0e5898c3a17364bc441dae223570b6b3f6113ec52a5808853bc37cf7e4dd20bb62eb308a411ef35801318a812cd5e8753cdfdee20f2f52f5440def3ee82dffb8b37a97f2165a0c8b8aea8428a2a17763ae6d8bd238b733ac7916617d78cf3de3a8b5a262925cfa86", 0xee, 0x11, 0x0, 0x0) 10:12:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x5) 10:12:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370300018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a05018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1897.082360][ T7592] 8021q: adding VLAN 0 to HW filter on device bond939 [ 1897.118589][ T7592] team0: Port device bond939 added 10:12:01 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000030000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1897.159076][ T7623] validate_nla: 2 callbacks suppressed [ 1897.159095][ T7623] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1897.294459][ T7642] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 10:12:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9900}, 0x0) 10:12:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x6) [ 1897.377294][ T7648] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 10:12:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a03008004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:01 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140000000b0000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a06018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1897.487402][ T37] audit: type=1804 audit(1621764721.395:601): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1466/cgroup.controllers" dev="sda1" ino=14242 res=1 errno=0 [ 1897.580088][ T7650] netlink: 129 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1897.618327][ T7653] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1897.635649][ T7657] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 10:12:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a04008004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1897.834131][ T7686] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 10:12:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a07018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1897.948188][ T7660] bond940: (slave bridge1181): making interface the new active one [ 1897.949408][ T7706] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1898.013974][ T7660] bond940: (slave bridge1181): Enslaving as an active interface with an up link [ 1898.062258][ T7666] 8021q: adding VLAN 0 to HW filter on device bond940 [ 1898.132136][ T7666] team0: Port device bond940 added [ 1898.157588][ T7709] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1898.241215][ T7660] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x0, 0x800000000000002, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000040)) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname(r0, &(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x100000516) 10:12:02 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140000000000000c0000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a02018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x7) 10:12:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a08018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9a00}, 0x0) [ 1898.493300][ T7719] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1898.562409][ T9557] net_ratelimit: 81 callbacks suppressed [ 1898.562446][ T9557] bond6: (slave bridge9): failed to get link speed/duplex 10:12:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8) [ 1898.606634][ T7719] openvswitch: netlink: Flow key attr not present in new flow. [ 1898.619985][ T7722] openvswitch: netlink: Flow key attr not present in new flow. [ 1898.651498][ T7721] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a04018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a09018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1898.868693][ T7763] openvswitch: netlink: Flow key attr not present in new flow. 10:12:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a05018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1899.031994][ T7725] bond941: (slave bridge1182): making interface the new active one [ 1899.039690][ T7776] openvswitch: netlink: Flow key attr not present in new flow. 10:12:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a0e018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1899.073892][ T7725] bond941: (slave bridge1182): Enslaving as an active interface with an up link [ 1899.119396][ T7732] 8021q: adding VLAN 0 to HW filter on device bond941 [ 1899.180119][ T7732] team0: Port device bond941 added 10:12:03 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x9) [ 1899.210446][T16946] bond3: (slave gretap1): failed to get link speed/duplex [ 1899.262494][T16946] bond6: (slave bridge9): failed to get link speed/duplex 10:12:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x244e0000}, 0x0) 10:12:03 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800200000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1899.306346][ T7780] openvswitch: netlink: Flow key attr not present in new flow. [ 1899.314744][ T7721] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1899.357751][ T25] bond1: (slave bridge1): failed to get link speed/duplex 10:12:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a06018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1899.417134][T16946] bond3: (slave gretap1): failed to get link speed/duplex 10:12:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a0f018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9b00}, 0x0) 10:12:03 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800300000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:03 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xa) 10:12:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000204000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1899.694163][ T7795] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a07018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a60018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x1800}, 0x0) [ 1900.025470][ T7799] bond942: (slave bridge1183): making interface the new active one [ 1900.138337][ T7799] bond942: (slave bridge1183): Enslaving as an active interface with an up link 10:12:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a08018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x11) 10:12:04 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800400000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1900.216907][ T7799] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00038004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a09018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1900.432235][ T7799] bond942: (slave bridge1184): Enslaving as an active interface with a down link [ 1900.492874][ T7816] 8021q: adding VLAN 0 to HW filter on device bond942 [ 1900.554586][ T7816] team0: Port device bond942 added 10:12:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9c00}, 0x0) 10:12:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf004, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00078004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x18) 10:12:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a0e018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:04 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800500000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:04 executing program 5: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000029001f4d154a817393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x800000000000002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x80000001, @mcast1, 0x1}, 0x1c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)=ANY=[@ANYBLOB="54e49318", @ANYRES16, @ANYBLOB="0000000000000000000001080000c80000000000088797af0407000000007f00000199afb9dcd5bc796508000300edb5000074060000000004000a000000000000000000000004000000ffff0000bc67000040000000240002002cae60f5dd0570bbf48bf233fba1a9b040538688b5095343e13f2c7be6c565a82400010a2700000039a48ebbfaff226bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb9bbbbb4e00000000000000000003000008024000100e00000010000000000aaaaaaaaa2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa0800030001"], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1300000031001f00040000eb1b849ad502", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="cbae00001a", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0xe585, 0x800, 0x0, 0x4b6ae4f95a5de371) 10:12:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a000b8004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1900.981143][ T7881] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a0f018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00028004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1901.181168][ T7924] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1901.219819][ T7931] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 10:12:05 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800600000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x654}, [{0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x3}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x678) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) listen(r2, 0x278) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 1901.291226][ T7883] bond943: (slave bridge1185): making interface the new active one [ 1901.353133][ T7883] bond943: (slave bridge1185): Enslaving as an active interface with an up link [ 1901.418472][ T7881] 8021q: adding VLAN 0 to HW filter on device bond943 [ 1901.501434][ T7881] team0: Port device bond943 added [ 1901.588257][ T7881] bond943: (slave bridge1186): Enslaving as an active interface with a down link 10:12:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9d00}, 0x0) 10:12:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00078004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a60018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:05 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x48) 10:12:05 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800700000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:05 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000000240)="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", 0x1000) sendfile(r0, r1, 0x0, 0xf03b0000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x100000000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @private}, 0x80}, 0x2) r3 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f00000001c0)="a2e699", 0x3) 10:12:05 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4c) [ 1901.871885][ T7957] __nla_validate_parse: 15 callbacks suppressed [ 1901.871904][ T7957] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 10:12:05 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800800000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00088004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00038004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1902.331085][ T7963] bond944: (slave bridge1187): making interface the new active one 10:12:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a000b8004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1902.432581][ T7963] bond944: (slave bridge1187): Enslaving as an active interface with an up link [ 1902.538524][ T7976] 8021q: adding VLAN 0 to HW filter on device bond944 [ 1902.623066][ T7976] team0: Port device bond944 added 10:12:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00078004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1902.777099][ T7958] validate_nla: 2 callbacks suppressed [ 1902.777118][ T7958] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9e00}, 0x0) 10:12:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018003001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:06 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800900000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:06 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x63) 10:12:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a000b8004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:07 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x28, 0x3, 0x8001, 0x0, @remote, @mcast1, 0x1, 0x40, 0x3ff, 0xe22}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) unshare(0x40000000) unshare(0x8000400) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000140), 0x0, 0x840, 0x0, 0x0) 10:12:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018006001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x68) 10:12:07 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800a00000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1903.231432][ T8035] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00028004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1903.410789][ T8037] bond945: (slave bridge1188): making interface the new active one [ 1903.534319][ T8037] bond945: (slave bridge1188): Enslaving as an active interface with an up link [ 1903.614146][ T8037] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1903.631906][ T25] net_ratelimit: 66 callbacks suppressed [ 1903.631927][ T25] bond1: (slave bridge1): failed to get link speed/duplex 10:12:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018010001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1903.660747][ T8080] lo speed is unknown, defaulting to 1000 10:12:07 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800b00000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1903.714835][ T8090] openvswitch: netlink: Flow key attr not present in new flow. [ 1903.823974][ T8037] bond945: (slave bridge1189): Enslaving as an active interface with a down link [ 1903.875782][ T8055] 8021q: adding VLAN 0 to HW filter on device bond945 [ 1903.904096][ T8055] team0: Port device bond945 added [ 1903.913698][ T8096] openvswitch: netlink: Message has 6 unknown bytes. [ 1903.920625][T12385] bond3: (slave gretap1): failed to get link speed/duplex [ 1903.920679][T12385] bond6: (slave bridge9): failed to get link speed/duplex [ 1903.920726][T12385] bond1: (slave bridge1): failed to get link speed/duplex 10:12:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x9f00}, 0x0) 10:12:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x6c) 10:12:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00038004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:08 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800c00000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1904.027899][ T9] bond1: (slave bridge1): failed to get link speed/duplex [ 1904.085127][T12366] bond6: (slave bridge9): failed to get link speed/duplex [ 1904.104988][ T3974] bond3: (slave gretap1): failed to get link speed/duplex [ 1904.188709][ T9] bond1: (slave bridge1): failed to get link speed/duplex 10:12:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00078004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1904.240277][ T8106] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1904.571974][ T8109] bond946: (slave bridge1190): making interface the new active one [ 1904.594083][ T8109] bond946: (slave bridge1190): Enslaving as an active interface with an up link [ 1904.656798][ T8130] 8021q: adding VLAN 0 to HW filter on device bond946 [ 1904.670697][ T8130] team0: Port device bond946 added [ 1904.708347][ T8106] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1904.738023][ T8110] lo speed is unknown, defaulting to 1000 10:12:11 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800c00000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:11 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x74) 10:12:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004021d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00088004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa000}, 0x0) 10:12:11 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800e00000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a000b8004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004041d00d1bd", 0x2e}], 0x1}, 0x0) [ 1907.732767][ T8223] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:11 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x7a) 10:12:11 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800f00000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000480)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @local}], 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001900)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000001940)) [ 1907.962920][ T8228] bond947: (slave bridge1191): making interface the new active one [ 1907.976947][ T8228] bond947: (slave bridge1191): Enslaving as an active interface with an up link [ 1908.035044][ T8228] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1908.121899][ T8247] 8021q: adding VLAN 0 to HW filter on device bond947 10:12:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004051d00d1bd", 0x2e}], 0x1}, 0x0) [ 1908.177519][ T8247] team0: Port device bond947 added 10:12:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018003001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:12 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xc0) 10:12:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa100}, 0x0) 10:12:12 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000801000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004061d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018005001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1908.615703][ T8295] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:12 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) [ 1908.710607][ T8299] net_ratelimit: 101 callbacks suppressed [ 1908.710626][ T8299] openvswitch: netlink: Message has 6 unknown bytes. [ 1908.872196][ T8298] bond948: (slave bridge1193): making interface the new active one 10:12:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018006001d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004071d00d1bd", 0x2e}], 0x1}, 0x0) [ 1908.913992][ T8298] bond948: (slave bridge1193): Enslaving as an active interface with an up link [ 1908.931920][ T8319] 8021q: adding VLAN 0 to HW filter on device bond948 [ 1908.992489][ T8319] team0: Port device bond948 added [ 1909.017104][ T8348] openvswitch: netlink: Key 29 has unexpected len 2 expected 0 [ 1909.024728][ T9] bond1: (slave bridge1): failed to get link speed/duplex [ 1909.054739][ T9] bond3: (slave gretap1): failed to get link speed/duplex 10:12:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018010001d00d1bd", 0x2e}], 0x1}, 0x0) [ 1909.115871][ T8295] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1909.154706][T12366] bond1: (slave bridge1): failed to get link speed/duplex 10:12:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x4d}}, 0x0) recvmmsg(r1, &(0x7f0000007ac0)=[{{&(0x7f0000000340)=@rc={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/142, 0x8e}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000680)=""/40, 0x28}, {&(0x7f0000000780)=""/75, 0x4b}], 0x5, &(0x7f0000000880)=""/91, 0x5b}}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000980)=""/103, 0x67}, {&(0x7f0000000a00)=""/179, 0xb3}, {&(0x7f0000000ac0)=""/70, 0x46}, {&(0x7f0000000b40)=""/233, 0xe9}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/179, 0xb3}, {&(0x7f0000000d00)=""/4, 0x4}, {&(0x7f0000001e00)=""/205, 0xcd}, {&(0x7f0000001f00)=""/229, 0xe5}], 0x9, &(0x7f00000020c0)=""/255, 0xff}, 0x2}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000021c0)=""/194, 0xc2}, {&(0x7f00000022c0)=""/198, 0xc6}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/58, 0x3a}, {&(0x7f0000000d80)=""/34, 0x22}, {&(0x7f00000033c0)=""/136, 0x88}, {&(0x7f0000003480)=""/204, 0xcc}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/96, 0x60}], 0x9, &(0x7f00000046c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000056c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005740)=""/181, 0xb5}, {&(0x7f0000005800)=""/185, 0xb9}, {&(0x7f00000058c0)=""/182, 0xb6}, {&(0x7f0000005980)=""/233, 0xe9}, {&(0x7f0000005a80)=""/125, 0x7d}, {&(0x7f0000005b00)=""/52, 0x34}, {&(0x7f0000005b40)=""/59, 0x3b}, {&(0x7f0000005b80)=""/45, 0x2d}, {&(0x7f0000005bc0)=""/200, 0xc8}], 0x9, &(0x7f0000005d80)=""/104, 0x68}, 0xffffffff}, {{&(0x7f0000005e00)=@nfc_llcp, 0x80, &(0x7f0000006080)=[{&(0x7f0000005e80)=""/194, 0xc2}, {&(0x7f0000005f80)}, {&(0x7f0000005fc0)=""/161, 0xa1}], 0x3, &(0x7f00000060c0)=""/35, 0x23}, 0x679c}, {{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000006100)=""/80, 0x50}, {&(0x7f0000006180)=""/121, 0x79}, {&(0x7f0000006200)=""/126, 0x7e}, {&(0x7f0000006280)=""/61, 0x3d}], 0x4, &(0x7f0000006300)=""/12, 0xc}, 0x6}, {{&(0x7f0000006340)=@phonet, 0x80, &(0x7f0000006480)=[{&(0x7f00000063c0)=""/150, 0x96}], 0x1, &(0x7f00000064c0)=""/118, 0x76}}, {{&(0x7f0000006540)=@tipc=@name, 0x80, &(0x7f0000007740)=[{&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/104, 0x68}, {&(0x7f0000007640)=""/207, 0xcf}], 0x3, &(0x7f0000007780)=""/223, 0xdf}, 0xfb78}, {{&(0x7f0000007880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000007a00)=[{&(0x7f0000007900)=""/236, 0xec}], 0x1, &(0x7f0000007a40)=""/107, 0x6b}, 0x20}], 0x9, 0x40002102, &(0x7f0000007d00)={0x77359400}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000005f80)={r1, 0x2, 0x426, 0xff}) getsockname$packet(r2, &(0x7f0000007d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007d80)=0xc386f5218d644857) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=@ipv6_newnexthop={0x88, 0x68, 0x10, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x4, 0x0, 0x23}, [@NHA_GROUP={0x14, 0x2, [{0x0, 0x40}, {0x0, 0x35}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x4c, 0x2, [{0x0, 0xff}, {0x2, 0x5}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x7f}, {0x2, 0x3}, {0x1, 0x3}]}, @NHA_GROUP_TYPE={0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x400c040) listen(r7, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000100)="308effe0b1eff852b5360de58ac30cf307b039857a83651a9395149836649ace77662eabcd1fee90b8b8181595cf7f0ecb26", 0xffffffffffffffec, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4dd000001400b59500070000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000100200100000000000000000000000000010800080054020000"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r3, @ANYBLOB="e87f0000f8ffdf05"], 0x20}}, 0x0) 10:12:13 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000801100000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:13 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x110) [ 1909.206505][T12366] bond6: (slave bridge9): failed to get link speed/duplex [ 1909.236534][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1909.244134][ T8352] openvswitch: netlink: Message has 6 unknown bytes. 10:12:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa200}, 0x0) [ 1909.295028][ T3974] bond1: (slave bridge1): failed to get link speed/duplex [ 1909.320078][ T8355] openvswitch: netlink: Message has 6 unknown bytes. 10:12:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004081d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004021d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:13 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000806000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1909.542237][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:13 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x300) 10:12:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004091d00d1bd", 0x2e}], 0x1}, 0x0) [ 1909.679833][ T8365] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004041d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004051d00d1bd", 0x2e}], 0x1}, 0x0) [ 1910.022721][ T8368] bond949: (slave bridge1194): making interface the new active one 10:12:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a000180040e1d00d1bd", 0x2e}], 0x1}, 0x0) [ 1910.080940][ T8368] bond949: (slave bridge1194): Enslaving as an active interface with an up link [ 1910.102796][ T8374] 8021q: adding VLAN 0 to HW filter on device bond949 [ 1910.161663][ T8374] team0: Port device bond949 added [ 1910.262176][ T8365] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1910.378544][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:14 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xf402000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0xf8, 0xf8, 0x8a000000, 0xf8, 0xf8, 0x190, 0x190, 0x190, 0x190, 0x190, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x4}}, @common=@unspec=@quota={{0x38}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="bd87d1a0bb294fac8313fcd5d3e90c5d73a4e4b0a4246333157afedc257e84f20745fb091e1dac1593461e1405f53ef84d2b1b588007845524f2e9842ef1c6844e3e6265a8747140a472294eda50beedb3b96f9e449da315036e8bd465d253ff291494a71f72a275b9b98940690da1a9183eb7b6513e18d1bbad1473dc08b0d308273b413142fff0d8d08eaf8206919d34a6f62aa1a27696d87340be449789532a8856e08d46357e774d7476ce98d2e3c8b05840c08891599833ec881f996a945014de7987735b57e7bdb1a417014e56e16bfba44c55adef368e60aace72fe9bec75b0cc0f31e66e9061ea95", 0xec}, {&(0x7f0000000100)="34ff8910e12b0431a5a6316a727579b2be98e5de36aa648fb011af93363918bc164653eead9c6e7a57f372b5e5cb7570dd3927be56b415da3059746070ac62", 0x3f}, {&(0x7f0000000140)="d5c22c66e2de82d7f467e5bb228dab7b8853de7bfa7a0c8da0bedd513f4a75e5313bb02d045b048e8a14622b0da062846905fd58134559e43a5719d4e3432c", 0x3f}, {&(0x7f00000001c0)="cf2ab79fe8a1824c84e6d138e2237f63e57e789744d7c4006c10b4cb0c997416bde31b698714081bcc06e188979e1a748a8a12f2ede851c7153dae37c7e0e4c86317551dfa6e135800539d9303795b5c2bb72b0916628aef347bcc315ec8", 0x5e}, {&(0x7f0000000240)="e2452f2ba2e08f90924a7631d12c5415f239703636696a9296d138ab07e9b620cb21d9d32dcc9e497f02ed252535e3b363a8b69b69c8d5f8e680a06e35ce71ec68e2173e95e9b6d0ab4edeb824b541b1b11a97974cc8c74053b90df969c727d52170c39f6fe7c40e5219809b946884fb02e1fa0112f9fc0d6f7b8928da31165c3465801436861ec8c2252c08fcb7d1f6d97db1df178b5fe84c376a14066819a922bb475bd4e2167c9759d64a722ff97dedd6cc332ebf96527a25ca860d3ed8e3ed02cebc37c1492e5dd739194afbd9bf32555b0efa3d57f51cc4ce3b510eb8b9272d27f55b74262ce890ad60db75", 0xee}], 0x5) 10:12:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004061d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:14 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x500) 10:12:14 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000807000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa300}, 0x0) 10:12:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a000180040f1d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004071d00d1bd", 0x2e}], 0x1}, 0x0) [ 1910.721107][ T8451] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004601d00d1bd", 0x2e}], 0x1}, 0x0) [ 1910.832677][ T8486] Unknown options in mask 4 10:12:14 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080f000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d02d1bd", 0x2e}], 0x1}, 0x0) 10:12:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004081d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="308effe0b1eff852b5360de58ac30cf307b039857a83651a9395149836649ace77662eabcd1fee90b8b8181595cf7f0ecb26", 0xffffffffffffffec, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "445df787dd2ca60b38e1d7efef"}]}, {0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x64}}, 0x0) [ 1911.068574][ T8463] bond950: (slave bridge1195): making interface the new active one 10:12:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004091d00d1bd", 0x2e}], 0x1}, 0x0) [ 1911.183789][ T8463] bond950: (slave bridge1195): Enslaving as an active interface with an up link 10:12:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d04d1bd", 0x2e}], 0x1}, 0x0) [ 1911.247989][ T8488] 8021q: adding VLAN 0 to HW filter on device bond950 [ 1911.331118][ T8488] team0: Port device bond950 added 10:12:15 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x600) [ 1911.384954][ T8451] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa400}, 0x0) 10:12:15 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800003000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a000180040e1d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d05d1bd", 0x2e}], 0x1}, 0x0) 10:12:15 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x601) [ 1911.709112][ T8535] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a000180040f1d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004601d00d1bd", 0x2e}], 0x1}, 0x0) 10:12:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d06d1bd", 0x2e}], 0x1}, 0x0) [ 1911.999199][ T8550] bond951: (slave bridge1196): making interface the new active one [ 1912.096513][ T8550] bond951: (slave bridge1196): Enslaving as an active interface with an up link 10:12:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000040), 0x3fffebe, 0x2040010002, &(0x7f0000000480)={0x0, 0x3938700}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xfff, 0x4) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0205f3ff02"], 0x10}}, 0x0) 10:12:16 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800005000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d07d1bd", 0x2e}], 0x1}, 0x0) 10:12:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d02d1bd", 0x2e}], 0x1}, 0x0) [ 1912.208746][ T8535] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1912.364190][ T8550] bond951: (slave bridge1197): Enslaving as an active interface with a down link 10:12:16 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x700) 10:12:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d04d1bd", 0x2e}], 0x1}, 0x0) 10:12:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa500}, 0x0) 10:12:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d08d1bd", 0x2e}], 0x1}, 0x0) 10:12:16 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800006000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:16 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000340), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x1, 0x4, 0x22, @private1, @mcast2, 0x8, 0x80, 0x400, 0x1ff}}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r2, &(0x7f0000000040)={&(0x7f00000006c0)=@nfc={0x104, 0x7, 0x0, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000080)="8847a572f718101f31dace4e0054245bef9ede5eb3e53b1b556497c1543e0bd7b376a735e747160b5d4983adcdcd9e3e66a3aaca24f13bf04b5a07bc788363aad800791cbf0d2bdc585b2c6753e4645fb853969a441eb64cc843419794478b8e0a1f266e5c4f", 0x66}, {&(0x7f0000000100)="e36e2ea1ad163ec875ccb75e0c0f38a9e072a797ae582960f643b66e077b0a98520ad8e4d971340100f30b456df4791f86ec382c4c88962a76cd1b30ff47eeae46e9d359160997e903243361de77be6e6ef458d2d72a36af2fa321dff6df7eecd0e026cb34b4b9177eb0b883ad0aa22299004f5a9f764b7140dfb8f0", 0x7c}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="a37e7fce4ac2e2f69708b15534013af5c2411b03d998dd7c43f3eff6d4f9a66158f5948aa444a7a142aaebdb585a538bd045fd34178075f98d9c0f268a6e593ac05e3c77b16564fc9806f8e1335ae46f79f973073c31685ade372853b76497e4945eb29a210e7a77088a69a9143d63b0d1f38bb19da4c37fe8b78cdb", 0x7c}, {&(0x7f0000000880)="735f448f757bbda04cf587c1144c942f4fc1d7a3e33679cbe3195282c815d6267340c81854dd739994c746ca9cfe5b2a935347f70cde3d3d6348dc6b5d4d38ba5f7a4db7fa1abcddc7cbfece82bbcaa505505ae7acf87533f83468c86b2c96f76807fd80c9ef37f64010f59f66bb7d1045554416f8e1f4774e884889f12b09519d", 0x81}, {&(0x7f0000000940)="052757f5e345b34102c24ad8a06e6cf5f1bb45fc81c62bc698b788511299d9ef7be9db60c3e012d76d6d25bfa420b4f345019c91f953fec514dd8dbd3e39b3628646299cb7b8d62f306360d437b6eb47c3f12630ccde7b8f046d0bcfec8ac79423819ecb7eba4c1349f4604d0587f6ee182369b4ec6f209a89daef0bb2b02518e6a03b822133cdf3a73015f142c89d4f6729f165d6333c9ecd719617dd1d8e76e149da2396070a8d721370dde2ecc42bc32ddeecb554d472a6f45a8791e638ac56c531d4d7a76693b826907a52f4c1d945043ae34b241a1b6aff9f38d3a7fd", 0xdf}], 0x7, 0x0, 0x0, 0x1a0}, 0xe869) sendmmsg$sock(r2, &(0x7f0000001200)=[{{&(0x7f0000000b40)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000000bc0)="caa1609f49fb6b329e67aff192c2d03d66b12676018a4f12c753a75e56ed4ecb12cd377c3b7659", 0x27}, {&(0x7f0000000c00)="404a3eadc99bedf57e6f6542e709007a347d31a1c28d917c7d5a2a6cf0d8e1169b4351338d11973012d079c4fcad0b060a258143d631bccec982485eea07a78c99afd0f02f8aca3cbdd35b90c92698e0bd8e2fa91872eddf01d17040aac918b7c3a7c47c170f7aa465998d16781b2b071cc224fc64baa37844af4c12710262c313df698838a2842858b10f492079da5e70cd3847544cce4a505b1f6c62e8131b17828c7fb5cecca19e1002ac53deffa74dad37db0079e0528312ead648566fac20c401aaab3402de81da1bff76a0f34eddc377d794e67ccf865a7bd05be846c76c39e225e071fa7cba", 0xe9}, {&(0x7f0000000d00)="e845af909c57a1bcfb5086335d1b57bfdd8a3fa817716cc48051970080fdbe1946333de23c6a04734446012b75f41949fd7dc5a1c02d074a27d45a0783dbe1b3a1bd211052876af0aa31e9195fe64c17144f0ad0867db259a6cb35d916bb7ce979cfcc2fe03392aea604b258c24b30dfdb41d013924ef475f739e535519991c70880f33265f303b0b6574052a8f5d3487cdebaa9b040eafa0fed439e973ccea928f774cc784b53408e4d7776b79015", 0xaf}, {&(0x7f0000000dc0)="0b681efc65805a8a44de3fc8e209375cb6ac61072d64b03487545b6c092bd853aa9a8e18dd2e2615488708b0cb8cd1814f11d9f4f1af380e0adb5eb4ebe5f1eb0ef562dced50e347a5f605e24a32f0d6c36eaa2a6daffa7a1a59116df05b268af6469c7d76bc84207b69c5e51f24d1646181ed08e0664df66d716f427818431e735a00d237226d5455aa27e692b6", 0x8e}], 0x5}}, {{&(0x7f0000000f00)=@ethernet={0x306, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)="4de53f24d001e4493b2e11e20f9061719c29dba2b22fdc6b0125b9986c555132d6bf60b80c7a1fe05b4994fa31c8278d17e8dcbc0490c4efb60288b6628f7c0681a0ea978e76b72791c14e88532222b9d0f587e4c4ce3284c12bcbbc0c21e09bb8b0d0830d7b493b82cb588935491220df7f056ec8f74da67ef2476945b0b0088dd250137954258444742ad9edeee8838247045ac65cb21542e8ca8d8d3754c33c8e334563f0427c2951bc37638c6dfd0b5ecb497ec29b24429db292f552244fad1b03f1dbf036a9227dc71bb869141a443a253144f4d4", 0xd7}, {&(0x7f0000001080)="6472ff7bb0bc687a41118246eeb28c9a50d4ee4b8a41eeb8366c511d78aacc08e924db05a2b7ee9fbeaed8c138c248b46c6e305724", 0x35}, {&(0x7f00000010c0)="95cfc028a3a0448bb444402ae7204f266984ba239ca1eb52bdba196a146b780afc43f5767e9325a24bbf6f25e1718a95ae7d7d32980e178b5c8f393e712fa73ec1fae915e0a8d2c2aa68e83a6f39cd1f00586b42818c2b8c60a5d2c89dc914887cff64410df7e2877db14c8079f2fb2150190017ecc29eb8d87dbbde4177110dc582786d58d53b9cb57d82e2c230ff6102ae0a", 0x93}], 0x3, &(0x7f00000011c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x51920da9}}], 0x30}}], 0x2, 0x480c0) 10:12:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d05d1bd", 0x2e}], 0x1}, 0x0) 10:12:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d09d1bd", 0x2e}], 0x1}, 0x0) 10:12:16 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x718) [ 1912.756004][ T8619] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d06d1bd", 0x2e}], 0x1}, 0x0) 10:12:16 executing program 5: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x5, 0x101}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000180)=""/220, 0xdc, 0x10001}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffe, 0x3}, 0x6) write(r2, &(0x7f0000000140)='H\x00\x00\x00\x00\x00', 0x6) [ 1912.886193][ T8619] 8021q: adding VLAN 0 to HW filter on device bond952 [ 1912.952157][ T8619] team0: Port device bond952 added 10:12:17 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800007000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa600}, 0x0) 10:12:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d0ed1bd", 0x2e}], 0x1}, 0x0) 10:12:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d07d1bd", 0x2e}], 0x1}, 0x0) 10:12:17 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x900) [ 1913.271797][ T8677] validate_nla: 1 callbacks suppressed [ 1913.271814][ T8677] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:12:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d0fd1bd", 0x2e}], 0x1}, 0x0) [ 1913.536714][ T8680] bond953: (slave bridge1199): making interface the new active one [ 1913.549933][ T8680] bond953: (slave bridge1199): Enslaving as an active interface with an up link 10:12:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d08d1bd", 0x2e}], 0x1}, 0x0) [ 1913.612260][ T8684] 8021q: adding VLAN 0 to HW filter on device bond953 10:12:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d60d1bd", 0x2e}], 0x1}, 0x0) [ 1913.723419][ T8684] team0: Port device bond953 added [ 1913.796058][ T9] net_ratelimit: 79 callbacks suppressed [ 1913.796080][ T9] bond6: (slave bridge9): failed to get link speed/duplex 10:12:17 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800009000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:17 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xa00) [ 1913.851452][ T8677] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1913.887979][T12366] bond3: (slave gretap1): failed to get link speed/duplex [ 1913.889822][ T8735] openvswitch: netlink: Key type 2077 is out of range max 29 [ 1913.957918][ T8736] openvswitch: netlink: Key type 8221 is out of range max 29 10:12:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d09d1bd", 0x2e}], 0x1}, 0x0) [ 1914.006050][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.012440][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.013227][ T8734] bond953: (slave bridge1200): Enslaving as an active interface with a down link 10:12:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0xf}], 0x1}, 0x0) [ 1914.170401][ T25] bond3: (slave gretap1): failed to get link speed/duplex 10:12:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa700}, 0x0) 10:12:18 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800007000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x18}], 0x1}, 0x0) 10:12:18 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1001) 10:12:18 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080000a000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1914.268333][ T9] bond6: (slave bridge9): failed to get link speed/duplex [ 1914.277290][ T8747] openvswitch: netlink: Key type 2333 is out of range max 29 [ 1914.307975][ T108] bond1: (slave bridge1): failed to get link speed/duplex 10:12:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d0ed1bd", 0x2e}], 0x1}, 0x0) [ 1914.418361][ T108] bond3: (slave gretap1): failed to get link speed/duplex [ 1914.454423][ T25] bond6: (slave bridge9): failed to get link speed/duplex [ 1914.488766][ T8754] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:18 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1100) 10:12:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x30}], 0x1}, 0x0) 10:12:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d0fd1bd", 0x2e}], 0x1}, 0x0) [ 1914.747365][ T8756] bond954: (slave bridge1201): making interface the new active one [ 1914.772765][ T8756] bond954: (slave bridge1201): Enslaving as an active interface with an up link [ 1914.806949][ T8754] 8021q: adding VLAN 0 to HW filter on device bond954 [ 1914.890738][ T8754] team0: Port device bond954 added 10:12:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0xc0}], 0x1}, 0x0) 10:12:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) [ 1915.030236][ T8756] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:19 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1800) [ 1915.258827][ T8756] bond954: (slave bridge1202): Enslaving as an active interface with a down link 10:12:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa800}, 0x0) 10:12:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d60d1bd", 0x2e}], 0x1}, 0x0) 10:12:19 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080000b000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0xec0}], 0x1}, 0x0) 10:12:19 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1807) [ 1915.321470][ T8818] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1915.353189][ T8818] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1915.398815][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:19 executing program 5: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801fdb59cce59ba2700100e90005"], 0x1}}, 0x0) r2 = socket(0x0, 0x800000000000002, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0xfe, 0x800000, 0xbf2d}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x7, 0xc5}, &(0x7f0000000040)=0x90) sendfile(r3, r1, 0x0, 0x100000001) 10:12:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x33fe0}], 0x1}, 0x0) 10:12:19 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080000c000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0xf}], 0x1}, 0x0) [ 1915.634816][ T8830] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:19 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1f00) 10:12:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2000006e}], 0x1}, 0x0) 10:12:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x18}], 0x1}, 0x0) [ 1916.018772][ T37] audit: type=1804 audit(1621764739.926:602): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir158349253/syzkaller.eOyK54/1487/cgroup.controllers" dev="sda1" ino=15131 res=1 errno=0 [ 1916.081040][ T8831] bond955: (slave bridge1203): making interface the new active one [ 1916.141394][ T8831] bond955: (slave bridge1203): Enslaving as an active interface with an up link [ 1916.195754][ T8846] 8021q: adding VLAN 0 to HW filter on device bond955 [ 1916.304063][ T8846] team0: Port device bond955 added [ 1916.392354][ T8830] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xa900}, 0x0) 10:12:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000100000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100736974001c000280050004000100000008000200ac1414bb06000d00ff000000"], 0x48}}, 0x0) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 10:12:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x7ffff000}], 0x1}, 0x0) 10:12:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x30}], 0x1}, 0x0) 10:12:20 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x224e) 10:12:20 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080000e000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0xfffffdef}], 0x1}, 0x0) 10:12:20 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080000f000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0xc0}], 0x1}, 0x0) 10:12:20 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080000e000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1916.775467][ T8912] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:20 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x234e) 10:12:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0xec0}], 0x1}, 0x0) [ 1917.233089][ T8913] bond956: (slave bridge1204): making interface the new active one [ 1917.290717][ T8913] bond956: (slave bridge1204): Enslaving as an active interface with an up link [ 1917.334022][ T8918] 8021q: adding VLAN 0 to HW filter on device bond956 [ 1917.364919][ T8918] team0: Port device bond956 added [ 1917.462289][ T8912] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xaa00}, 0x0) 10:12:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x33fe0}], 0x1}, 0x0) 10:12:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x2}, 0x0) 10:12:21 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x244e) 10:12:21 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000623a64130000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000e824a52e1d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000100000274e25745b4736c6176655f3100080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f60000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000000b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616d6c657231000000000000000000000000000004000000000000000000000005000000a600000100000000005f0200000000003000434f4e4e4d41524b000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000f6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534901000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000700000000000000000000000000feffffff1b0ef28a27056eeb9466bc6487d0b4e0a783122c8c179f02fc17be73e64b89fcfa262f4513f1ea5a535a77cabcae031baa07ec934d0a8f61ce72ab6daaaea4a2aca9f57c3492b797cccb7d866122f9f94f16e221e49a3613ea54b63ae3371534a3d5df4649d3d8d8ecf5bd23b78f60ed60cbabf27f6d76cfeb12778f57c5"], 0x1) r4 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x1) socket$isdn(0x22, 0x3, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) close(r5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="87"], 0x4240a2a0) r6 = socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 10:12:21 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800011000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:21 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000805d12000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:21 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x2c4e) 10:12:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x3}, 0x0) [ 1917.751546][ T8987] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2000006e}], 0x1}, 0x0) 10:12:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x7}, 0x0) 10:12:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x7ffff000}], 0x1}, 0x0) [ 1918.218949][ T8990] bond957: (slave bridge1205): making interface the new active one [ 1918.321465][ T8990] bond957: (slave bridge1205): Enslaving as an active interface with an up link [ 1918.351175][ T8991] 8021q: adding VLAN 0 to HW filter on device bond957 [ 1918.432849][ T8991] team0: Port device bond957 added [ 1918.575149][ T8987] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xab00}, 0x0) 10:12:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x8}, 0x0) 10:12:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0xfffffdef}], 0x1}, 0x0) 10:12:22 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000806558000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1918.810836][ T9047] net_ratelimit: 55 callbacks suppressed [ 1918.810858][ T9047] openvswitch: netlink: Message has 2 unknown bytes. [ 1918.826657][T12366] bond1: (slave bridge1): failed to get link speed/duplex [ 1918.833822][T12366] bond6: (slave bridge9): failed to get link speed/duplex [ 1918.925873][T16946] bond3: (slave gretap1): failed to get link speed/duplex [ 1919.001973][ T9053] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1919.163232][ T9054] bond958: (slave bridge1206): making interface the new active one [ 1919.178636][ T9054] bond958: (slave bridge1206): Enslaving as an active interface with an up link [ 1919.203040][ T9055] 8021q: adding VLAN 0 to HW filter on device bond958 [ 1919.295922][ T9055] team0: Port device bond958 added [ 1919.348869][ T2564] bond1: (slave bridge1): failed to get link speed/duplex [ 1919.381296][ T9055] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1919.435198][T16946] bond6: (slave bridge9): failed to get link speed/duplex [ 1919.454819][T12385] bond3: (slave gretap1): failed to get link speed/duplex [ 1919.503385][ T9] bond1: (slave bridge1): failed to get link speed/duplex [ 1919.554271][ T9] bond6: (slave bridge9): failed to get link speed/duplex [ 1919.594074][ T9] bond3: (slave gretap1): failed to get link speed/duplex 10:12:23 executing program 5: mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x100000c, 0x8004400b871, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x20000000000001) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) clock_gettime(0x0, &(0x7f0000006640)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006480)=[{{&(0x7f0000000140)=@l2tp, 0x80, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/57, 0x39}, {&(0x7f0000001240)=""/143, 0x8f}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/59, 0x3b}, {&(0x7f0000001440)=""/18, 0x12}, {&(0x7f0000001480)=""/140, 0x8c}], 0x8, &(0x7f00000015c0)=""/213, 0xd5}, 0x1ff}, {{&(0x7f00000016c0)=@tipc, 0x80, &(0x7f0000001840)=[{&(0x7f0000001740)=""/196, 0xc4}], 0x1, &(0x7f0000001880)=""/214, 0xd6}, 0x5}, {{&(0x7f0000001980)=@sco, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001f80)=""/4096, 0x1000}], 0x1, &(0x7f0000001a40)=""/180, 0xb4}, 0xc9}, {{&(0x7f0000001b00)=@nl, 0x80, &(0x7f0000001e80)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/238, 0xee}, {&(0x7f0000001c80)=""/233, 0xe9}, {&(0x7f0000001d80)=""/229, 0xe5}, {&(0x7f0000003f80)=""/241, 0xf1}], 0x5}, 0xce5a}, {{&(0x7f0000004080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004100)=""/101, 0x65}, {&(0x7f0000004180)=""/111, 0x6f}, {&(0x7f0000004200)=""/220, 0xdc}, {&(0x7f0000004300)=""/140, 0x8c}, {&(0x7f00000043c0)=""/75, 0x4b}, {&(0x7f0000004440)=""/136, 0x88}], 0x6, &(0x7f0000004580)=""/80, 0x50}, 0x7}, {{&(0x7f0000004600)=@nfc_llcp, 0x80, &(0x7f0000005980)=[{&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/120, 0x78}, {&(0x7f0000001f00)=""/33, 0x21}, {&(0x7f0000005700)=""/22, 0x16}, {&(0x7f0000005740)=""/232, 0xe8}, {&(0x7f0000005840)=""/207, 0xcf}, {&(0x7f0000005940)=""/50, 0x32}], 0x7, &(0x7f0000005a00)=""/137, 0x89}, 0x4}, {{&(0x7f0000005ac0)=@can, 0x80, &(0x7f00000062c0)=[{&(0x7f0000005b40)=""/170, 0xaa}, {&(0x7f0000005c00)=""/196, 0xc4}, {&(0x7f0000005d00)=""/111, 0x6f}, {&(0x7f0000005d80)=""/183, 0xb7}, {&(0x7f0000005e40)=""/253, 0xfd}, {&(0x7f0000005f40)=""/195, 0xc3}, {&(0x7f0000006040)=""/249, 0xf9}, {&(0x7f0000006140)=""/149, 0x95}, {&(0x7f0000006200)=""/181, 0xb5}], 0x9, &(0x7f0000006380)=""/194, 0xc2}, 0xb045}], 0x7, 0x40002000, &(0x7f0000006680)={r6, r7+60000000}) sendto$inet(r2, &(0x7f0000000000)="07ba64f33449d98dccb98beefd7dc127365a70c50afa5fc9b6ba828f17d8060cb43a771ecff7eb3bd814457c4645c31ba403f543e555243f6110696048756c5ed6deb74738fe701eadfb238cede68ea6d3f9e3eda72d5f71bc3eb6d8ee8d237b0de3c741ed6715021778e8ad9858730e97822d087c4b30c53230be88b2c864a4791ee8996c87027134b869d1097988509b371fe81c56d036366379abad04d8e6e1fe0526eada95059826495d3e2711106cd7c07f", 0xb4, 0x40040c8, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) recvmmsg(r0, &(0x7f0000001f4c), 0x209a6b90bb7b17, 0x0, 0x0) 10:12:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x2}, 0x0) 10:12:23 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x3f00) 10:12:23 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080125d000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0xb}, 0x0) 10:12:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xac00}, 0x0) [ 1919.822208][ T9102] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x3}, 0x0) 10:12:23 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4800) 10:12:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x300}, 0x0) [ 1920.124671][ T9110] bond959: (slave bridge1207): making interface the new active one [ 1920.199783][ T9110] bond959: (slave bridge1207): Enslaving as an active interface with an up link 10:12:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x7}, 0x0) 10:12:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0xffffff1f}, 0x0) [ 1920.273085][ T9152] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:24 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800060000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1920.337626][ T9102] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1920.373331][ T9134] 8021q: adding VLAN 0 to HW filter on device bond959 [ 1920.441641][ T9134] team0: Port device bond959 added [ 1920.842722][ T9159] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r3}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=@delqdisc={0x208, 0x25, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xb, 0xfff1}, {0xfffd, 0x6}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x83, 0x2, 0x4, 0x100, 0x0, 0x4, 0x8, 0x8}}, {0x14, 0x2, [0x20, 0x9, 0x2, 0x1, 0x9, 0x0, 0x4, 0x8d15]}}, {{0x1c, 0x1, {0x38, 0x9, 0x5, 0x80, 0x1, 0x1, 0x1, 0x8}}, {0x14, 0x2, [0x3, 0x81, 0x20, 0x1, 0x9, 0xff, 0x200, 0xd99b]}}, {{0x1c, 0x1, {0x9, 0xb8, 0xb2d1, 0x629, 0x2, 0x2, 0x493a, 0x4}}, {0xc, 0x2, [0x5, 0xe2a, 0x400, 0x7fff]}}, {{0x1c, 0x1, {0xee, 0x4, 0xfffd, 0x7, 0x0, 0x5, 0x80000000, 0x1}}, {0x6, 0x2, [0xffff]}}, {{0x1c, 0x1, {0x1, 0xfb, 0x9, 0xb19, 0x1, 0x0, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0x9, 0x1f, 0x0, 0x1, 0x1]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xd3, 0x9, 0x80000000, 0x2, 0x5, 0xffffffff, 0x6}}, {0x10, 0x2, [0x0, 0x20, 0x1, 0xc9f, 0x2, 0x0]}}, {{0x1c, 0x1, {0x4, 0x80, 0x7, 0x10001, 0x2, 0x6, 0x6, 0x4}}, {0xc, 0x2, [0xa39f, 0xc2, 0xf, 0x0]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x54, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x3}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x45}]}]}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x208}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0xfffffec8, &(0x7f00000000c0)={&(0x7f0000000140)=@gettfilter={0x0, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x4}, {0x5, 0x8}, {0x6, 0x10}}, [{0x0, 0xb, 0xffffffff}, {0x0, 0xb, 0x6}, {}, {0x0, 0xb, 0x7}, {0x0, 0xb, 0x2}]}, 0x24}}, 0x0) 10:12:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x8}, 0x0) 10:12:24 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4c00) 10:12:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x2}, 0x0) 10:12:24 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000805865000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xad00}, 0x0) 10:12:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x4}, 0x0) 10:12:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0xb}, 0x0) [ 1921.124858][ T9185] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1921.278461][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x5}, 0x0) [ 1921.478201][ T9193] bond960: (slave bridge1208): making interface the new active one 10:12:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x300}, 0x0) [ 1921.537170][ T9193] bond960: (slave bridge1208): Enslaving as an active interface with an up link [ 1921.564782][ T9227] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x6}, 0x0) [ 1921.667622][ T9228] 8021q: adding VLAN 0 to HW filter on device bond960 10:12:25 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800070000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1921.750523][ T9228] team0: Port device bond960 added 10:12:25 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022c290c000c009900008001005e0000000400f4000400f4000400f4000400f4000400f400"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) pipe(&(0x7f0000000b00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9f, 0x5a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x26}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400dc5c0000", @ANYRES16=r1, @ANYBLOB="000426bd7000ffdbdf256c000000"], 0x14}}, 0x48084) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x19, 0x0, "c6931b69944a674d5a4d0693b234f67e0a0853ec8b032a5782bf4990c2a81e82003d0cc6c2974e321064981afaf2922fde939921276c6ff9b178c5fcaa73b76d65d393a3772d7182e8bfaf0be8facbdb"}, 0xd8) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x2400800a, &(0x7f00000005c0)={0x2, 0x5e20, @loopback}, 0x10) r5 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000340)=0x80) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x6, 0x4, 0x5, 0x6, 0x9, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x528, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7f}}, 0x0, 0x1, 0x0, 0x7, 0xffff8e25}}, &(0x7f0000000440)=0xb0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000100)="308effe0b1eff852b5360de58ac30cf307b039857a83651a9395149836649ace77662eabcd1fee90b8b8181595cf7f0ecb26", 0xffffffffffffffec, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="000228bd7000ffdbdf254b00000008000300", @ANYRES32=r3, @ANYBLOB="44002c80080000000000000008000000aeea0000080000000000000008000000a400000008000000080000000800000000e2010008000000eaf4000008000000020000000a00f500ffffffffffff00003c002c80080000003f000051d78f4a2977940008000000020000000800000040000000080000000500000008000000ffffff7f080000000900000008000000030000000400ff00"], 0xac}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000004c0)={0x2, 0x40, 0x8000, 0x9, 0x1, 0xffff, 0x200, 0x40, r6}, &(0x7f0000000500)=0x20) 10:12:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0xffffff1f}, 0x0) [ 1921.801456][ T9185] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:25 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4e22) 10:12:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x7}, 0x0) 10:12:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xae00}, 0x0) 10:12:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x2}, 0x0) 10:12:26 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800081000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:26 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4e23) [ 1922.137080][ T9266] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x8}, 0x0) 10:12:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000140)="29349429d64d3a5e358cc369a661105cd75c54ec3bd6821d19256f971d5030f0c378eb72e6a09e9f30b9e9e16b2c82ddf972349e8b2ab6bec71990bfbd1b102fec7a97d4702c688f2fb05dcc81c941a33ef86f75681f39479d9eef946c0441abbd56b99c9cc111daa917", &(0x7f00000001c0)=""/77}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x18000, 0x5e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) pipe(&(0x7f0000000b00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9f, 0x5a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x26}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc000) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x9000000, r0, 0x0, 0x0, 0x11}) 10:12:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x4}, 0x0) 10:12:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x5}, 0x0) 10:12:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x9}, 0x0) [ 1922.572556][ T9268] bond961: (slave bridge1209): making interface the new active one [ 1922.650570][ T9268] bond961: (slave bridge1209): Enslaving as an active interface with an up link 10:12:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x6}, 0x0) [ 1922.703378][ T9273] 8021q: adding VLAN 0 to HW filter on device bond961 10:12:26 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x1000, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_GSO_MAX_SIZE={0x8}]}, 0x38}}, 0x0) [ 1922.760492][ T37] audit: type=1800 audit(1621764746.667:603): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=14595 res=0 errno=0 [ 1922.819574][ T9273] team0: Port device bond961 added 10:12:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xe}, 0x0) [ 1922.947356][ T9266] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xaf00}, 0x0) 10:12:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4e24) 10:12:27 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140000008000f0000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x7}, 0x0) 10:12:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf}, 0x0) 10:12:27 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800081000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x8}, 0x0) [ 1923.283122][ T9348] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4e2c) 10:12:27 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800040030000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x9}, 0x0) 10:12:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xe}, 0x0) 10:12:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x60}, 0x0) [ 1923.686398][ T9351] bond962: (slave bridge1210): making interface the new active one [ 1923.779859][ T9351] bond962: (slave bridge1210): Enslaving as an active interface with an up link [ 1923.815927][ T9363] 8021q: adding VLAN 0 to HW filter on device bond962 [ 1923.851403][ T9363] team0: Port device bond962 added [ 1923.860188][T12366] net_ratelimit: 50 callbacks suppressed [ 1923.860207][T12366] bond3: (slave gretap1): failed to get link speed/duplex [ 1923.930646][ T9348] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1924.021160][ T9351] bond962: (slave bridge1211): Enslaving as an active interface with a down link [ 1924.051617][T12366] bond6: (slave bridge9): failed to get link speed/duplex 10:12:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb000}, 0x0) 10:12:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf}, 0x0) 10:12:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0}, 0x0) 10:12:28 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) unshare(0x40000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 10:12:28 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800003400000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:28 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x6300) [ 1924.090897][ T108] bond1: (slave bridge1): failed to get link speed/duplex [ 1924.114605][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1924.190053][ T108] bond6: (slave bridge9): failed to get link speed/duplex [ 1924.234537][ T108] bond1: (slave bridge1): failed to get link speed/duplex 10:12:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x60}, 0x0) [ 1924.334058][T12385] bond3: (slave gretap1): failed to get link speed/duplex [ 1924.360258][ T9418] lo speed is unknown, defaulting to 1000 [ 1924.366940][ T9427] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:28 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x6800) 10:12:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0}, 0x0) [ 1924.449894][ T108] bond6: (slave bridge9): failed to get link speed/duplex 10:12:28 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080fffff00000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x500}, 0x0) [ 1924.601805][ T9432] 8021q: adding VLAN 0 to HW filter on device bond963 10:12:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x500}, 0x0) [ 1924.708954][ T9432] team0: Port device bond963 added [ 1924.753865][ T2564] bond3: (slave gretap1): failed to get link speed/duplex [ 1924.797930][ T9432] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1924.846299][ T9] bond1: (slave bridge1): failed to get link speed/duplex 10:12:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb100}, 0x0) 10:12:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x600}, 0x0) 10:12:28 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x6c00) [ 1925.108423][ T9425] lo speed is unknown, defaulting to 1000 [ 1925.138825][ T9490] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1925.342322][ T9494] bond964: (slave bridge1213): making interface the new active one [ 1925.371943][ T9494] bond964: (slave bridge1213): Enslaving as an active interface with an up link [ 1925.449130][ T9490] 8021q: adding VLAN 0 to HW filter on device bond964 [ 1925.499654][ T9490] team0: Port device bond964 added [ 1925.622837][ T9490] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x40000000000024a, 0x0) 10:12:32 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000100001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x600}, 0x0) 10:12:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x700}, 0x0) 10:12:32 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x7400) 10:12:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb200}, 0x0) 10:12:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x700}, 0x0) [ 1928.810979][ T9593] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:32 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000200001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x900}, 0x0) 10:12:32 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x7a00) [ 1929.011777][ T9597] bond965: (slave bridge1214): making interface the new active one [ 1929.059346][ T9597] bond965: (slave bridge1214): Enslaving as an active interface with an up link 10:12:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x900}, 0x0) [ 1929.172075][ T9632] 8021q: adding VLAN 0 to HW filter on device bond965 [ 1929.257038][ T9632] team0: Port device bond965 added 10:12:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xe00}, 0x0) [ 1929.362420][ T57] net_ratelimit: 90 callbacks suppressed [ 1929.362440][ T57] bond1: (slave bridge1): failed to get link speed/duplex 10:12:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x74, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:event_device_t:s0\x00'}]}, 0x74}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={r3}) r5 = socket(0x23, 0x80000, 0x1000) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001100), 0x8) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000001240)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dfff2e1e", @ANYRES16=0x0, @ANYBLOB="002f847456c2b3192400078008000100"/29, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100000000000c000600010000000000000008000100000000002c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0c0003004007000000000000"], 0x8c}}, 0x4004044) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x30, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xf010948ecd701b6c) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x10}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) [ 1929.426121][ T9593] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1929.465188][ T25] bond6: (slave bridge9): failed to get link speed/duplex 10:12:33 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000300001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1929.496850][ T25] bond3: (slave gretap1): failed to get link speed/duplex 10:12:33 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xc000) 10:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb300}, 0x0) 10:12:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xe00}, 0x0) [ 1929.603673][ T25] bond1: (slave bridge1): failed to get link speed/duplex [ 1929.660189][T16946] bond6: (slave bridge9): failed to get link speed/duplex [ 1929.715166][T16946] bond3: (slave gretap1): failed to get link speed/duplex 10:12:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf00}, 0x0) [ 1929.776262][ T3974] bond1: (slave bridge1): failed to get link speed/duplex [ 1929.825977][ T3974] bond6: (slave bridge9): failed to get link speed/duplex [ 1929.854550][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1929.910485][ T2564] bond1: (slave bridge1): failed to get link speed/duplex 10:12:33 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000400001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf00}, 0x0) [ 1929.991486][ T9667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:12:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x1354}, 0x0) [ 1930.079266][ T9667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1930.111617][ T9667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:12:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x1115}, 0x0) [ 1930.248186][ T3974] bond3: (slave gretap1): link status up again after 0 ms [ 1930.294231][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1930.299895][T29674] bond3: (slave gretap1): link status up again after 0 ms [ 1930.353518][ T25] bond6: (slave bridge9): link status up again after 0 ms [ 1930.380775][ T3974] bond3: (slave gretap1): link status up again after 0 ms [ 1930.388255][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1930.415005][ T25] bond6: (slave bridge9): link status up again after 0 ms [ 1930.441464][ T9669] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1930.449789][T29674] bond6: (slave bridge9): link status up again after 0 ms 10:12:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x3f00}, 0x0) [ 1930.464718][ T3974] bond6: (slave bridge9): link status up again after 0 ms [ 1930.473511][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1930.503401][T29674] bond6: (slave bridge9): link status up again after 0 ms 10:12:34 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) [ 1930.559986][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1930.586944][ T57] bond6: (slave bridge9): link status up again after 0 ms [ 1930.662366][ T57] bond3: (slave gretap1): link status up again after 0 ms [ 1930.679180][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1930.681969][ T9671] bond966: (slave bridge1215): making interface the new active one [ 1930.694247][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1930.717733][ T2564] bond3: (slave gretap1): link status up again after 0 ms [ 1930.727079][ T57] bond6: (slave bridge9): link status up again after 0 ms 10:12:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb200}, 0x0) 10:12:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x1511}, 0x0) [ 1930.769367][ T57] bond6: (slave bridge9): link status up again after 0 ms [ 1930.805114][T16946] bond3: (slave gretap1): link status up again after 0 ms [ 1930.850361][ T9671] bond966: (slave bridge1215): Enslaving as an active interface with an up link [ 1930.876052][T12366] bond6: (slave bridge9): link status up again after 0 ms [ 1930.921941][T16946] bond6: (slave bridge9): link status up again after 0 ms [ 1930.931948][T12366] bond3: (slave gretap1): link status up again after 0 ms 10:12:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x5413}, 0x0) [ 1930.971440][ T9673] 8021q: adding VLAN 0 to HW filter on device bond966 [ 1930.973852][T12366] bond6: (slave bridge9): link status up again after 0 ms [ 1930.979607][ T9] bond3: (slave gretap1): link status up again after 0 ms [ 1931.030889][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1931.042584][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1931.061166][ T9673] team0: Port device bond966 added [ 1931.078456][ T9669] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1931.127472][ T57] bond6: (slave bridge9): link status up again after 0 ms 10:12:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb400}, 0x0) 10:12:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x3f00}, 0x0) 10:12:35 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000500001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1931.127556][ T57] bond3: (slave gretap1): link status up again after 0 ms [ 1931.154082][ T25] bond6: (slave bridge9): link status up again after 0 ms 10:12:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x6000}, 0x0) 10:12:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x6000}, 0x0) 10:12:35 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000600001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1931.154632][ T57] bond3: (slave gretap1): link status up again after 0 ms [ 1931.161390][ T9732] bond966: (slave bridge1216): Enslaving as an active interface with a down link [ 1931.162048][ T9737] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1931.190649][ T9] bond3: (slave gretap1): link status up again after 0 ms 10:12:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf000}, 0x0) 10:12:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf000}, 0x0) [ 1931.190703][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1931.203538][T12366] bond6: (slave bridge9): link status up again after 0 ms [ 1931.203597][T12366] bond3: (slave gretap1): link status up again after 0 ms [ 1931.224744][T12366] bond3: (slave gretap1): link status up again after 0 ms [ 1931.224781][T12366] bond6: (slave bridge9): link status up again after 0 ms [ 1931.245245][ T25] bond6: (slave bridge9): link status up again after 0 ms [ 1931.245294][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1931.265473][ T9] bond3: (slave gretap1): link status up again after 0 ms [ 1931.265540][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1931.283557][ T9] bond3: (slave gretap1): link status up again after 0 ms [ 1931.303936][ T25] bond6: (slave bridge9): link status up again after 0 ms [ 1931.310394][T12385] bond3: (slave gretap1): link status up again after 0 ms [ 1931.327073][ T9] bond3: (slave gretap1): link status up again after 0 ms [ 1931.327114][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1931.347554][T16946] bond6: (slave bridge9): link status up again after 0 ms [ 1931.347596][T16946] bond3: (slave gretap1): link status up again after 0 ms [ 1931.376789][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1931.376837][ T25] bond6: (slave bridge9): link status up again after 0 ms [ 1931.393569][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1931.393596][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1931.402006][ T9742] bond29: (slave bridge38): making interface the new active one [ 1931.413035][ T9742] bond29: (slave bridge38): Enslaving as an active interface with an up link [ 1931.421313][ T9776] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1931.424450][ T9] bond6: (slave bridge9): link status up again after 0 ms [ 1931.424530][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1931.427729][ T9776] team0: Port device bond29 added [ 1931.443875][ T25] bond6: (slave bridge9): link status up again after 0 ms [ 1931.443922][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1931.474841][ T25] bond3: (slave gretap1): link status up again after 0 ms [ 1931.476872][T12366] bond6: (slave bridge9): link status up again after 0 ms 10:12:36 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x34000) [ 1931.496352][ T25] bond6: (slave bridge9): link status up again after 0 ms [ 1931.567475][ T9790] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1931.749194][ T9790] 8021q: adding VLAN 0 to HW filter on device bond967 [ 1931.752785][ T9790] team0: Port device bond967 added 10:12:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe2, 0xc}, {0xffe0, 0x5}, {0xb, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7f}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=@getchain={0x4c, 0x66, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {0x4, 0xe}, {0xfff1, 0xe}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xc0ba}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x430}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/97, 0xfff00000000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr, {[@timestamp_prespec={0x44, 0x4c, 0x0, 0x3, 0x0, [{@remote}, {@broadcast}, {@empty}, {@local}, {@multicast2}, {@local}, {@loopback}, {@multicast2}, {@remote}]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@empty}, {@private}, {@remote}]}]}}}}}) listen(r0, 0x1) 10:12:36 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000700001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x34000}, 0x0) [ 1932.525677][ T9794] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb500}, 0x0) 10:12:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x34000}, 0x0) 10:12:36 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x40000) 10:12:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x400300}, 0x0) 10:12:36 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000800001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:36 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x400300) 10:12:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x400300}, 0x0) 10:12:37 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x8912, 0x13) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) r7 = accept4$inet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x22, 0x800) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0219eefe1a000000de0a"], 0x16) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_newrule={0x38, 0x20, 0x20, 0x70bd2a, 0x25dfdbfb, {0x2, 0x10, 0x20, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xffffffff}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000380)=ANY=[], 0xfef0) r9 = openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) splice(r2, 0x0, r8, 0x0, 0x80000001, 0x0) [ 1933.041129][ T9869] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0ffff}, 0x0) 10:12:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0ffff}, 0x0) 10:12:37 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1000000) [ 1933.452083][ T9873] bond968: (slave bridge1219): making interface the new active one 10:12:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x1000000}, 0x0) [ 1933.538654][ T9873] bond968: (slave bridge1219): Enslaving as an active interface with an up link [ 1933.582329][ T9891] 8021q: adding VLAN 0 to HW filter on device bond968 [ 1933.649348][ T9891] team0: Port device bond968 added [ 1933.668760][ T9899] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1933.725101][ T9869] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1933.777954][ T9899] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb600}, 0x0) 10:12:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x1000000}, 0x0) 10:12:37 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x2000000) 10:12:37 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000900001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x2000000}, 0x0) 10:12:37 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '$'}, {0x20, '!/'}, {}, {0x20, '#:&.}'}], 0xa, "ac595f5190bbf5d8b72cb2a9a7332c1ca59c69418ce6545828081c1d40707a13f3d8e89a63262c0435ae8b0b99aa549e81de8449e2e2b10f03c8f930a2d379953f"}, 0x5a) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffff67006cf9e6f6adf038f1ff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3257d4b3730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4fea70fe376d8139b9c9ed1f8532b60de8163f6242fa7323f1740637c48468766af54043070000000000000062dcae08c3d1a1fbe96d"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 10:12:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x2000000}, 0x0) 10:12:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x4000000}, 0x0) [ 1934.130690][ T9941] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x3000000) 10:12:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x5000000}, 0x0) 10:12:38 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x28010880) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54) 10:12:38 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000a00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1934.556515][ T9945] bond969: (slave bridge1220): making interface the new active one [ 1934.643504][ T9945] bond969: (slave bridge1220): Enslaving as an active interface with an up link [ 1934.727688][ T9948] 8021q: adding VLAN 0 to HW filter on device bond969 [ 1934.775355][ T9948] team0: Port device bond969 added [ 1934.832343][ T2564] net_ratelimit: 41 callbacks suppressed [ 1934.832362][ T2564] bond1: (slave bridge1): failed to get link speed/duplex [ 1934.847340][ T9997] lo speed is unknown, defaulting to 1000 [ 1934.866576][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1934.895879][ T9941] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1934.929210][ T9] bond6: (slave bridge9): failed to get link speed/duplex 10:12:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb700}, 0x0) 10:12:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x4000000}, 0x0) 10:12:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x6000000}, 0x0) 10:12:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000) 10:12:38 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000b00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1934.986980][ T9] bond1: (slave bridge1): failed to get link speed/duplex [ 1935.023488][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1935.114276][ T57] bond1: (slave bridge1): failed to get link speed/duplex [ 1935.134769][ T9] bond6: (slave bridge9): failed to get link speed/duplex [ 1935.209386][ T25] bond3: (slave gretap1): failed to get link speed/duplex [ 1935.264803][ T25] bond6: (slave bridge9): failed to get link speed/duplex 10:12:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x5000000}, 0x0) 10:12:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x5000000) [ 1935.336935][ T25] bond1: (slave bridge1): failed to get link speed/duplex 10:12:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x7000000}, 0x0) 10:12:39 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000c00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1935.417483][T10015] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x8000000}, 0x0) [ 1935.821677][T10017] bond970: (slave bridge1221): making interface the new active one [ 1935.882848][T10017] bond970: (slave bridge1221): Enslaving as an active interface with an up link [ 1935.923259][T10015] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1936.045116][ T9999] lo speed is unknown, defaulting to 1000 10:12:40 executing program 5: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)='\x00\x00', 0x2}, {&(0x7f0000000040)="fde8d3540100000000000000000000001000", 0x12}], 0x2}}], 0x1, 0x28000800) 10:12:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x6000000}, 0x0) 10:12:40 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x6000000) 10:12:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x9000000}, 0x0) 10:12:40 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000e00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb800}, 0x0) [ 1936.746127][T10126] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xe000000}, 0x0) 10:12:40 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x6010000) 10:12:40 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000f00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x7000000}, 0x0) 10:12:40 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000008c0)='ns/user\x00') r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = gettid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_NEWNSID={0x34, 0x58, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004040}, 0x40812) 10:12:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf000000}, 0x0) [ 1937.125065][T10128] bond971: (slave bridge1222): making interface the new active one [ 1937.207851][T10128] bond971: (slave bridge1222): Enslaving as an active interface with an up link 10:12:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x3f000000}, 0x0) [ 1937.282095][T10140] 8021q: adding VLAN 0 to HW filter on device bond971 10:12:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x8000000}, 0x0) 10:12:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000900000b01080000001f0000000007008000100002000c000280050001000000a86ef1c75126ead89bb9b5000008000640000000000800036d0000000009"], 0x40}}, 0x0) [ 1937.350278][T10140] team0: Port device bond971 added [ 1937.458011][T10126] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:41 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x7000000) 10:12:41 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000001000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xb900}, 0x0) 10:12:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x54130000}, 0x0) 10:12:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x9000000}, 0x0) 10:12:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffff2, &(0x7f0000000180)={0x0}}, 0x0) socket(0x2a, 0x3, 0xddd) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee30cf7c00000000a22300", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0xf, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0xfffffffffffffe79, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x3, {{0x2}}}}}}]}, 0x48}}, 0x0) 10:12:41 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000001100001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:41 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x7180000) 10:12:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x60000000}, 0x0) [ 1938.038374][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xe000000}, 0x0) [ 1938.172975][T10207] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x9effffff}, 0x0) 10:12:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf000000}, 0x0) [ 1938.513626][T10212] bond972: (slave bridge1223): making interface the new active one [ 1938.540260][T10212] bond972: (slave bridge1223): Enslaving as an active interface with an up link [ 1938.588243][T10219] 8021q: adding VLAN 0 to HW filter on device bond972 [ 1938.619170][T10219] team0: Port device bond972 added [ 1938.644753][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0ffffff}, 0x0) 10:12:42 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000125d00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1938.806156][T10207] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xba00}, 0x0) 10:12:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x11150000}, 0x0) 10:12:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/204, 0xfffffff1}}], 0x1500, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) recvmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f0000000400)=""/231, 0xe7}], 0x3, &(0x7f0000000540)=""/225, 0xe1}, 0x0) 10:12:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000000) 10:12:43 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xfffff000}, 0x0) 10:12:43 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000006000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1939.195712][T10287] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x3f000000}, 0x0) 10:12:43 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xffffff7f}, 0x0) [ 1939.696523][T10291] bond973: (slave bridge1224): making interface the new active one [ 1939.758992][T10291] bond973: (slave bridge1224): Enslaving as an active interface with an up link 10:12:43 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xffffff9e}, 0x0) 10:12:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x60000000}, 0x0) [ 1939.808632][T10296] 8021q: adding VLAN 0 to HW filter on device bond973 [ 1939.871947][T10296] team0: Port device bond973 added [ 1939.892901][T12366] net_ratelimit: 49 callbacks suppressed [ 1939.892919][T12366] bond1: (slave bridge1): failed to get link speed/duplex [ 1939.933001][ T3974] bond6: (slave bridge9): failed to get link speed/duplex [ 1939.992928][ T57] bond3: (slave gretap1): failed to get link speed/duplex 10:12:44 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x9000000) [ 1940.048750][T10287] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:44 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000586500001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1940.095950][T12385] bond1: (slave bridge1): failed to get link speed/duplex [ 1940.123042][T12385] bond6: (slave bridge9): failed to get link speed/duplex [ 1940.164873][ T57] bond3: (slave gretap1): failed to get link speed/duplex 10:12:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xbb00}, 0x0) 10:12:44 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000006000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xfffffff0}, 0x0) [ 1940.232064][T12385] bond1: (slave bridge1): failed to get link speed/duplex 10:12:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x9effffff}, 0x0) [ 1940.292915][ T2564] bond6: (slave bridge9): failed to get link speed/duplex [ 1940.323301][ T2564] bond3: (slave gretap1): failed to get link speed/duplex [ 1940.401120][T12366] bond1: (slave bridge1): failed to get link speed/duplex 10:12:44 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xa000000) 10:12:44 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000007000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x40030000000000}, 0x0) 10:12:44 executing program 5: unshare(0x6c060000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev}}]}, @IPSET_ATTR_FAMILY={0x5}]}, 0x58}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000600)=ANY=[@ANYBLOB="ff0002002d3a7a2c0000000009000000ac141458c95723d6d2aa640101017f000001e0000002ac141417e0000002ac1414bbffffff0a010101"], 0x34) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r2, &(0x7f0000000080)="240000001a005f3814f9f407000903018000200000000000000000000800020040000000", 0x24) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f3814f9f407000903018000200000000000000000000800020040000000", 0x24) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f0000000240)="7e5609347c504e6d3e382680901527b7d81f359ad2d7f97d22c1b89460ed5fae189a31db2e06381cc33a9b23fd6c5e99ca42abffa648659217cb2d66bfe07e645bdbed05d01fe96e1ce03140991cd5b5093eec1541717b1289139b0d662d32d8d3ed04c6d9a4c8e7fea1ce31ba8fa035e16473301020e5ac76af8ed6b8f73b9b8c38f7c1553a2f714eb89e71f5d88642504eaf030fe6c8e3abfff88bdb87be7b0a06e7088c0725298c54c1d6173207c7e4b650f3e91b26c941203cfe32c668fbb5b7975ffaa0dfce6be38a469ed2b1aa50f94bd6877526871f7766da01818783620d7a6aafd4e60adfbcdc172845d618339b3c67a06f1ad5f32dda9f5e", &(0x7f0000000340)=""/130, &(0x7f0000000400)="98c4f7f4d1976b6095726c6599902bcb9c9152f34f48b3dafb4a18e27bccd86c714d9f1421b4e21cbc999547ecf6695060b1a7e7bac913b6417eba335020c4935fd1d4624474eb96e5dc69b48df5c23ac06e9e72c06b0036512b2fedea5dfdff48b381d08e8f78ad44855274e4a36f030160394a3aecfeb0b2813d3cc077d4ebd1d60b789394c4065b24a32286e06e0265d6ed2948791d37e54db323f9381d461cc71fa2c055", &(0x7f00000004c0)="5d3ea3981125eb6027f50564f997754e9dd1a78f0562517f1a15501bc65fe686e261f5c2216626e58a3fb1bb70c7b6edf32925f05e2cbe23d98d1c3b0d684bba9b2199ecdab725dbb7a2519bec89010cda1766d72124398f56b0508ce2311c40ca8b8496e3102ecce485808fe691d72dfeb3491e9b15bd79616f2f312ebf4295c814d7adc1d9b0e55d0a724cffb1ce1cdd36c918ff7b20229d7869aaf438fad036499f58a65b0f17db8762644c1adf82e3e66633e4", 0x8, r0}, 0x38) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x0) [ 1940.587644][T10362] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0ffffff}, 0x0) 10:12:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 10:12:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xfffff000}, 0x0) [ 1940.989566][T10364] bond974: (slave bridge1225): making interface the new active one 10:12:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xffffff7f}, 0x0) [ 1941.115124][T10364] bond974: (slave bridge1225): Enslaving as an active interface with an up link [ 1941.206774][T10370] 8021q: adding VLAN 0 to HW filter on device bond974 [ 1941.276916][T10370] team0: Port device bond974 added [ 1941.326964][T10400] lo speed is unknown, defaulting to 1000 [ 1941.391094][T10362] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xbc00}, 0x0) 10:12:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x100000000000000}, 0x0) 10:12:45 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x10010000) 10:12:45 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000008100001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xffffff9e}, 0x0) [ 1941.644453][T10411] lo speed is unknown, defaulting to 1000 [ 1941.825482][T10443] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:45 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x11000000) 10:12:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x200000000000000}, 0x0) [ 1942.247099][T10444] bond975: (slave bridge1226): making interface the new active one [ 1942.282270][T10444] bond975: (slave bridge1226): Enslaving as an active interface with an up link [ 1942.427007][T10443] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1945.016057][ T108] net_ratelimit: 76 callbacks suppressed [ 1945.016076][ T108] bond3: (slave gretap1): failed to get link speed/duplex [ 1945.085600][ T2564] bond6: (slave bridge9): failed to get link speed/duplex [ 1945.167631][ T2564] bond1: (slave bridge1): failed to get link speed/duplex [ 1945.224388][ T2564] bond3: (slave gretap1): failed to get link speed/duplex [ 1945.231572][ T2564] bond6: (slave bridge9): failed to get link speed/duplex [ 1945.332572][ T3974] bond3: (slave gretap1): failed to get link speed/duplex [ 1945.362575][T12366] bond1: (slave bridge1): failed to get link speed/duplex [ 1945.427164][T12366] bond6: (slave bridge9): failed to get link speed/duplex [ 1945.492517][ T2564] bond3: (slave gretap1): failed to get link speed/duplex [ 1945.524261][T12366] bond1: (slave bridge1): failed to get link speed/duplex [ 1950.101812][T16946] net_ratelimit: 113 callbacks suppressed [ 1950.101834][T16946] bond1: (slave bridge1): failed to get link speed/duplex [ 1950.133892][ T108] bond3: (slave gretap1): failed to get link speed/duplex [ 1950.154841][ T108] bond6: (slave bridge9): failed to get link speed/duplex [ 1950.238676][T12385] bond1: (slave bridge1): failed to get link speed/duplex [ 1950.283446][ T2564] bond6: (slave bridge9): failed to get link speed/duplex [ 1950.292450][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 1950.393343][ T57] bond6: (slave bridge9): failed to get link speed/duplex [ 1950.404818][ T2564] bond1: (slave bridge1): failed to get link speed/duplex [ 1950.422672][ T2564] bond3: (slave gretap1): failed to get link speed/duplex [ 1950.502224][T12385] bond6: (slave bridge9): failed to get link speed/duplex 10:12:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x100000}, 0xfffffdef}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="5ceb3192a3db968752bd8706944519d9ddd47ef686705ab342033aa27bbdf47e176ebe89cb967e4df1084eac251fc78c295f7752e0ffbc72e2375f67da9a5a375ba6a45bc9682a83b04eb5ee329cf50dd826ea31b57cced5b0e055b00b2392"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x820005, 0x0}, 0x2c) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@empty, @private2, @remote, 0x3, 0xad9, 0x81, 0x400, 0x9, 0x80004, r6}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x0) 10:12:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xfffffff0}, 0x0) 10:12:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x400000000000000}, 0x0) 10:12:56 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080ffffa88800001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x18000000) 10:12:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xbd00}, 0x0) [ 1952.299314][T10549] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x40030000000000}, 0x0) 10:12:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x500000000000000}, 0x0) [ 1952.570917][T10554] bond976: (slave bridge1227): making interface the new active one 10:12:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 1952.651280][T10554] bond976: (slave bridge1227): Enslaving as an active interface with an up link 10:12:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x600000000000000}, 0x0) 10:12:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1f000000) 10:12:56 executing program 5: getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r0, @in={{0x2, 0x4e23, @multicast2}}, 0xb2, 0x100, 0x0, 0x8001, 0x9, 0x96a, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r0, @in={{0x2, 0x4e22, @remote}}, 0x7, 0x4, 0x5, 0x7, 0x71, 0x99f4, 0x40}, 0x9c) write(0xffffffffffffffff, &(0x7f0000000200)="4e362efdcb9e1222264a9abf64f1b5d166f12586fe87135887da51a67cdf1ff82ef8b082347368b53d603e", 0x2b) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r0, @in={{0x2, 0x4e22, @remote}}, 0x2, 0x200, 0x80000001, 0xcb5f, 0x40, 0x7, 0x80}, 0x9c) splice(r1, &(0x7f0000000340)=0x5, r1, &(0x7f0000000380), 0x4, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={r0, 0x6, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000480)=0x7f, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r0, 0x7}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000580)={r3, 0xd2, "7880befefc96dd54463fea2fbcb8d6326f361220766379b354301cc7cb72cd7c9d937f7fa52275cd092aad6a2827fb12e6bba8eed38df8060e69b2d4eff9548d6c13a1ce5a873b2b8db3441dd4bed70611786b4e0a53b9ff47b1e2e2c46c418fdac2509872c755ba86177028c9e01a7222de878b8e70edc292f7dcae17c93eb20751069286288531584e9ad19ea960c812bb5358e2487db271b28326cb19257ae5d3952dbf8a9cb6c059e949554af95fc1f2c8e38ec7ca1f6aaad8ec2306b21226abb46ad686b68be6cec9d91fe5940110d9"}, &(0x7f0000000680)=0xda) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000740)={0x7, 'tunl0\x00', {0x200}, 0x6}) openat$cgroup_ro(r2, &(0x7f0000000780)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0xffffffff}, @in6={0xa, 0x4e23, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}], 0x64) close(r1) r4 = accept(r2, &(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f00000008c0)=0x80) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000900)={0x1f, 0x19, 0x40, 0xfa, 0x40, 0x0, 0x6, 0x0, 0xa2, 0x9, 0x1, 0x1, 0x0, 0x2}, 0xe) 10:12:56 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080ffffff9e00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1952.781762][T10549] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x100000000000000}, 0x0) 10:12:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x700000000000000}, 0x0) 10:12:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xbe00}, 0x0) 10:12:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x224e0000) 10:12:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @loopback}, 0x1c) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0x23, 0x100, &(0x7f0000001880)={0xa, 0xfffc, 0x0, @mcast2}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="7a1983d4f8cbd3b35fd12ee2fda50c986c3af57f5a4d5c16a29e9873b3afdf13140906ed6ff2ac2f88229016a9cccfb92338473e0382d2a487a848261a9734e670257abd8d9be9d1c6666ef7ed82c23f5cd6b1ad215b223d40dc93b7429e758403cf4916cdc9d3c6a4466b617221972ad8bd0e22c6474ef6ed823e", 0x7b, 0x40000, &(0x7f0000000140)={0xa, 0x4e23, 0x401, @mcast2, 0x3}, 0x1c) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000700000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000080)) mmap(&(0x7f000010c000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x1b990000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) 10:12:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x800000000000000}, 0x0) [ 1953.164055][T10628] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x200000000000000}, 0x0) 10:12:57 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080fffffff000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x234e0000) 10:12:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x400000000000000}, 0x0) 10:12:57 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffff000000000a0001006ef035c67500000010010200ca050000b00e"], 0x140}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @loopback}, 0x1c) recvfrom$inet6(r4, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xcc, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10008044}, 0x4004085) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x198, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff5a}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x4}}]}, 0x198}, 0x1, 0x0, 0x0, 0xc094}, 0x0) sendto$packet(r2, &(0x7f0000000080)="ae36e3fac617ee47083f644449c9ff199d14177eff63475ecfd3d0be85df9b99eb8b2882fdf28b4958e321eadc04f9ec3ee94f6ed54899fee92730d501f9604622e839e374e224ac2f7d79826d7d23b6164fd0943eab3032a76b03afd6df8c0d8f4c87d78ea83e843b006aa841f16f7a27872887f4f2dd5fc520e78d9a547ff8528c047c6777d915f8d799df7fae14a0f1351cbf380abd21886830a4ccdfce8c3d9ba7312495cec4ed6095907240dac6b03b66d77dd8", 0xb6, 0x80, &(0x7f0000000140)={0x11, 0x2, r3, 0x1, 0xf5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}, 0x14) recvfrom$inet6(r4, &(0x7f0000000000)=""/32, 0x20, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x10001, @mcast2}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @mcast1, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000500)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000001800)}, 0x0) [ 1953.557101][T10634] bond977: (slave bridge1228): making interface the new active one 10:12:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x900000000000000}, 0x0) [ 1953.651293][T10634] bond977: (slave bridge1228): Enslaving as an active interface with an up link [ 1953.715599][T10628] 8021q: adding VLAN 0 to HW filter on device bond977 10:12:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x500000000000000}, 0x0) [ 1953.798205][T10628] team0: Port device bond977 added 10:12:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xe00000000000000}, 0x0) [ 1953.858513][T10689] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1953.925562][T10628] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xbf00}, 0x0) 10:12:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x244e0000) 10:12:58 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080fffffffc00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xfff00003}, {0x6}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='veth1_macvtap\x00') sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:12:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x600000000000000}, 0x0) 10:12:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf00000000000000}, 0x0) [ 1954.250576][T10707] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x700000000000000}, 0x0) 10:12:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x3f00000000000000}, 0x0) 10:12:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x2c4e0000) 10:12:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x800000000000000}, 0x0) [ 1954.639100][T10711] bond978: (slave bridge1229): making interface the new active one [ 1954.701699][T10711] bond978: (slave bridge1229): Enslaving as an active interface with an up link 10:12:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x5413000000000000}, 0x0) 10:12:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x26, 0x800, 0x4000002) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x44}}, 0x0) [ 1954.742510][T10719] 8021q: adding VLAN 0 to HW filter on device bond978 [ 1954.805924][T10719] team0: Port device bond978 added [ 1954.887935][T10707] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1954.986090][T10770] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xc000}, 0x0) 10:12:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x900000000000000}, 0x0) 10:12:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x6000000000000000}, 0x0) 10:12:58 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140000008088a8ffff00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x36cd6b7c) [ 1955.133605][T16946] net_ratelimit: 78 callbacks suppressed [ 1955.133627][T16946] bond6: (slave bridge9): failed to get link speed/duplex 10:12:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xe00000000000000}, 0x0) [ 1955.214836][ T108] bond3: (slave gretap1): failed to get link speed/duplex [ 1955.228788][T10770] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 1955.333857][ T9] bond1: (slave bridge1): failed to get link speed/duplex [ 1955.341179][T10788] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:12:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x3f000000) 10:12:59 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b140000008000f0ffff00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:12:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf00000000000000}, 0x0) 10:12:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1955.699652][T10792] bond979: (slave bridge1230): making interface the new active one [ 1955.795426][T10792] bond979: (slave bridge1230): Enslaving as an active interface with an up link [ 1955.837557][T10797] 8021q: adding VLAN 0 to HW filter on device bond979 10:12:59 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080fffffffc00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1955.890835][T10797] team0: Port device bond979 added [ 1955.914886][ T9] bond3: (slave gretap1): failed to get link speed/duplex [ 1955.954926][ T3974] bond1: (slave bridge1): failed to get link speed/duplex [ 1956.013210][T10792] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1956.115811][T10792] bond979: (slave bridge1231): Enslaving as an active interface with a down link [ 1956.165627][ T3974] bond3: (slave gretap1): failed to get link speed/duplex 10:13:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xc100}, 0x0) 10:13:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x1115000000000000}, 0x0) 10:13:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xffffff7f00000000}, 0x0) 10:13:00 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000807fffffff00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:13:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x48000000) [ 1956.210573][ T9] bond6: (slave bridge9): failed to get link speed/duplex 10:13:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180005000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000003000008001300", @ANYRES32=r1, @ANYBLOB], 0x50}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newroute={0x3c, 0x18, 0x400, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x14, 0x4, 0xfc, 0x1, 0xfe, 0x8, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0x3fa}, @RTA_PREF={0x5, 0x14, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_OIF={0x8, 0x4, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r6 = gettid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000040)=r6) bind(0xffffffffffffffff, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@setlink={0x4c, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKMODE={0x5}, @IFLA_WEIGHT={0x8, 0xf, 0xe1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0x1e4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x832c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x16c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa72e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x84d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa031}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x67}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd955}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x2000004}, 0x4800) syz_open_procfs$namespace(r6, &(0x7f0000000080)='ns/net\x00') [ 1956.283710][ T108] bond1: (slave bridge1): failed to get link speed/duplex [ 1956.305794][ T108] bond3: (slave gretap1): failed to get link speed/duplex [ 1956.363037][T10866] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:13:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4c000000) 10:13:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 1956.453571][ T108] bond1: (slave bridge1): failed to get link speed/duplex 10:13:00 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000809effffff00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:13:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x3f00000000000000}, 0x0) 10:13:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 1956.669558][T10869] bond980: (slave bridge1232): making interface the new active one [ 1956.709115][T10869] bond980: (slave bridge1232): Enslaving as an active interface with an up link [ 1956.770551][T10866] 8021q: adding VLAN 0 to HW filter on device bond980 10:13:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x6000000000000000}, 0x0) [ 1956.835826][T10866] team0: Port device bond980 added [ 1956.957541][T10866] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1957.117650][T10869] bond980: (slave bridge1233): Enslaving as an active interface with a down link 10:13:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xc200}, 0x0) 10:13:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x63000000) 10:13:01 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080f0ffffff00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:13:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:13:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x9effffff00000000}, 0x0) 10:13:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="3c46680500000010280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e"], 0x140}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x1, [0x9, 0x1f, 0x3, 0x7, 0x9, 0x1], 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/1}, &(0x7f0000000440)=0x78) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000006400040029bd70007341fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0800070007000900ffff0e000600050005020000060005000103000006000500023f0000060005000304000008000b000500000008000b0080ff010008000b0005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1957.352534][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 10:13:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1957.453335][T10947] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 10:13:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x68000000) 10:13:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 10:13:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 1957.696798][T10952] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:13:01 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b1400000080fcffffff00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1957.828729][T10961] 8021q: adding VLAN 0 to HW filter on device bond981 [ 1957.871397][T10961] team0: Port device bond981 added 10:13:01 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800002000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1957.976238][T10947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1958.016760][T10947] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1958.052883][T10952] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:13:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xc300}, 0x0) 10:13:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xffffffff00000000}, 0x0) 10:13:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x6c000000) 10:13:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)=""/237, 0xed, 0x10000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8d}, 0xa) socketpair(0x10, 0x1, 0x3f, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000280)=@ccm_128={{0x303}, "857ccd29884edf5f", "93b94d7cb206310445595266896e0cee", "f7b3582e", "eabfa999909eef21"}, 0x28) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x24084470) sendto$inet6(r0, &(0x7f0000000080)='N', 0x1, 0x0, 0x0, 0x0) 10:13:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4}, 0x0) 10:13:02 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800003000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:13:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x74000000) [ 1958.391074][T11031] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:13:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0xfffffffffffff000}, 0x0) 10:13:02 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800004000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:13:02 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @loopback}, 0x1c) recvfrom$inet6(r3, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000001c0)={0x1, 0x5}) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400100002400030f0000000000000000007c25070e23e6a348ea545500000008102a48945bcd5eec47bad55008ff6fa162622e4ab41cc441ca7594d729d2286d8b98eaf7ab8b0c0e887c6e282aa3f7f36f4b19508e811e5c5b", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca050000b00e98cc7ece5378791abe2b99b63d3a50f6d8a2c4ef36288094cd37f58798b5600483fe887a30ed1485566f21a314e3e136b93e600f601ea1fe0f9b39e4b05f967bc9425f0dd026ed2457d23ac9e1fecc55044fe44f9a2ede0d30eaed955ef020b1ee2f1eb0796bc3a67cd83812e3a6f0aeab45dad273f0c38ac0b90b12d7ca564823c8bf356d7edf28500959d2227171b88b0e27ba45b135"], 0x140}}, 0x0) connect$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xcc, @empty, 0x5}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES64=r0, @ANYRES16], 0x18}}], 0x1, 0x48010) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmmsg(r0, &(0x7f0000005c00), 0x0, 0x800) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010000, 0x0) 10:13:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0) 10:13:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x6}, 0x0) [ 1958.777440][T11032] bond982: (slave bridge1234): making interface the new active one [ 1958.845385][T11032] bond982: (slave bridge1234): Enslaving as an active interface with an up link [ 1958.906189][T11034] 8021q: adding VLAN 0 to HW filter on device bond982 [ 1958.954104][T11034] team0: Port device bond982 added [ 1958.960482][T11084] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1958.997613][T11088] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1959.017693][T11031] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:13:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xc400}, 0x0) 10:13:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) 10:13:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x7}, 0x0) 10:13:03 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800005000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:13:03 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x7a000000) 10:13:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000020101000000000000fdff0200000008aa9141faf17080"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000000000000900010073797a300000000064000000090a010400000000000000000000000008000a40000000000900020073797a300000dd000800054000000038280011800e000100636f6e6e6c696d6900028008000240000000000800014000000000140000001000010000200000000000000000000a0000000000"], 0xac}}, 0x0) [ 1959.258884][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:13:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x8}, 0x0) 10:13:03 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x7c6bcd36) 10:13:03 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800006000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:13:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 10:13:03 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendfile(r4, r5, &(0x7f0000000100)=0x8000, 0xc2) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_ro(r6, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1959.448660][T11107] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1959.724309][T11108] bond983: (slave bridge1235): making interface the new active one [ 1959.743525][T11108] bond983: (slave bridge1235): Enslaving as an active interface with an up link 10:13:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x9}, 0x0) [ 1959.806636][T11135] 8021q: adding VLAN 0 to HW filter on device bond983 [ 1959.883089][T11135] team0: Port device bond983 added [ 1959.947499][T11107] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:13:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xc500}, 0x0) 10:13:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4}, 0x0) 10:13:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0xe}, 0x0) 10:13:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xc0000000) 10:13:04 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800007000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1960.171862][ T3974] net_ratelimit: 50 callbacks suppressed [ 1960.171883][ T3974] bond3: (slave gretap1): failed to get link speed/duplex [ 1960.240287][T11170] openvswitch: netlink: Message has 2 unknown bytes. [ 1960.251701][ T2564] bond1: (slave bridge1): failed to get link speed/duplex [ 1960.276507][ T57] bond6: (slave bridge9): failed to get link speed/duplex [ 1960.294643][T11173] openvswitch: netlink: Message has 2 unknown bytes. [ 1960.341686][ T9] bond3: (slave gretap1): failed to get link speed/duplex 10:13:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0) 10:13:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0xf}, 0x0) [ 1960.383675][T11175] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:13:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xe4ffffff) 10:13:04 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800008000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) [ 1960.528272][T11177] bond984: (slave bridge1236): making interface the new active one [ 1960.540200][T11177] bond984: (slave bridge1236): Enslaving as an active interface with an up link 10:13:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x6}, 0x0) [ 1960.610669][T11217] openvswitch: netlink: Message has 2 unknown bytes. [ 1960.630407][T11179] 8021q: adding VLAN 0 to HW filter on device bond984 [ 1960.719667][T11179] team0: Port device bond984 added 10:13:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x8}, 0x0) [ 1960.744408][T11221] openvswitch: netlink: Message has 2 unknown bytes. [ 1960.828524][ T3974] bond6: (slave bridge9): failed to get link speed/duplex 10:13:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xeffdffff) [ 1960.888866][T11175] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1960.935834][T11227] openvswitch: netlink: Message has 2 unknown bytes. 10:13:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0xc600}, 0x0) 10:13:05 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800009000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) 10:13:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x60}, 0x0) 10:13:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x7}, 0x0) 10:13:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="21c4985dc8ede9f4c334f8e641a62e2f", 0x10) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @multicast1}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r1}) 10:13:05 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfeffffff) [ 1961.249785][T11240] ================================================================== [ 1961.258976][T11240] BUG: KASAN: use-after-free in dump_schedule+0x758/0x7d0 [ 1961.266194][T11240] Read of size 8 at addr ffff888020309740 by task syz-executor.4/11240 [ 1961.274461][T11240] [ 1961.276793][T11240] CPU: 1 PID: 11240 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 1961.285221][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.295290][T11240] Call Trace: [ 1961.298581][T11240] dump_stack+0x141/0x1d7 [ 1961.302936][T11240] ? dump_schedule+0x758/0x7d0 [ 1961.307702][T11240] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 1961.314784][T11240] ? dump_schedule+0x758/0x7d0 [ 1961.319553][T11240] ? dump_schedule+0x758/0x7d0 [ 1961.324326][T11240] kasan_report.cold+0x7c/0xd8 [ 1961.329088][T11240] ? dump_schedule+0x758/0x7d0 [ 1961.333866][T11240] dump_schedule+0x758/0x7d0 [ 1961.338460][T11240] ? lock_release+0x720/0x720 [ 1961.343143][T11240] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1961.348910][T11240] ? taprio_offload_get+0xb0/0xb0 [ 1961.353935][T11240] ? __nla_reserve+0x9a/0xc0 [ 1961.358614][T11240] ? memcpy+0x39/0x60 [ 1961.362593][T11240] taprio_dump+0x591/0xd80 [ 1961.367018][T11240] ? advance_sched+0x990/0x990 [ 1961.371771][T11240] ? sock_sendmsg+0xcf/0x120 [ 1961.376360][T11240] ? ____sys_sendmsg+0x6e8/0x810 [ 1961.381420][T11240] ? memcpy+0x39/0x60 [ 1961.385410][T11240] ? advance_sched+0x990/0x990 [ 1961.390364][T11240] tc_fill_qdisc+0x60e/0x12a0 [ 1961.395108][T11240] ? qdisc_class_hash_grow+0x710/0x710 [ 1961.400559][T11240] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1961.406795][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1961.413029][T11240] ? __phys_addr+0xc4/0x140 [ 1961.417530][T11240] ? memset+0x20/0x40 [ 1961.421535][T11240] ? __build_skb_around+0x23e/0x2f0 [ 1961.426720][T11240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1961.433041][T11240] ? __alloc_skb+0x17c/0x340 [ 1961.437627][T11240] qdisc_notify.isra.0+0x2b1/0x310 [ 1961.442769][T11240] tc_modify_qdisc+0xf54/0x1a50 [ 1961.447618][T11240] ? qdisc_create+0x1310/0x1310 [ 1961.452491][T11240] ? qdisc_create+0x1310/0x1310 [ 1961.457337][T11240] rtnetlink_rcv_msg+0x44e/0xb70 [ 1961.462268][T11240] ? rtnl_newlink+0xa0/0xa0 [ 1961.466776][T11240] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1961.472053][T11240] netlink_rcv_skb+0x153/0x420 [ 1961.476802][T11240] ? rtnl_newlink+0xa0/0xa0 [ 1961.481305][T11240] ? netlink_ack+0xaa0/0xaa0 [ 1961.485878][T11240] ? netlink_deliver_tap+0x227/0xba0 [ 1961.491163][T11240] netlink_unicast+0x533/0x7d0 [ 1961.495923][T11240] ? netlink_attachskb+0x870/0x870 [ 1961.501028][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1961.507262][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1961.513500][T11240] ? __phys_addr_symbol+0x2c/0x70 [ 1961.518951][T11240] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1961.524667][T11240] ? __check_object_size+0x171/0x3f0 [ 1961.529954][T11240] netlink_sendmsg+0x856/0xd90 [ 1961.534731][T11240] ? netlink_unicast+0x7d0/0x7d0 [ 1961.539665][T11240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1961.545900][T11240] ? netlink_unicast+0x7d0/0x7d0 [ 1961.550828][T11240] sock_sendmsg+0xcf/0x120 [ 1961.555232][T11240] ____sys_sendmsg+0x6e8/0x810 [ 1961.559979][T11240] ? kernel_sendmsg+0x50/0x50 [ 1961.564656][T11240] ? do_recvmmsg+0x6d0/0x6d0 [ 1961.569242][T11240] ? lock_chain_count+0x20/0x20 [ 1961.574101][T11240] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1961.580085][T11240] ___sys_sendmsg+0xf3/0x170 [ 1961.584673][T11240] ? sendmsg_copy_msghdr+0x160/0x160 [ 1961.589955][T11240] ? __fget_files+0x266/0x3d0 [ 1961.594622][T11240] ? lock_downgrade+0x6e0/0x6e0 [ 1961.599475][T11240] ? __fget_files+0x288/0x3d0 [ 1961.604143][T11240] ? __fget_light+0xea/0x280 [ 1961.608723][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1961.615063][T11240] __sys_sendmsg+0xe5/0x1b0 [ 1961.619554][T11240] ? __sys_sendmsg_sock+0x30/0x30 [ 1961.624665][T11240] ? syscall_enter_from_user_mode+0x27/0x70 [ 1961.630559][T11240] do_syscall_64+0x3a/0xb0 [ 1961.634965][T11240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1961.640847][T11240] RIP: 0033:0x4665d9 [ 1961.644728][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.664428][T11240] RSP: 002b:00007f2a1df32188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1961.672829][T11240] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1961.680781][T11240] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1961.688736][T11240] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1961.696694][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 1961.704662][T11240] R13: 00007ffd47ea764f R14: 00007f2a1df32300 R15: 0000000000022000 [ 1961.712638][T11240] [ 1961.714946][T11240] Allocated by task 11223: [ 1961.719341][T11240] kasan_save_stack+0x1b/0x40 [ 1961.724013][T11240] __kasan_kmalloc+0x9b/0xd0 [ 1961.728602][T11240] taprio_change+0x5fb/0x4030 [ 1961.733280][T11240] tc_modify_qdisc+0xd50/0x1a50 [ 1961.738194][T11240] rtnetlink_rcv_msg+0x44e/0xb70 [ 1961.743115][T11240] netlink_rcv_skb+0x153/0x420 [ 1961.747866][T11240] netlink_unicast+0x533/0x7d0 [ 1961.752614][T11240] netlink_sendmsg+0x856/0xd90 [ 1961.757359][T11240] sock_sendmsg+0xcf/0x120 [ 1961.761759][T11240] ____sys_sendmsg+0x6e8/0x810 [ 1961.766504][T11240] ___sys_sendmsg+0xf3/0x170 [ 1961.771090][T11240] __sys_sendmsg+0xe5/0x1b0 [ 1961.775665][T11240] do_syscall_64+0x3a/0xb0 [ 1961.780070][T11240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1961.785943][T11240] [ 1961.788256][T11240] Freed by task 3974: [ 1961.792219][T11240] kasan_save_stack+0x1b/0x40 [ 1961.796888][T11240] kasan_set_track+0x1c/0x30 [ 1961.801467][T11240] kasan_set_free_info+0x20/0x30 [ 1961.806387][T11240] __kasan_slab_free+0xfb/0x130 [ 1961.811226][T11240] slab_free_freelist_hook+0xdf/0x240 [ 1961.816585][T11240] kfree+0xe5/0x7f0 [ 1961.820396][T11240] rcu_core+0x7ab/0x13b0 [ 1961.824687][T11240] __do_softirq+0x29b/0x9f6 [ 1961.829215][T11240] [ 1961.831538][T11240] Last potentially related work creation: [ 1961.837343][T11240] kasan_save_stack+0x1b/0x40 [ 1961.842014][T11240] kasan_record_aux_stack+0xe5/0x110 [ 1961.847286][T11240] call_rcu+0xb1/0x750 [ 1961.851338][T11240] taprio_change+0x2e82/0x4030 [ 1961.856083][T11240] tc_modify_qdisc+0xd50/0x1a50 [ 1961.860934][T11240] rtnetlink_rcv_msg+0x44e/0xb70 [ 1961.865853][T11240] netlink_rcv_skb+0x153/0x420 [ 1961.870621][T11240] netlink_unicast+0x533/0x7d0 [ 1961.875372][T11240] netlink_sendmsg+0x856/0xd90 [ 1961.880128][T11240] sock_sendmsg+0xcf/0x120 [ 1961.884546][T11240] ____sys_sendmsg+0x6e8/0x810 [ 1961.889305][T11240] ___sys_sendmsg+0xf3/0x170 [ 1961.893878][T11240] __sys_sendmsg+0xe5/0x1b0 [ 1961.898373][T11240] do_syscall_64+0x3a/0xb0 [ 1961.902781][T11240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1961.908674][T11240] [ 1961.910981][T11240] Second to last potentially related work creation: [ 1961.917541][T11240] kasan_save_stack+0x1b/0x40 [ 1961.922229][T11240] kasan_record_aux_stack+0xe5/0x110 [ 1961.927502][T11240] kvfree_call_rcu+0x74/0x8c0 [ 1961.932165][T11240] cfg80211_update_known_bss+0x833/0xa60 [ 1961.937855][T11240] cfg80211_bss_update+0xef/0x1e00 [ 1961.943068][T11240] cfg80211_inform_single_bss_frame_data+0x6e8/0xee0 [ 1961.949857][T11240] cfg80211_inform_bss_frame_data+0xa7/0xb10 [ 1961.955838][T11240] ieee80211_bss_info_update+0x3ce/0xb20 [ 1961.961574][T11240] ieee80211_rx_mgmt_probe_beacon+0xccd/0x16b0 [ 1961.967725][T11240] ieee80211_ibss_rx_queued_mgmt+0xe43/0x1870 [ 1961.973784][T11240] ieee80211_iface_work+0x761/0x9e0 [ 1961.978977][T11240] process_one_work+0x98d/0x1600 [ 1961.983982][T11240] worker_thread+0x64c/0x1120 [ 1961.988658][T11240] kthread+0x3b1/0x4a0 [ 1961.992719][T11240] ret_from_fork+0x1f/0x30 [ 1961.997154][T11240] [ 1961.999462][T11240] The buggy address belongs to the object at ffff888020309700 [ 1961.999462][T11240] which belongs to the cache kmalloc-96 of size 96 [ 1962.013499][T11240] The buggy address is located 64 bytes inside of [ 1962.013499][T11240] 96-byte region [ffff888020309700, ffff888020309760) [ 1962.026596][T11240] The buggy address belongs to the page: [ 1962.032208][T11240] page:ffffea000080c240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20309 [ 1962.042340][T11240] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1962.049878][T11240] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888011041780 [ 1962.058454][T11240] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 1962.067032][T11240] page dumped because: kasan: bad access detected [ 1962.073444][T11240] page_owner tracks the page as allocated [ 1962.079576][T11240] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 57, ts 483196075276, free_ts 482294117519 [ 1962.095726][T11240] get_page_from_freelist+0x1033/0x2b60 [ 1962.101270][T11240] __alloc_pages+0x1b2/0x500 [ 1962.105847][T11240] alloc_pages+0x18c/0x2a0 [ 1962.110246][T11240] allocate_slab+0x2c5/0x4c0 [ 1962.114822][T11240] ___slab_alloc+0x44c/0x7a0 [ 1962.119402][T11240] __slab_alloc.constprop.0+0xa7/0xf0 [ 1962.124853][T11240] __kmalloc+0x315/0x330 [ 1962.129087][T11240] cfg80211_inform_single_bss_frame_data+0x302/0xee0 [ 1962.135784][T11240] cfg80211_inform_bss_frame_data+0xa7/0xb10 [ 1962.141766][T11240] ieee80211_bss_info_update+0x3ce/0xb20 [ 1962.147395][T11240] ieee80211_rx_mgmt_probe_beacon+0xccd/0x16b0 [ 1962.153543][T11240] ieee80211_ibss_rx_queued_mgmt+0xe43/0x1870 [ 1962.159610][T11240] ieee80211_iface_work+0x761/0x9e0 [ 1962.164798][T11240] process_one_work+0x98d/0x1600 [ 1962.169728][T11240] worker_thread+0x64c/0x1120 [ 1962.174395][T11240] kthread+0x3b1/0x4a0 [ 1962.178454][T11240] page last free stack trace: [ 1962.183106][T11240] free_pcp_prepare+0x223/0x300 [ 1962.187945][T11240] free_unref_page+0x12/0x1d0 [ 1962.192608][T11240] unfreeze_partials+0x16c/0x1b0 [ 1962.197543][T11240] put_cpu_partial+0x13d/0x230 [ 1962.202309][T11240] qlist_free_all+0x5a/0xc0 [ 1962.206808][T11240] kasan_quarantine_reduce+0x180/0x200 [ 1962.212260][T11240] __kasan_slab_alloc+0x8e/0xa0 [ 1962.217100][T11240] kmem_cache_alloc_node+0x269/0x3e0 [ 1962.222382][T11240] __alloc_skb+0x20b/0x340 [ 1962.226787][T11240] inet_netconf_notify_devconf+0xdd/0x250 [ 1962.232496][T11240] devinet_exit_net+0x10f/0x280 [ 1962.237334][T11240] ops_exit_list+0xb0/0x160 [ 1962.241844][T11240] setup_net+0x639/0xa30 [ 1962.246075][T11240] copy_net_ns+0x31e/0x760 [ 1962.250476][T11240] create_new_namespaces+0x3f6/0xb20 [ 1962.255821][T11240] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 1962.261454][T11240] [ 1962.263772][T11240] Memory state around the buggy address: [ 1962.269411][T11240] ffff888020309600: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1962.277462][T11240] ffff888020309680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1962.285507][T11240] >ffff888020309700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1962.293550][T11240] ^ [ 1962.299682][T11240] ffff888020309780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1962.307727][T11240] ffff888020309800: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1962.315779][T11240] ================================================================== [ 1962.323820][T11240] Disabling lock debugging due to kernel taint 10:13:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0xf0}, 0x0) 10:13:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x8}, 0x0) 10:13:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000500)=0x4, 0x2) 10:13:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x500}, 0x0) 10:13:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x9}, 0x0) 10:13:06 executing program 5: accept4(0xffffffffffffffff, &(0x7f0000000180)=@in6, &(0x7f0000000200)=0x80, 0x100000) r0 = socket(0xa, 0x2, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}}, 0x0) r1 = socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="308effe0b1eff852b5360de58ac30cf307b039857a83651a9395149836649ace77662eabcd1fee90b8b8181595cf7f0ecb26", 0x32, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @mcast1}, 0x1c) recvfrom$inet6(r3, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000044, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @loopback}, 0x1c) recvfrom$inet6(r4, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="00000000000000000000fa4b00010000050087d39aa2e2799dc300000008000b000100000014002000ff02000000000000000000000000000108001700b14b31f757088294bdaf0fd95bb799e4d5b21e965d314dc1b4704830142eb34a329764a7043b25df2b3249cf87cb71e05a6f41a485278f661a0027847389f7bfc1143cad72bcd3aa41bbaf5a51039320ee8454091c0c7ade573432a908b691b01539d144d1c33229673adba8b5d2c59fcd00"/188, @ANYRES32, @ANYRESOCT=r3], 0x4c}}, 0x40008d0) unshare(0x74020d00) unshare(0x40040000) [ 1962.642252][T11240] Kernel panic - not syncing: panic_on_warn set ... [ 1962.648881][T11240] CPU: 0 PID: 11240 Comm: syz-executor.4 Tainted: G B 5.12.0-syzkaller #0 [ 1962.658729][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.668803][T11240] Call Trace: [ 1962.672092][T11240] dump_stack+0x141/0x1d7 [ 1962.676441][T11240] panic+0x306/0x73d [ 1962.680391][T11240] ? __warn_printk+0xf3/0xf3 [ 1962.684997][T11240] ? preempt_schedule_common+0x59/0xc0 [ 1962.690473][T11240] ? dump_schedule+0x758/0x7d0 [ 1962.695248][T11240] ? preempt_schedule_thunk+0x16/0x18 [ 1962.700637][T11240] ? trace_hardirqs_on+0x38/0x1c0 [ 1962.705769][T11240] ? trace_hardirqs_on+0x51/0x1c0 [ 1962.710820][T11240] ? dump_schedule+0x758/0x7d0 [ 1962.715606][T11240] ? dump_schedule+0x758/0x7d0 [ 1962.720380][T11240] end_report.cold+0x5a/0x5a [ 1962.725101][T11240] kasan_report.cold+0x6a/0xd8 [ 1962.729880][T11240] ? dump_schedule+0x758/0x7d0 [ 1962.734656][T11240] dump_schedule+0x758/0x7d0 [ 1962.739258][T11240] ? lock_release+0x720/0x720 [ 1962.743954][T11240] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1962.749693][T11240] ? taprio_offload_get+0xb0/0xb0 [ 1962.754729][T11240] ? __nla_reserve+0x9a/0xc0 [ 1962.759333][T11240] ? memcpy+0x39/0x60 [ 1962.763328][T11240] taprio_dump+0x591/0xd80 [ 1962.767759][T11240] ? advance_sched+0x990/0x990 [ 1962.772528][T11240] ? sock_sendmsg+0xcf/0x120 [ 1962.777125][T11240] ? ____sys_sendmsg+0x6e8/0x810 [ 1962.782197][T11240] ? memcpy+0x39/0x60 [ 1962.786194][T11240] ? advance_sched+0x990/0x990 [ 1962.790969][T11240] tc_fill_qdisc+0x60e/0x12a0 [ 1962.795660][T11240] ? qdisc_class_hash_grow+0x710/0x710 [ 1962.801138][T11240] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1962.807404][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1962.813675][T11240] ? __phys_addr+0xc4/0x140 [ 1962.818209][T11240] ? memset+0x20/0x40 [ 1962.822198][T11240] ? __build_skb_around+0x23e/0x2f0 [ 1962.827410][T11240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1962.833671][T11240] ? __alloc_skb+0x17c/0x340 [ 1962.838276][T11240] qdisc_notify.isra.0+0x2b1/0x310 [ 1962.843405][T11240] tc_modify_qdisc+0xf54/0x1a50 [ 1962.848272][T11240] ? qdisc_create+0x1310/0x1310 [ 1962.853137][T11240] ? qdisc_create+0x1310/0x1310 [ 1962.858014][T11240] rtnetlink_rcv_msg+0x44e/0xb70 [ 1962.862957][T11240] ? rtnl_newlink+0xa0/0xa0 [ 1962.867468][T11240] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1962.872870][T11240] netlink_rcv_skb+0x153/0x420 [ 1962.877651][T11240] ? rtnl_newlink+0xa0/0xa0 [ 1962.882165][T11240] ? netlink_ack+0xaa0/0xaa0 [ 1962.886767][T11240] ? netlink_deliver_tap+0x227/0xba0 [ 1962.892072][T11240] netlink_unicast+0x533/0x7d0 [ 1962.896889][T11240] ? netlink_attachskb+0x870/0x870 [ 1962.902013][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1962.908254][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1962.914526][T11240] ? __phys_addr_symbol+0x2c/0x70 [ 1962.919544][T11240] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1962.925303][T11240] ? __check_object_size+0x171/0x3f0 [ 1962.930617][T11240] netlink_sendmsg+0x856/0xd90 [ 1962.935410][T11240] ? netlink_unicast+0x7d0/0x7d0 [ 1962.940330][T11240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1962.946672][T11240] ? netlink_unicast+0x7d0/0x7d0 [ 1962.951590][T11240] sock_sendmsg+0xcf/0x120 [ 1962.955994][T11240] ____sys_sendmsg+0x6e8/0x810 [ 1962.960746][T11240] ? kernel_sendmsg+0x50/0x50 [ 1962.965427][T11240] ? do_recvmmsg+0x6d0/0x6d0 [ 1962.970006][T11240] ? lock_chain_count+0x20/0x20 [ 1962.974864][T11240] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1962.980836][T11240] ___sys_sendmsg+0xf3/0x170 [ 1962.985439][T11240] ? sendmsg_copy_msghdr+0x160/0x160 [ 1962.990716][T11240] ? __fget_files+0x266/0x3d0 [ 1962.995386][T11240] ? lock_downgrade+0x6e0/0x6e0 [ 1963.000226][T11240] ? __fget_files+0x288/0x3d0 [ 1963.004894][T11240] ? __fget_light+0xea/0x280 [ 1963.009477][T11240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1963.015705][T11240] __sys_sendmsg+0xe5/0x1b0 [ 1963.020212][T11240] ? __sys_sendmsg_sock+0x30/0x30 [ 1963.025220][T11240] ? syscall_enter_from_user_mode+0x27/0x70 [ 1963.031217][T11240] do_syscall_64+0x3a/0xb0 [ 1963.035619][T11240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1963.041492][T11240] RIP: 0033:0x4665d9 [ 1963.045424][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.065016][T11240] RSP: 002b:00007f2a1df32188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1963.073522][T11240] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1963.081576][T11240] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1963.089527][T11240] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1963.097593][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 1963.105685][T11240] R13: 00007ffd47ea764f R14: 00007f2a1df32300 R15: 0000000000022000 [ 1963.114363][T11240] Kernel Offset: disabled [ 1963.118676][T11240] Rebooting in 86400 seconds..