te(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800800", @ANYRES32=r7], 0x3c}}, 0x0) 17:18:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x10, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 878.761534][ T9968] IPVS: ftp: loaded support on port[0] = 21 17:18:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:18:45 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x48143, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 878.972332][T10058] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 879.143857][T10065] device bond174 entered promiscuous mode [ 879.180599][T10065] device bond174 left promiscuous mode [ 879.460378][T10097] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 879.540810][T10114] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 882.530719][ T21] tipc: TX() has been purged, node left! [ 882.543704][ T21] tipc: TX() has been purged, node left! 17:18:49 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448dd, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:18:49 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5450, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:18:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x60, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:18:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) 17:18:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) 17:18:49 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1f, 0x8}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240)=r1, 0x4) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 882.709008][T10209] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 882.751011][T10212] IPVS: ftp: loaded support on port[0] = 21 [ 882.774617][T10210] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 882.799902][T10214] IPVS: ftp: loaded support on port[0] = 21 [ 882.987026][T10232] device bond175 entered promiscuous mode [ 883.005924][T10232] device bond175 left promiscuous mode [ 883.300385][T10245] bond8: (slave bridge6): Enslaving as a backup interface with an up link 17:18:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xf0, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:18:50 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x4d8281, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3, 0x2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000280), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:18:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800800", @ANYRES32=r7], 0x3c}}, 0x0) 17:18:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) [ 883.540426][T10250] IPVS: ftp: loaded support on port[0] = 21 [ 883.617048][T10341] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:18:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x300, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 883.797040][T10345] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 883.937418][T10350] device bond9 entered promiscuous mode [ 883.977595][T10350] device bond9 left promiscuous mode [ 884.323295][T10352] device bond176 entered promiscuous mode [ 884.335564][T10352] device bond176 left promiscuous mode 17:18:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) [ 884.616987][T10478] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 884.680685][T10478] device bond10 entered promiscuous mode [ 884.706721][T10478] device bond10 left promiscuous mode 17:18:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400454ca, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 885.020938][T10524] IPVS: ftp: loaded support on port[0] = 21 [ 885.617825][T10524] IPVS: ftp: loaded support on port[0] = 21 17:18:54 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5450, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:18:54 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r1 = socket(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21800b20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X@\x00\x00', @ANYRES16=r0, @ANYBLOB="100028bd700000dcdf250c00000004000b0008006e80040002001c006e8004000100040001000400010004000200040001000400020018006e80040001000400020004000200040002000400010004000a00"], 0x58}}, 0x80c0) pipe(&(0x7f0000000000)) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:18:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) 17:18:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x600, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:18:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r3}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={r3, @empty, @local}, 0xc) 17:18:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40049409, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 887.593585][ T21] tipc: TX() has been purged, node left! [ 887.611391][ T21] tipc: TX() has been purged, node left! [ 887.638401][ T21] tipc: TX() has been purged, node left! [ 887.655154][T10600] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 887.668822][T10599] IPVS: ftp: loaded support on port[0] = 21 [ 887.678541][ T21] tipc: TX() has been purged, node left! 17:18:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400454ca, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 887.711712][T10603] IPVS: ftp: loaded support on port[0] = 21 17:18:54 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x202900, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x3c1401, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x745402, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4e0500, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x7, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) [ 887.869302][T10605] device bond177 entered promiscuous mode 17:18:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x7a4, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 887.923614][T10605] device bond177 left promiscuous mode [ 887.991111][T10647] IPVS: ftp: loaded support on port[0] = 21 17:18:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:18:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x900, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 888.696856][T10602] IPVS: ftp: loaded support on port[0] = 21 17:18:55 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000140)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 888.885318][T10716] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 889.116936][T10737] device bond178 entered promiscuous mode [ 889.135354][T10737] device bond178 left promiscuous mode 17:18:56 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5450, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 889.317842][T10788] IPVS: ftp: loaded support on port[0] = 21 [ 889.535604][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:18:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xa00, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:18:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:18:56 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x0, 0x8001}, 0x8) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0x20}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 889.793797][T10825] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:18:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xc00, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 889.965101][T10850] device bond179 entered promiscuous mode [ 890.015243][T10850] device bond179 left promiscuous mode [ 890.308385][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:19:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 894.802631][T10940] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:19:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400454ca, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xe00, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:01 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x7f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000000)) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:01 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40086602, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 894.934013][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:19:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xf00, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 895.041454][T10987] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 895.158879][T10991] IPVS: ftp: loaded support on port[0] = 21 [ 895.188730][T10988] IPVS: ftp: loaded support on port[0] = 21 [ 895.220608][T10994] device bond22 entered promiscuous mode [ 895.288787][T10994] device bond22 left promiscuous mode [ 895.780475][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:19:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x3f00, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)={'veth0_virt_wifi', 0x32, 0x33}, 0x12) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 895.994983][T11046] IPVS: ftp: loaded support on port[0] = 21 [ 896.110669][T11090] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 896.298987][T11097] device bond181 entered promiscuous mode [ 896.338533][T11097] device bond181 left promiscuous mode [ 896.626132][T11098] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 896.703284][T11122] device bond23 entered promiscuous mode [ 896.733143][T11122] device bond23 left promiscuous mode [ 896.829550][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:19:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000140)=0x1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x2a8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3ab}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, "a1940354253f"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 896.964420][ T21] tipc: TX() has been purged, node left! [ 896.991588][ T21] tipc: TX() has been purged, node left! 17:19:06 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400454ca, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x4000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40186366, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:06 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000002c0)={{r2}, r3, 0x6, @unused=[0x5, 0x1000, 0x60, 0x2], @name="8a205bbdc625a376923fd41d558456e06f764c9581942f2f17d7ca57326dedfb73b9b550994cd03c2a0e2625039e26668be8e4d40877c6b902e1378c6396c7fc43b30c608f91801a928136d81afe103bb3e508e1cac3b90fd5bc765ceb88e7afd615625f0524a54e9c679d681baaecb1499ef8208863c5115f826242d67fa6629c1526daafbff65020907f58629ad727d75b3b88e0efc1acb98beb40c20175931a160d89df3d7c1a3c480761348cc3017af4da61f9d73d9ac9ef6eb06002432db1fc21d9a4c3fe3abfe3a001ad8d717be30e63096dd2faa0ae1091adec4310055bda8f4211def56c46e25b35c9c56b23e064201fc8afb498765f1a4e7c52f935a64b72df0c578877d5700d1315742a1cc30588779126daca912ecf064f61f6feb950a848c7f5af239376926f20fa3e08a4036960e0e58457ef299e830ffeee7f54c8a74b45522acc04f52bec5b794237eb43c97a3e442e3fd0fa51164e9feceffc27e4497d04afb52fead9bf1c05165be45d06754ee804a97da12954cd7a569385a10545862d28155891a60a08c26dc3f2a3d34a2f02bc56c16ea62f303014c6d4085de3f7ee4624745a39448403338bd6c85d41fde4198e17ccf254aa569642e15fa9677d6bfdc32f498a5cb14d1ea674214239d2f5946dc9c89ecb2da30987b9f50a8611d8df63453cc7bfc6ba6a0f1c2dba4d9bdd2dd4525f24a0d9ff2f0ba1aea63cab7d60e55bf9f2d1c088c363dea31dd2ddc080815b12c61a8d3e57389582dd1ffa7498ccac89cebb23b478fee0a88e695bb7bfa5584091721504064cb7ae649137d3e3deeda19e6ad49ba481d8660376962d496976797001b523b1cd574601909fe1bac17fa417a79ba4805c6649bc65dead33c68df9420b2c0a01891599ada0c11f252eb7a4c72cf3f3e0e17c69750ebc4de62bf6901d0aa0cfbfb176ff0462dcb01c4ed7f846c12d416cc8abddea28a7b1fe1ce0ebb624cc6cb30aa139276366a333b6f6b5350efe9608dfe0d98032cb437d5d46918b61dc57afbabc9afbf2f8c945b5fe4820016604cae0e2f47eea75d38498ee317d8ac03c4e85262ab7998b18f76a1d5ac1582c9c00aa007c0fa013e8172ad5caa952d303b5745fff7dc195dcfb4064fb1373a8feb93a47f88c4af1f41547dd3d37bbfe34b9d4d86feaa04751230687b4765a388028e6b1d8ce2d40ec6b593e08ef1bbcced04bcd4a450fcd1ea41ed9848c8575e03f75d3dfbd92b77aac4bef4faa660891a339ac0e91845a8dd0c63c1f6862066b13a68d7efa8d85467715575628d62be17334aa23b5bb61e619ea21227d7883e307aaf43f7942a60bf0ec48280e95611a3168ef9027682c57672d07baabd32ae3c89767a7ae764c6a4db0571f090288542a8d80e61f065ff358d6efec9b9324491ba25e8fe52bf4b51f0723a57751327acb9fe83fd876d9bbf7f9f32875028ef4c7254d846cb57ea5a60f370fae6bafc3dfe209a9e38d0c10ac477360275ba0f1aa2995a1394fb7294ac50803c74117b185722f517e9d23d1575a84a4fdfd766943d50292bd857d75257665ac544f5a688cca95571479aaa1d1c75331d9b0a38031aeeeea1c23d04e9fff31a09e1ac3cc18d5f7b1ffb7074f4659d5be0acd1a808f83e13b77ed3c1a332907cd927d670cb7cb54f1103160692564b6f6c1fc72d0634c9aad9a4be8aa5090639123329c35b15ef1f6d0192460cc709160cfa93ae17697b2acf505155f1df42749c6d7de2b6ddd3114477095729804551e4cfcf66836a6f7f6f4dc53461e4f660cf63c63e3fa92a162f1c1db1104f6ff6a66a5939e43777cd2678027d8d8d8e5aa4c426f41fe685e75e7d258b15b9cc46c1dad02b7a3bfbb8adbaed08a6ef2d9ffc203b250ac66c490943118fcdf480e29042d46e2916767ad3cf370a86a468b022fbd39c4ee6900b92c499d75e042d0260481ec5a128c46a4f82762c1cba791fd84adb459f490ae6cacb200cc8e04fb451346187d075fcd83fcf1ac1c9723970c790801d45568f3ccdbbf3e6021bbdd7e28cafe8ff268a3231f501dcbc2646da6127eca431b3097e0bd68698cc92a15f0169913dcaa843eae888793d0acbcbf3bc6d83bdd1a22a643315092e6265a148fabcc42f1d1fa5c2ba1cdb60c87ef5b7df578de6a9de0caacb255c36d313f71e3857a1f6b8defd11aa498ccccfe4d1f0effc8bfc4073207a33a93d78e06df92907e762638d966100deb333ca562b2bcce6fa6022c4424a5db903aa229605dde7493e64ccef20af5a9bb88e6380303ed857a36a7118179a63f2416af68a25e6f0104bdb201ea3ced6c6eaaee438517527e92b444cb3c1c352a3204380e093f07b858249e5e838932e8bb63dc4a919707c2872bf79df036b14c211fc304761bc8940aef7144aa57fab151593564d6866731ce83338b5988c0b79cc9f2ef9315954656b5fefbf20a1ab4048db6098cfacab40ada662bb1a2363e668fd7da2a817ac909e158ca61fc5d1e306d6bc60f2e28a70d12d8fabc26ec6c5d0236db713ee61c79684841b6388e65f79aff13fd95d1951621afd0ca7ee5a234c8f9983c8fadefb839a9355cb9dffca950f3f4832d2959685ca293150a7b587d80a5d4aab7d109cb650e38d33b1b9ab7e381c178c76ad5b1f7c94760936ce76b9799eb2f036d542b0ed5ea88fe4c0ebf4bef88418708bb4374feb06a48b1d43ec75c49e04a83702c956be78bf8a610d8028ea601e23ec9bb0b744ac44719c619d45fbb939fc10befcd0d890557e4ee4092c82d4b011ef75244b460aeaa1027faefcf15a7a6ad6cb2badd45179f2cb8dffe8bbe97241219f30a0ff28ca076c6660459450d8740defa23586d8b7f25322f12ab6efec18ef4d20bb6ae3254c839dd6fcd8c81ecac51720ca2cb6360490bbd7bcdf93fdfe5f89a44ab64714d184ccd6127c83e1286e72f29fe5a55082d6e29c799a555fbcb74c7f317c45802fd104d3b361a4f98bdd525ab4e748e72361c25348d2dc40534c781aacfab199ee8cdef7a50b201eaabef4fd062573632ae107f376497384e116d1cead2dc1d8fa287a296daf567d41887326aacd7177a559c087b6cbffc9c19f3162ec1b00b31d3374b7b2bef04e057d1b008d96655b9f1d54f000d63be80253c4197de8f03ab970804f0fa6b8bba0322b504459e9c9c177fd2e833542cf9253f20f7861a624dc95fbd170d94fd9edd6b3d9269927bbe88322a424febdd144ac80af2c148a43dcb4752f216228ac65598e3445060052d051a9213d3a413e91e7ad4a597fb532317e6d5b06b600ed5253bae99409d6f8c011dd9836ab3c309c790c29555affc8b4794fd00a1c327cfc5d45520bd78c0b6202d7eb8024648773fcbe8fea50b9b7bdf931e5b0fff6cab22ae30caeb85e3a803e067ee8e4e47d280c211ffa12cd61cd4e2d978d0a027e53ecaa7c5202e96fc8c4bd8958b5d23902d80e3d4fdc2e192d2d31cae4f1776cea5e458256695ec26cb8b1bcc3ca4b66eb508c87a4f3afac1a15c6de8eb3c662bd5504a1782678d50ba5654f3783cf394754797b3b5b0e74e7056462e32139fb06a52d48bde1112085da2614bbe0e763b689976b1dd2dd99585a20689fde28a9e1f3995177cc6a0882b0cd91b206123a8bea7dd98a5fe0b1654000961287a4bc055d135b1eaaf9b80dcf7e5606e028521ee1946bd8bcd3ee552672133c8773a04e7c1b41a03e12e22be77a7a96f9f85b5c398df0bcef0cd88effe9c4c458332f4c8b1d88ac9096be5869d0fec544fde51a3bdf3db2f5cd3fcf4d0418eb7cd61cdbaafeb0f59f635048afdaa731e259cf25905bdbe897931930dd9870eafdbf5e166532b32498c3518aff807aadc141cab96278e28d08034d4f4bb066b7e3e8e625d05d92bd1866ca8d22094d180248b7898f23b1cf39ff630d75ced2ee9df100b1ba8b1448bcc2b3dea79d1b3ed2fafb8a38180963cea43e63fa91e8d3ac3eece0d18a14f1832e7cb6bd4a313edbc63afda61d174a77f72379130fcd486ac1b26cb74ac2237429a229627e93cb65574700075c8bbcc4cfc65df990ff2f56ba0638d2cabb04f078cc7177caa711ea58c85ccf2b47563a71efa69116abecbf966da4ea7dc2f6cd31dd3a2811170f0586c516f9c5670861d2d83cb5c4d7a4d6325048d515634799ee8d419ce54ac427ad6285e7c4541bf55827c9888fe4b3645f462c7ae257b374a2f51c08b928954f85235ad4e51d13de40714abce5417a948bf3f59c6f17aaeb42838b55baa94bac6100e246f047a57a8a2418bab996472a809c9423fb75b4b899c827bb0f2798c0c703d8bff7daf076d5ffe10072721ca64fe559dfca6e72c28110f725a765b31f131a3d6d692f18a12f38827d9bd8f5053e83900247853db34cf2c8ee52374107941916e632761d31e900b78dc561b505505dfc2d501a7cddf555a0841e5ce006ca709fc03de89dd299d116a1e06a753a944acbf6209303b032f4906422c8a1fefa225822b40822e77ea72d3ace33aeb3b18c222a44e411f229d097ab1bcbc7dd385141dd40ee201b7833b3c3b011d247d7fbeea12974822ed7741f340326debbbfbb8faa6baf46b04d31f505dd7d70d87ed1be685d81adaa8c98eb2bbbba867879a63fd4da221d781b11c08f7ea61621c94cbbe107e5e708dac2d3e351eb78a0e9a62ce00fe41d57c1daa5c03bea25482eed690b732c63b3c850ef618b20435e70f957c2c24776761fd05ca78c6f499c0548fa9af016477f6bac5a9bbaa3eb3dbcc812b3b416cf3d265a7887b140d5420855d391fa7b32dfe5b7b854990444bff0ea960436b3e9111c6950327ce1f91ef3ab5219e53f6bbc5f409e50d32f364b7581e0e90d6b0b0ad3ac17a0217b3373b166d992e4e77c4c8998099bde8998f60ac1837eb5f1a8e1b877ca389a3b2281d361240c9845eea8d7f9bb8e6ac20c3b0024bb09f88faef40e8e0525efefe6752964a60d6d626c789d876a162cec8307ad95cb83cf55e37072c95ea0036080c8c8b27b454811cbfc056cbea5da32cdc3844f24803513db4f30945b53d8055fd7e706111f47b358c04cede35ef8c139aa7b79b25e2896fab425131dc4a305b4cf527695b6ea6d22c8f99b261740d81bbaacf79feae29590c1a37467143201ce6bca40fc1e2978cf69055e0577af5a119c55e115db6ceae208cfc6c82ad6b5aa84a55aca6062a9866a22038f079820011c293118bb490dd09af4e1be2a39d82474cf0584387e4b2e57fd9c8a79d77272c78cd84d0c18f219654d4125defd838ef95406fed39922df9e37690be8857a41ecf2733161f526287879ee9babf8e00c9075dc1adbacfc3fd1f8aef237fe91eed09781975a058049eb2fbac22849cba03483cfc00067d1480d511a646a6bcb3dc92a0a9fbc33682d443fb9306ec7ac8a95bf62f05df4c742b2c34fd85e8ab6c11f9376a08cce8e63a5f241f3b0dc79a9b87c29e20fdfc631875d003ec98f397e3e65824b6fe8f7e53ddaca2aa4cd66f9d4f758d897d0c9ae6b847767b90fbaa2b811f730fbf246c09133ab1e4161c4a24079cefc88f7d09eaa59bf28534b1a042b8dfd2d8ca7e92f964a8eab1b66e1cc065523cc08c1808d3c475f7d78ce1505d14cd1b9485f3d8844a276244bbaacb48b1d607a37874bd20f2d0595ced332438fe3fa0b25977233ebf7879b78ca8e994598448"}) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 899.800127][T11247] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 899.831055][T11249] IPVS: ftp: loaded support on port[0] = 21 [ 899.868599][T11250] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 899.893669][T11290] IPVS: ftp: loaded support on port[0] = 21 [ 900.014463][T11287] device bond24 entered promiscuous mode [ 900.055569][T11287] device bond24 left promiscuous mode 17:19:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x5865, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 900.548258][T11247] device bond182 entered promiscuous mode [ 900.604887][T11247] device bond182 left promiscuous mode [ 900.695703][T11254] IPVS: ftp: loaded support on port[0] = 21 17:19:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x6000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:08 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x50f000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88100, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r0}, 0x8) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "435edc8d565f8aa5", "a27a908f092438a87e5d66a0cc72ef8f", "2f4c2fc6", "1205783ce436c5c7"}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x2, 0x2, 0x5, 0x4, "68db93fd28e51ec3e0aba42a32efa925d6616bd935d2ac51a026fdddd595285699eb6824877b02fa5b05ea24e093efb78acd325abc3586b4457649b48da23e"}, 0x80, 0x0}, 0x0) 17:19:08 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40086602, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x6558, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 901.307536][T11404] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 901.327973][T11405] IPVS: ftp: loaded support on port[0] = 21 [ 901.521168][T11408] device bond183 entered promiscuous mode [ 901.597252][T11408] device bond183 left promiscuous mode [ 902.182687][ T21] tipc: TX() has been purged, node left! [ 902.191263][ T21] tipc: TX() has been purged, node left! [ 902.282931][ T21] tipc: TX() has been purged, node left! 17:19:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40186366, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x401c5820, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:10 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0xa, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x8100, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:10 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40186366, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 903.620358][T11494] IPVS: ftp: loaded support on port[0] = 21 [ 903.656938][T11498] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 903.666140][T11496] IPVS: ftp: loaded support on port[0] = 21 17:19:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xa407, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 903.769362][T11503] IPVS: ftp: loaded support on port[0] = 21 [ 903.830932][T11502] device bond184 entered promiscuous mode [ 903.906535][T11502] device bond184 left promiscuous mode 17:19:11 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="abb083a391231c2094a771aff0e4cb702393d42779c03c1d9735f86cf73ec0b754690000010cf00800000000000000ee5ddf42b14eff13c46ece043953936a3cf9935bde5627e577116f922eab96ca8aeae093dff8d70193fa8c34c8ca16c1b418b627c0ee3ece54d49fdf97e809477c6aa44831d66c217b42a334dfecf83f77a3357c16a82fffc6338100"/150, @ANYRES16, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x168148f352f1ef42}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}, 0x3, 0x6, 0xdec}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xf000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x34000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 904.768017][T11583] IPVS: ftp: loaded support on port[0] = 21 [ 904.798536][T11621] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 904.971492][T11628] device bond185 entered promiscuous mode [ 905.035506][T11628] device bond185 left promiscuous mode 17:19:12 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0xa, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) [ 905.665467][T11687] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:19:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4020940d, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:13 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0x2, 0x2, 0xffffff00, &(0x7f0000001600)={0xffffffffffffffff}) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000280)) r1 = socket$kcm(0x11, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x40040) 17:19:13 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x400300, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005070000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) 17:19:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xf0ffff, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 906.239416][T11758] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 906.257792][T11753] IPVS: ftp: loaded support on port[0] = 21 [ 906.367629][T11766] IPVS: ftp: loaded support on port[0] = 21 17:19:13 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000240)={{r0}, "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"}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x200, 0x0) socket$netlink(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 906.452496][T11759] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 906.511558][T11763] device bond186 entered promiscuous mode [ 906.522828][T11763] device bond186 left promiscuous mode [ 906.661175][T11764] bond12: (slave bridge10): Enslaving as a backup interface with an up link [ 906.702846][T11775] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:19:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x1000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005070000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:13 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4c01, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:14 executing program 5: pipe(&(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r0}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000140)=0x9, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 907.114300][T11890] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 907.146728][T11893] IPVS: ftp: loaded support on port[0] = 21 [ 907.239941][T11897] device bond187 entered promiscuous mode [ 907.301605][T11897] device bond187 left promiscuous mode [ 907.436662][T11766] IPVS: ftp: loaded support on port[0] = 21 [ 907.779193][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 908.838788][ T21] tipc: TX() has been purged, node left! [ 908.845315][ T21] tipc: TX() has been purged, node left! [ 908.851338][ T21] tipc: TX() has been purged, node left! [ 908.859997][ T21] tipc: TX() has been purged, node left! [ 908.866781][ T21] tipc: TX() has been purged, node left! [ 908.876366][ T21] tipc: TX() has been purged, node left! [ 908.885418][ T21] tipc: TX() has been purged, node left! 17:19:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40305828, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x2000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) 17:19:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005070000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80000) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = socket$kcm(0x11, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r1, 0x100000000000100, 0xb, 0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'veth0\x00', 0x4000}) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f0000000000)=@caif=@dgm={0x25, 0x1, 0x47}, 0x80, 0x0}, 0x20000800) 17:19:16 executing program 4: pipe(&(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r0}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000140)=0x9, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 909.653130][T11990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 909.666893][T11994] IPVS: ftp: loaded support on port[0] = 21 17:19:16 executing program 4: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0xe00) [ 909.712138][T11995] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:19:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x3000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 909.930617][T11997] device bond188 entered promiscuous mode [ 909.972933][T11997] device bond188 left promiscuous mode [ 910.285356][T11990] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 910.316809][T12032] bond25: (slave bridge9): Enslaving as a backup interface with an up link 17:19:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:17 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x2, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:17 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x2, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:17 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa762c0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4891}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000240)=""/174, &(0x7f0000000140)=0xae) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f0000000000)=@caif=@dgm={0x25, 0x2, 0x80}, 0x80, 0x0}, 0x0) [ 910.459489][T12015] IPVS: ftp: loaded support on port[0] = 21 [ 910.568038][T12111] IPVS: ftp: loaded support on port[0] = 21 [ 910.597022][T12110] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 910.704929][T12118] IPVS: ftp: loaded support on port[0] = 21 [ 910.706793][T12116] device bond189 entered promiscuous mode [ 910.731891][T12116] device bond189 left promiscuous mode [ 911.109485][T12110] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:19:20 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086301, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x4000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:20 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000140)=0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) 17:19:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 913.904699][T12261] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 913.998116][T12263] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 914.006372][T12291] IPVS: ftp: loaded support on port[0] = 21 [ 914.110175][T12278] device bond190 entered promiscuous mode [ 914.127243][T12278] device bond190 left promiscuous mode [ 914.304588][T12265] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:19:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x6000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 914.351419][T12261] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 914.391423][T12302] bond13: (slave bridge11): Enslaving as a backup interface with an up link 17:19:21 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000180)=0x54) r2 = socket(0xa, 0x1, 0x0) close(r2) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x14, &(0x7f0000000040)={r4}, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000280)=0x54) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 914.494849][T12314] bond26: (slave bridge10): Enslaving as a backup interface with an up link 17:19:21 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xd4800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x8000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 914.749192][T12291] IPVS: ftp: loaded support on port[0] = 21 [ 914.770810][T12414] IPVS: ftp: loaded support on port[0] = 21 [ 914.829809][T12418] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 915.006585][T12425] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 915.090496][T12427] device bond191 entered promiscuous mode [ 915.112569][T12427] device bond191 left promiscuous mode [ 915.396845][T12440] device bond27 entered promiscuous mode [ 915.424427][T12440] device bond27 left promiscuous mode [ 915.557137][T12419] IPVS: ftp: loaded support on port[0] = 21 [ 915.750778][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 915.764639][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 916.296628][ T21] tipc: TX() has been purged, node left! [ 916.320838][ T21] tipc: TX() has been purged, node left! [ 916.342346][ T21] tipc: TX() has been purged, node left! [ 916.354229][ T21] tipc: TX() has been purged, node left! [ 916.390361][ T21] tipc: TX() has been purged, node left! 17:19:25 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108906, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x9000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:25 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r0}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={r0, 0xda, "1b5c05f4544cda7214b4fa57eef9d7683d479c7651a0cfc15868dd5f8d6947732720af25205cfcfb406a0a6bc86bec2719bf95c67f38d695525adc4914b1f556afdafeda7f12364d5af4321abfa06b07f3cc88e6ca1061ba9ddd6f264fa914bed8da2d04053547a20e5b9574a323a8789af53a26d56dfcec2a747e748a0da15132979b048378089bff7bd6513b2506cdf4f6286beb3125af520a7b1bac007604245ce51d90c758cbba24284ba888c547c23adf6c28b881498ca592af2f7de20250457176cb382a5b0d8312310ce7a246c0ffc68e40e7bc175a91"}, &(0x7f0000000140)=0xe2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 918.572419][T12563] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 918.634458][T12567] IPVS: ftp: loaded support on port[0] = 21 [ 918.646066][T12564] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 918.767893][T12562] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 918.854438][T12586] device bond28 entered promiscuous mode [ 918.866930][T12586] device bond28 left promiscuous mode 17:19:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xa000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 919.044534][T12598] device bond192 entered promiscuous mode [ 919.066522][T12598] device bond192 left promiscuous mode [ 919.483173][T12599] device bond14 entered promiscuous mode [ 919.495721][T12600] IPVS: ftp: loaded support on port[0] = 21 [ 919.518840][T12599] device bond14 left promiscuous mode [ 919.734861][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 919.749202][T12607] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 919.770814][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 17:19:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086301, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:26 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000ac0)={0x2, @dev={[], 0x44}}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x404a00, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x402500, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000080), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x1d, r3}, 0x10, &(0x7f0000000a40)={&(0x7f00000009c0)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x25, 0x2, 0x0, 0x0, "f1660b031b87c1057cad19336696b020a6b5159d67e52da06db1d4427e837bc29b9c21a2502005e93e608ef88069874a6621705223cfb6650c2c1817afdad2b7"}, 0x48}, 0x1, 0x0, 0x0, 0x20040014}, 0x8060) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xc000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 920.030690][T12730] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 920.051070][T12734] IPVS: ftp: loaded support on port[0] = 21 [ 920.216312][T12745] device bond193 entered promiscuous mode [ 920.230176][T12745] device bond193 left promiscuous mode [ 920.481166][T12746] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 920.595430][T12765] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 920.643395][T12770] device bond29 entered promiscuous mode [ 920.662204][T12770] device bond29 left promiscuous mode [ 920.886364][T12782] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 922.447226][ T21] tipc: TX() has been purged, node left! 17:19:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108907, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:32 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0008000004751656d1ac6a29ee394a10ba6287ded55cd20484e0ffe46e9a714c81981af3e60351f11f518e46b9baa6307c697b71e5630f5cce95242732307360c2e10e6500174fc085e8cad75ca560a84f3201bcb0dc09d6cb6b2baa772f9647cac5239ff03327fab0", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x222042, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x6000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xe000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:32 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086301, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 925.234127][T12925] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 925.248930][T12924] IPVS: ftp: loaded support on port[0] = 21 17:19:32 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108906, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 925.332759][T12931] IPVS: ftp: loaded support on port[0] = 21 [ 925.362057][T12954] IPVS: ftp: loaded support on port[0] = 21 [ 925.430539][T12929] device bond194 entered promiscuous mode [ 925.499872][T12929] device bond194 left promiscuous mode [ 925.943907][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:19:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xf000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="0126c2b0ec6a5a000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r2}, 0x8) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000021400022dbd7000fddbdf250900020073797a320000000008000100000000000900020073797a300000000008004400", @ANYRES32=r1, @ANYBLOB="080001000200000008004400", @ANYRES32=r0, @ANYBLOB="08008b507f4f66303c88821da9eefc8dd89eabf2da60493ef78c08e4e7e8a275e7510467b16faa3917cce9cfffd3247e0c432bc6eb989541bc2c486963b1fc08c3c70afb4672039144cd469056523a4406149e42013eed99a8", @ANYRES32=r0, @ANYBLOB="050054000000000067bcacd2e4555795a6c7ac176969623bd2ac5a6ace3a36bd16c6b425b3e68743601a61faa51eadacd4b21b77f28e755fae7213bb322c5b92110a508037d0c6c5601eb81e77a80090bba9"], 0x58}}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000080), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000007780)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @multicast2}, 0x2, 0x2, 0x3, 0x2}}, 0x80, 0x0}, 0x4000000) 17:19:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 926.237323][T12951] IPVS: ftp: loaded support on port[0] = 21 17:19:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x10000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 926.368536][T13050] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 926.511140][T13060] device bond195 entered promiscuous mode 17:19:33 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086301, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 926.567515][T13060] device bond195 left promiscuous mode [ 926.666856][T13103] IPVS: ftp: loaded support on port[0] = 21 [ 926.894118][T13078] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 927.931620][ T21] tipc: TX() has been purged, node left! [ 927.946633][ T21] tipc: TX() has been purged, node left! [ 928.007693][ T21] tipc: TX() has been purged, node left! 17:19:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0045878, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:36 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000006a00080026bd70008af4fea2d35da21902fcdbdf250a0000000000000008000a00010000000400090004000b008ff1262ec73b7b8deb5ed9a99f4e87fffffeffffffffffd5c016a0eda7b6088574bffed144f08e8c3d283112f8ceff1f24629ce22543f53fd57d536db131c1d1e531d43e08bee7fdfcb6b3abc5811b1c4ee0dbc69d3622117dbd36e8233ae5b6c6775a92bf258d5a92ca18a719584f3ad6a876cf2a0f5c2aa1bc9ea838a090bfabbcc074ad4baaa73db7b39b872a5e9ca49b0bdf61ea33a28e4f329708b71192f8e8b20e0d03b7357af69cccdc5dcbc1a29f67f6b7c3059d1b2cf2c2d4b5ac05dcbe57f6b2d7740bc0e399e122a632d9a8b1c73869514c613c57ac35d7d27330a83085c7bdc732ac99aa36d741be5acef301bf0bfe8e594bfc33ea55db0cc19059"], 0x28}}, 0x840) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x3f000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 929.726790][T13165] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 929.805316][T13172] IPVS: ftp: loaded support on port[0] = 21 [ 929.871897][T13168] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:19:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x40000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 930.094864][T13171] device bond15 entered promiscuous mode [ 930.128140][T13171] device bond15 left promiscuous mode [ 930.471285][T13195] device bond196 entered promiscuous mode [ 930.490478][T13195] device bond196 left promiscuous mode [ 930.725324][T13201] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 930.740607][T13208] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 930.746899][T13198] IPVS: ftp: loaded support on port[0] = 21 17:19:38 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108907, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:38 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffbff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x60000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 931.398869][T13325] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 931.523597][T13363] IPVS: ftp: loaded support on port[0] = 21 [ 931.539088][T13329] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 931.678691][T13334] device bond16 entered promiscuous mode [ 931.725267][T13334] device bond16 left promiscuous mode [ 931.963591][T13352] device bond197 entered promiscuous mode [ 931.974360][T13352] device bond197 left promiscuous mode [ 932.077235][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 932.087795][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:19:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x65580000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 933.330425][ T21] tipc: TX() has been purged, node left! [ 933.337136][ T21] tipc: TX() has been purged, node left! 17:19:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, '/\'[@\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x17, 0x1, 'cgroup.controllers\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000084}, 0x24004035) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) write$binfmt_elf64(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="fd0000000314010000000000000000000900020073797a310000000008004100ff786500140033006c6f"], 0x38}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000240)={0x2, 'ip6_vti0\x00', {0x1}, 0x2}) sendfile(r4, r2, 0x0, 0x80000000) 17:19:40 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) write$tun(r0, &(0x7f0000001640)={@val={0x0, 0x16}, @val={0x2, 0x0, 0x7, 0x80d0, 0x9, 0x100}, @ipv6=@generic={0x5, 0x6, "55a1e8", 0x357, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@routing={0x67, 0x2, 0x1, 0x4, 0x0, [@mcast1]}, @hopopts={0xc, 0x16, [], [@pad1, @jumbo={0xc2, 0x4, 0x17}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0xfffffff8}, @generic={0x4, 0x9d, "e49bb2178e18336480a51f24fe77e8b3d62e2a6975cf95fbb4dc0b1bdd0cca3bf051e33dedf25dbb3f86bd2f098be725820cc7ce9a082c4f2dc101451592681d861c249f6b6eb4121d41332281fb38566afb147a3a6cbb020e77db33356dabd126a9bbe5ae3051c2d3ca53a9b3982fc5b88c486e45a3365e8f72b70c679c63c485ccf6c22b6f326dede898b21b5e0bf0486c49bb89016b9c56c9c235fa"}]}, @hopopts={0xc, 0xa, [], [@enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0xdb}, @jumbo, @calipso={0x7, 0x38, {0x1, 0xc, 0x6, 0x9, [0x0, 0x0, 0x82, 0xffffffffffffffff, 0x7, 0x1]}}, @pad1]}, @hopopts={0x87}, @hopopts={0x2e, 0xe, [], [@calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0x8, [0x5, 0x1, 0x9, 0x5, 0x9]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0xd1, 0x3, [0x7]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0xab7, [0x6, 0x7, 0x3, 0x4]}}]}, @dstopts={0x5e, 0x13, [], [@generic={0x40, 0x81, "3a7d7ffe685c8b6061bf0c1fa88f7b009ad5c3807f310fd6c1b940838411ca0550e3558a333ca314e2651d5c6eebcc744905b809d8d58eab85bb2e744afa155ef0518697fb690c5b48de230db42e3aca6c02c1a12000c440e05ccb2f14f55747edb4250bb64a476ace1e8b7e0c1e12eef24173bdc3b6fef95d0a1dcf5480fb496b"}, @pad1, @enc_lim={0x4, 0x1, 0x3f}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @routing={0x87, 0xe, 0x2, 0x8, 0x0, [@remote, @ipv4={[], [], @local}, @mcast2, @private1={0xfc, 0x1, [], 0x1}, @loopback, @mcast1, @empty]}], "5463bd084da0628583963ea3efd0e4cfae29d4684b2cfcb81d80ce13f444478c7c9611e5f344dc177b81b5929b928c0c478c7e9d58a6e414b766a760caf18893961b95d4f522f17c366b30e37e902d2a8d0c04916892e8e1f4f845779f1b9314a39b061b8dfbf7ce16d22960dbb1fcfcd32b2d7b93ab4a"}}}, 0x38d) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1004) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0045878, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x81000000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:40 executing program 2 (fault-call:13 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:40 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000c34010400008000000000040004800900020073797a30000000000900010073797a3000000000080003400000000022000200b76312c4117379", @ANYRES16], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0xa0f10300, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 933.969934][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 933.989836][T13467] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 934.091251][ T27] audit: type=1804 audit(1599931181.083:324): pid=13470 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir801870166/syzkaller.rmb7wk/1003/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 934.129118][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 934.150208][T13474] IPVS: ftp: loaded support on port[0] = 21 [ 934.160814][T13493] FAULT_INJECTION: forcing a failure. [ 934.160814][T13493] name failslab, interval 1, probability 0, space 0, times 0 [ 934.201405][T13479] netlink: 197 bytes leftover after parsing attributes in process `syz-executor.4'. [ 934.220106][T13513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 934.247333][T13471] device bond198 entered promiscuous mode [ 934.256021][T13493] CPU: 0 PID: 13493 Comm: syz-executor.2 Not tainted 5.9.0-rc3-syzkaller #0 [ 934.264725][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.274786][T13493] Call Trace: [ 934.278096][T13493] dump_stack+0x198/0x1fd [ 934.282442][T13493] should_fail.cold+0x5/0x14 [ 934.287052][T13493] should_failslab+0x5/0xf [ 934.291490][T13493] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 934.297572][T13493] kmem_cache_alloc_node+0x50/0x3e0 [ 934.302796][T13493] __alloc_skb+0x71/0x550 [ 934.307140][T13493] netlink_sendmsg+0x94f/0xd90 [ 934.311920][T13493] ? netlink_unicast+0x7d0/0x7d0 [ 934.316877][T13493] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 934.322174][T13493] ? netlink_unicast+0x7d0/0x7d0 [ 934.327122][T13493] sock_sendmsg+0xcf/0x120 [ 934.331545][T13493] ____sys_sendmsg+0x6e8/0x810 [ 934.336318][T13493] ? kernel_sendmsg+0x50/0x50 [ 934.341005][T13493] ? do_recvmmsg+0x6d0/0x6d0 [ 934.345616][T13493] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 934.351635][T13493] ? __lock_acquire+0x161b/0x5570 [ 934.356683][T13493] ? _parse_integer+0x132/0x180 [ 934.361593][T13493] ___sys_sendmsg+0xf3/0x170 [ 934.366323][T13493] ? sendmsg_copy_msghdr+0x160/0x160 [ 934.371649][T13493] ? __fget_files+0x272/0x400 [ 934.376352][T13493] ? lock_downgrade+0x830/0x830 [ 934.381238][T13493] ? lock_is_held_type+0xbb/0xf0 [ 934.386198][T13493] ? find_held_lock+0x2d/0x110 [ 934.390993][T13493] ? __fget_files+0x294/0x400 [ 934.395724][T13493] ? __fget_light+0xea/0x280 [ 934.400336][T13493] __sys_sendmsg+0xe5/0x1b0 [ 934.404851][T13493] ? __sys_sendmsg_sock+0xb0/0xb0 [ 934.409900][T13493] ? syscall_enter_from_user_mode+0x20/0x290 [ 934.415909][T13493] ? lockdep_hardirqs_on+0x53/0x100 [ 934.421139][T13493] do_syscall_64+0x2d/0x70 [ 934.425673][T13493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 934.431589][T13493] RIP: 0033:0x45d5f9 [ 934.435537][T13493] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 934.455159][T13493] RSP: 002b:00007fb00e3b6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.463937][T13493] RAX: ffffffffffffffda RBX: 000000000002cf00 RCX: 000000000045d5f9 [ 934.471921][T13493] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000008 [ 934.479912][T13493] RBP: 00007fb00e3b6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 934.487922][T13493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.495914][T13493] R13: 00007ffeb0fb40cf R14: 00007fb00e3b79c0 R15: 000000000118d08c [ 934.523985][T13471] device bond198 left promiscuous mode 17:19:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00000082", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x14, &(0x7f0000000040)={r4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) r7 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)="927bbfb3d422e230c49f6e1f8a0bd2d063cd8ae9db5c8459c222b831540f73d8b4776c40b734c4934127ada5905cd162f54b4386adfe4d57628f598f5b36cc99072c0ad45a561258813451a4522a2d397db5c80331e4ad0e36d30a372888bc77e112ad2c2f5aa271244878a7d4e0342901f9f824ff99d56424a7a19d84988c60db7a746ac791f87557371edfc4dc0113cca3e7b342911e67ef57c9dd010bd7a52e6a4a40dd0c57d1a2b5bdda12aeb8ce448f2359d66af6904c096e42ed34260a47f5f2484a02a4892fb760a893afc1c31d9bb644282a624fd69f78a766b293d468e6db76", 0xe4}, {&(0x7f0000000340)="e95f8886a623c0afbf698a114b6817671f13b20ea29535b61ee82d7d7b7b90db73b55c678cb3", 0x26}, {&(0x7f0000000380)="7f12ec2b2f30d79864866b9837817ae1920d4c8aefcc0e85086561a10e1d519b6c92bacd97b0059b9db7b791de41744b1d06cf3aa986c4004d069961182adb3f4e51af1d8e02b47f8cb35508d935f3ad6b1bcf9c482215e258605386af0d86b9af74666568f74b5ee6a8d7217fca8e7f9e8e21e08d2c7371cd6c0b448366061e3019f79b883cb76cf20ca5", 0x8b}, {&(0x7f0000000440)="c4a4769cccd5544620edd9e28ea50e2cb699ab5a1ea045990a26240ea6df2815f3f4779fa4dd1d7d47c7043db9d87aad07648ac7d6682dcebc2cdcaf04e7f6a5439f2c0acf0589f5543e6e", 0x4b}, {&(0x7f00000004c0)="53a7dd43369de8c76c28ff3af7962eae1a319990da5cb2321385d548e56c62a84870068d8ad5ad61de3250f6e7b6877b7ec07e7d2e7b43118c6c9bd88a25203c86258b1846a2c5e992543f910cb0bc552c628032df7156713f812d04f6d44e52d8ce8823ee20993936c10e82377d528c1e590e6eba0e04833f7032791efad2e013ac06567af604aaf8cc7bd7041191a89622e53b311bb51d9a2c8b8c85944e677d502c83cbe215cedfdb83d50126fb667a50000d4a3aed52f19a9438a044b0f7113184415a3e9ffdba025456c1e31ab62ecaa397ab58874efae80b2f6f9cb57ac05d3ef5ed70", 0xe6}], 0x5, &(0x7f00000006c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r2, 0xffffffffffffffff, r1, r2, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0x58, 0x20040084}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000300)={@val={0x2}, @void, @eth={@dev, @random="292286250200", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x6000, 0x0, 0x2c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {0x0, 0x0, 0x8}}}}}}, 0x2e) 17:19:41 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, 0x0, 0x711, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@RTM_GETNSID={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000017c0)={'team_slave_0\x00', r5}) socketpair(0x22, 0x5, 0x7fff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x1, 0x204, 0x3, 0x7, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000400)={r7, 0x2, 0x20, 0x9, 0xffffffffffffffe1}, &(0x7f0000000440)=0x18) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17:19:41 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="d26451773b13c50a4613429b1a106373bc98", @ANYRES16=r0, @ANYBLOB="02002bbd7000fddbdf250000000006001c00824c0000060002000000000005000d0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x22000045}, 0x20000800) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40100, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 934.908972][T13494] IPVS: ftp: loaded support on port[0] = 21 17:19:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x88a8ffff, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:42 executing program 2 (fault-call:13 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x9effffff, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) clock_gettime(0x0, &(0x7f0000001240)) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000180)=0x9, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000001340)={'#! ', './file0', [{0x20, '!A.{,[!).--@{.^-'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '(@($)\x92-:@\''}, {0x20, 'memory.events\x00'}, {0x20, '+\x00:'}, {0x20, '*{*'}], 0xa, "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"}, 0x104e) 17:19:42 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0xa) [ 935.387071][T13588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 935.523273][T13613] FAULT_INJECTION: forcing a failure. [ 935.523273][T13613] name failslab, interval 1, probability 0, space 0, times 0 [ 935.616730][T13599] device bond199 entered promiscuous mode [ 935.635765][T13613] CPU: 1 PID: 13613 Comm: syz-executor.2 Not tainted 5.9.0-rc3-syzkaller #0 [ 935.644491][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.654546][T13613] Call Trace: [ 935.657849][T13613] dump_stack+0x198/0x1fd [ 935.662196][T13613] should_fail.cold+0x5/0x14 [ 935.666815][T13613] should_failslab+0x5/0xf [ 935.671243][T13613] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 935.677325][T13613] kmem_cache_alloc_node_trace+0x55/0x3f0 [ 935.683060][T13613] ? __alloc_skb+0x71/0x550 [ 935.687584][T13613] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 935.693150][T13613] __kmalloc_node_track_caller+0x38/0x60 [ 935.698804][T13613] __alloc_skb+0xae/0x550 [ 935.703156][T13613] netlink_sendmsg+0x94f/0xd90 [ 935.707943][T13613] ? netlink_unicast+0x7d0/0x7d0 [ 935.712931][T13613] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 935.718230][T13613] ? netlink_unicast+0x7d0/0x7d0 [ 935.723177][T13613] sock_sendmsg+0xcf/0x120 [ 935.727605][T13613] ____sys_sendmsg+0x6e8/0x810 [ 935.732377][T13613] ? kernel_sendmsg+0x50/0x50 [ 935.737058][T13613] ? do_recvmmsg+0x6d0/0x6d0 [ 935.741667][T13613] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 935.747651][T13613] ? __lock_acquire+0x161b/0x5570 [ 935.752685][T13613] ? _parse_integer+0x132/0x180 [ 935.757553][T13613] ___sys_sendmsg+0xf3/0x170 [ 935.762156][T13613] ? sendmsg_copy_msghdr+0x160/0x160 [ 935.767453][T13613] ? __fget_files+0x272/0x400 [ 935.772147][T13613] ? lock_downgrade+0x830/0x830 [ 935.777008][T13613] ? lock_is_held_type+0xbb/0xf0 [ 935.781954][T13613] ? find_held_lock+0x2d/0x110 [ 935.786734][T13613] ? __fget_files+0x294/0x400 [ 935.791450][T13613] ? __fget_light+0xea/0x280 [ 935.796147][T13613] __sys_sendmsg+0xe5/0x1b0 [ 935.800664][T13613] ? __sys_sendmsg_sock+0xb0/0xb0 [ 935.806138][T13613] ? syscall_enter_from_user_mode+0x20/0x290 [ 935.812127][T13613] ? lockdep_hardirqs_on+0x53/0x100 [ 935.817335][T13613] do_syscall_64+0x2d/0x70 [ 935.821754][T13613] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 935.827652][T13613] RIP: 0033:0x45d5f9 [ 935.831547][T13613] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 935.851159][T13613] RSP: 002b:00007fb00e3b6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.859579][T13613] RAX: ffffffffffffffda RBX: 000000000002cf00 RCX: 000000000045d5f9 [ 935.867553][T13613] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000008 [ 935.875531][T13613] RBP: 00007fb00e3b6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 935.883506][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.891574][T13613] R13: 00007ffeb0fb40cf R14: 00007fb00e3b79c0 R15: 000000000118d08c [ 935.932166][T13599] device bond199 left promiscuous mode [ 936.073345][ T27] audit: type=1804 audit(1599931183.073:325): pid=13615 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir801870166/syzkaller.rmb7wk/1005/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 17:19:43 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0189436, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)={0x1270, 0x12, 0x300, 0x70bd26, 0x25dfdbfc, {0x22, 0x65, 0x6, 0xa7, {0x4e24, 0x4e20, [0x0, 0x3f, 0x800, 0x6], [0x7f, 0xff, 0x818f, 0x3], 0x0, [0x9, 0x5]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "8a12176a8a35b2f3ca2b7c695b11e0b676e6a830639dff764155cdb65975a40796d18501e54de19f679756abbfa32a32a03ab6adf5129b98bfaec64e2c360842c2908b565457ba9bc22158ec4f0bd80a717a09d717f368dfb3005dffdb0716c760ff3bb6a2ed337e833099cb98d18eea7d82a73f95402ded5b5648af1c2c9cb4d3d460aab021b7b194595f82170f56b050ef59f4994e51a1ebf78d"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "62167c617df4e1d0b73660babfb37e6908bc8254e4853f0c4dad9eeb85d56c95c7b16402a0d5879317976d12d3e1f49fb2f1085a6b7aee78c71a852a98152af257b66b580d97336b8f0ba62c19a64a4f91e2d908636d4c9972826c65f4f184dafb0130f043440d55d1f844a611361098da2881b40a21308a76667580d4974fd9bea673718b1b845ab59e63cf37dd1cf063474e4cec127e0a0db3f3766145bdcfce33ab4b4c3284"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "e5a37d8ffd85b24d6a53493ccda031f0eed0c10c0f5ddc49ab10f7f213826267ea4da46f63e0f6410a4bd70c98bb2bc58da2bb0a1103544a87858e461ed609bd8afaf19718816ad4f78b1c9c3200884e6fc05056fc1ea4b4a95d8fbc9ed909938503583942c4220f034e74844ea043e736c5ace8cdff2e56e04878fe78fc0d06fd4aed82f6ef93fe07da8969f71a1026bcffea48bfad5efebfa537f343359ef7a81d9a48550e992ff33c7b728ecef2692d05bc477d06cd647cc925a9593901de9aea85eb9e192affd02204b46d64"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "d5ab68ac5439f37a8c745349d4c1e93112a99e626bfedd7cf3ac16b4bb12d240e3a12dfc55c7580d1b17d5f77934324a1852791fd0227469c8654e196a6fb594f987bb6440357fc6a529b212a764b66a3d73fbdbc0ec65c5a96df7076f811f2971482ed8e072e22db8585e56f82edd72b80615efe3473354954b0c11ff4c8b7cee6dd82570baad7589820c6159e03a592e13120c935d5eecbc7ae0205be50293efe5b1568e867e0e50e772d2d1b4475427633f5c433b9ec1ad9528aabbd01f4e2ca7114aaf9c33e8ec0f2a66d60cee443d58fcaf9fab9cc529b57baf0f4f80b0c5b78c8e10c3f3b2d2498ea6e8970e79c9d1eb53a38917d24845bfd74a2fb13750a0baff8664399c22803848d4095a0c592f16e29bcd000effb60d6974c718a09d6ab63596d78ee9231fc6bcfe0aa3b41aec049a48ee39db79800cc77c542f347a0895bd2c26f36cad6f77842a034add16ae92dc95cbabe53b26fd496180235dddaeff16601aa1032978a4d5235fe56778bd344056eb7f95202eb9a314c7fc101d0352487434f2fe1bd41af2b47ddc8801a0ba4278baf67b16bb72fa311bed4ab70b5cbe1c8b4f716e1ee2cb6dff546574e627bca1659317c97badff748dbe59577badc7e1d182bd97b653b3a5ac6837cf977b08d6cc3866e9755d99262762ea63e10ca50d2e673b9e334900b26889c374e7c68fdc854842521630c56b957fdb78f827cb9c1c878fcf554bbc2138b1a826e49fc1da10cd30b732a7f447be5219bab72ed588d3c044449daeb5860e0f6daf369aa97212491cb81689f3c2bb5121bbe85081646d9893157b5ea6b10140ce4ea50866df31da61d0144fe02d455320897e5be616894537598f70d10a4bb235067b116b153e9794b03f2c60e7f5a0c908a5b98907aff89badf62633d8471214639722226ae89eba636aed84626a11d50fbc05fb77f8809ca4c8ce1a5ee8852bbeb3e71caa8250f8de6625514c8d29c5aea2bf072e83924b6f27d1a52e51ff765f6d6b900e14261709a4c853ff302956a4a8bcecc38341c2e8f5d6b67a618191fd76eea0026b1b23b67f53a5e6b5fc79a8263e54165a93982ac5e90279b3e9a73eb8556a073add3425f700068c4086de4f382e4e5d0ef8b93fe1987d0036038f72b667ce812498eafabf4dbe0507bfd4243bc4ab6d65c41c6647bc718bd1351bf2a63bf40a7b40e0d8d452a9d66338906f08a58fca18cdfce1085d23e98751ad4f9f61f6b3179745ee66f8e49823ec4fa0bdb1a742a327bab476fc2b6a8baabab50c3f0178418b721bb9bda287077b8d1df8544f495e554c2adbef1788ac482783a2999ac723ddbcc3a112309a814662d9bdca48374c867971833b48b132f4a183e2e315f3ae19b27a28cbe66d2a621d79b1b6e0c5001242eb23967dd0dbb82af75fea35a6b9fe577e5bef08d168ac399c5a340b2b51dd8a41984ac1a43b1b715fcfe3dfb9a9725d14d7c55d8f370c4022ec80363c89f874eb78aaa5b3f4785675cb40051b9674e12e9c7bbfa5632167707e5c75fce860371d44c000278eca34bceacba131b6a81732960c28060bacae141a72d710920b0f35239173e1880b5f740ec97f9f9849842f89fca5e13ba00c647e75e9c9735cdbe39d1c7ff3a8909c863a6723ba8bc0dfd13e6abfe6bcac65a2068da46f10d4a0ed7a606fa4c7d6c933255e348123c0256179bb1c5cdbccd1a6de88b0230c5b374b33731d7b4db74ddeea29df86cee136b89ee3223e51fbfc463c6cebc5eb49c6a8a05ca32d803ec6b49cd421c964bb76acd9a8f8e7e1b1c8e7fc5b622d2656a31f4c754ef056936aec8477df8d7b4abcf067e9974ecd00c9141fd712634bf5e185e67df3af8fad6bae8e7d8f4b62a00119b3cbaad5dd4b1dfe31b704895c595cd60553f62126f41fdd5f1f5ee0180c16b671e9a7b52407725bfb3ee1fcc44fd2dc1b9885dbefb2eb6769857912eec73007362a1eb468665b97a35d278d98528866c706fcdbe5ca12c3cc4cf60e625e569b305b2286b37cb4d74ae6d5897ea726268eaff5901bd89f0cdefb981faff0ac753f2336d2dd5845d2d8b5294d4e20a22ebf9ca5a3ae891c7007d53cc7ba51499d43180c40689c570a8f926b83ae8996acb5c94eaee80cb009863ee52c505e65806642e3aba80d5cbe09eb1d801eb1e5519bf130a52f09356a819722860be31945327c10d037b96d28b7ccaf2b13f4bc3f2caf9ac9436f84acf734cac07dfd6f0a50ccea1d12ac271d646f43905ea48c25b0309b868d08437de9665ebd88b3d7b8c60d255ecd5f9179116a4ab0bea24eae00328ee2d19567423edbf78b6e2263a9a17928bce830d5d8e7a0c2030a62b2a9b2dbde132dbfdb26d8a978be01798125e187ab5ffd4c3b911f4149df6e997b9b5b3083b050e7399ea3ec178b3195d9bc32b6b6003dcaedb97eb50b2b2bbf26d007b305bedd3ccd539c5755c197d34f2b2a647ee144bbed9ae6f09fb0239634e7bac30bb4d004229272b34cf6438d5bd41774b00b5a4eafb7972aadf501f14bdfe0d5e7ab817240821d3e6c414044135f0db74e0c7200af14f331ba2fe1422e4cb84ff85d878498575197527e0d4aad5a234fedecc540b5c019e3fab60a43a60f66f4f96b5cd961c3f28638a84bd45165cda8187d3856ef3fd94c9385142bd3242d15fe7cf1384c15f1f0f8c6fb7a93b59897815ce39aaa8619503e43804fa74a279429b76a54df635576eb24a40b7c66745db0bb5e4bbe0ddedc32d4175e508679d8a8d2541c299bb17e2261ec854fec8503e6a7b8c34234dd84e8dcda0371f555b892a5b32831563ff8c7faf25bc75cfb25686d2438d470b0c3e5ed131f3a1732274063ac577eb9e7ddfe010e7a316542dc49bf3185dc6d78473ccb9d69b4e9830d04cce3f95a8db2304a5de6ae678b0317a7c403c6441937468cbb62e272d2fbb35bfd958e71b7e92ff875812be07265c49061f9df8f28eabc1a0007a3f7632472fdd6f876493cfffe104a146fc30d524a9fa279b9976baf0f06575a3126ec56fe4e47876ec070d7fbd29e682e7006a13ee535355e6103e2a01c0cbbb7babf653361c4cb6747a2bbe311bb41ef5af81612b23c64917144d3990649c930302c9710e43ec3a1c9a8733d9aba88ef1717939e367632e6963b06fc2ee0033a34501f13e5b73d20058010d50f56fe3ead136e7d747bd6880018f601fbd25da5057938da38962d005fad1a2881e76795451c9fde873db0e8e99dfa30bc6d9b8a158d96c68d9aa66b247f5990d36e607726e79f390e4196d0b3d942be5b751d0d7e6e3f08d68501d11ae1708d08238fb10e9d377994a0b8832958a789e01c0bb6129a35717961651c7101db37b35d8e62780ed7d47d5724a72de167adf4113b604fa4e339f52115b93bb4aa1b51469c6d9034a4a40ac0483782b4a2912bb4e1977b29569a9b6db9ceb6b39a351e2a566912de0e5220260581286185b59a1bffe7ffc0ec107d0f15c55564ca0c41521d1b96fed5af8e1c94b3e1a2f407c2afe55c14452c911a28ae7efc872cfec22a5b96f0cce8a070c852e7a71ed14e1890a6a688d4a89835decfb5ec568ee226a0ded90b79d7e89597e2eb0d3e8a4cfd9946b71bbef447b0dc59da839a1b1c91a8f2eb769a907c6d455ee8a00104426cae72d26c7c9f32dfc16ac727f2d20ab84ed1e46a7a93a876fbbed542cba4557a1c43c9c940c477dd40f8363c1035a68bee963c1b55777f30aae64189ea49180350c6434bfb1bdca161517f35df11b10bdbbfa2ec52bb8bfdf9e85ad273fb36d7b3290e408ce700a1a04fbaee6ce49a07ace0c109e0eee6fb954c48f6a170b43526ce4dcc36500b29199c4ebe275f9500ae8bc3f5510b8bb3f6c8ad310474d0639b834407edfc23f7168a5524b99dc7a62add5662b58312c650871082de28490b7ee11556550049653c2f9a896202e20a597f019e9fe75ad4997041f9bfef952bf0d00f05a28abb265939ab93817b250685885dcfaf5c2abee2c2ef1589974afd95e3263b96ae7534ab666369b0d613996bec20e5dbfa13adb5496ae01ef4cedc15f3d65ea254cc3fa3fb1e835cf3263ce1b188e5681e4cb48d28e1d43741f2142678accab11b0419d6150ac1e37a1d8663c8ed2aeb35291e38310459779e6c2728e93e112c5b9110ffca023b43000359666537ac78057ba05a23791296f5c4b71262f25c3f51674761b1be4ad1d92312c489465ba30bce634dc1ca3025d454a73c0fda67d88b01acc8b00462dc1fc51600091478ac9107e43f4d0d09c64ac97c87c2587fb8501e7f801e3ec31d13477361e7f3f464a820706abe58fb0f189cfe0a417fc28ab0646aea5fc5a5c3cb30e7490b660dda5219d7bb0c1b4d87893dd4ece19ca2fb4177536c61be7742885974582cd3f323361f3e87920d823bffefa43f1175f58d732ff27c6b35c06f001a6ebaeeff50358be963218f095c0ea8f1c08299cd47d9b0ce280e67ac7cf054d29a0712ef475a2e894a77bfb50cc525e6cbf9363469c91d15ea88ff59f72b8256bbf80d54b8a5d4d28ccfd40dcde0997a1f9d2f2e7871efe3bc9990608a473d81b34e4f7e48d3be81112ea23ba894eadc74d907d5427780ad2fb4ccf6aa41d6df3066dffb2d236389fb942283775d12f778400e49a05fad33a733fa3c7aee6152755c49cb386d9e4bb3ccc814e034d2496e42afb42a4470d1390db97c7f5ba4184b8acd36d1cd16635a339790c919932fcb6b8d13530afe492f621031d4eb4f2f68b2424352250d08c7da7de39ca08b93d8566e8229f46d9c5b6e211c70841e09482440b015dce848c863be65f4af042b0b3fcaf4a2dbf1b2439dcc228ad733af7648e0687ca3046eb1eafe7d35133b51677e2e4d85f6d06334b0db2965e3d9be52b8191b0f63ddcbcb34f3e077ecfa5f6cafcf6cf60c71147688ee5869c107d65cd025159796bda470e57a6598cb3951a72bfa1a3064d7d8572738631e22b171403cc632c078a19ee561b9256e48aefe0819a4f02789b57488c5975dc678606c5ddd77bbc1a6db4e8dcbad0cd270b21865d84fa50a8ad4e6ac658a13e6b957e40ef7880b573613d41ffad7e9a154af4b555a65350f5ccec32b0b37f96ce9deaa2fd48006c0e512e3897c701af71fb4cbb72a0ac2fca2448d88e6184000b0e8fff5bf4a62e7d114dd071ac61c2b88211d148aa3023bc540523227286328c0e0ec7416a6d7cff4f4c86d50b819aa1315089b58e58264be1b57db12a976bfbe6db0aa94522171bc160eeac7bd5e6464d27dfe642e0ea98293d0483669b44f7806681a5bae1fa182f6d53505914a6611b2c758f69e6cee4765e5b3d791f756ec9dd458b91b42745eee215017dd442944097d6a767030fcde8d8b26e5bab151f09f69f7156d5d95fc5c42435dd3643e60f280098d0cef2cb18998e71e2b375410f16566b4569778c90be6144fa032a7d196ccbd15ccca82d8e34289ebf1812b7834dfb23455935972e6c9584d8eaf577fe057ea3e1e21666d19ba1683b9ea085871292800f6432f9aeef75951faf974d2f95641a47375a758a34eeac0964577d0a16ca7e2c074d052289b86c9b8f27dbcefac570229fae2ce3d232b7d818c04f9437ebade9c38a872c6e23158f546164b52450618167b16df58727c0ce32de3836e1ba13f1443eb91ca5b34069c5e6453a411a7e44f50fb9234397201281c2299c12910385e1a10f2b616d0b155c70b913e05538707a03845c222d12b40432802035c3684928094d9aa59bf19c5329d"}]}, 0x1270}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x18, 0x4, 0x4, @mcast2, @mcast1, 0x7, 0x69f65f4a112d6c4b, 0x5, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x4, @remote, 'team_slave_0\x00'}}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf250100000084000280540001800800010002000000080001000200000008000100030000000800010002000000080001000b000000080001000200000008000100040000000800010007000000080001000000000008000100020000002c00018008000100010000000800010008000000080001000600000008000100020000000800010007000000340001801400020076657468305f6d61637674617000000008000300000000001400020076657468305f766c616e000000000000040003009c0002802c000180080001000400000008000100010000000800010007000000080001000300000008000100050000000c00018008000100080000002c000180080001000800000008000100080000000800010001000000080001000300000008000100010000003400018008000100010000000800010006000000080001000600000008000100000000000800010004000000080001000000000038000180080003000300000014000200767863616e310000000000000000000008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="44a0e2f8b79b95540432b7a8183e1325628be337dc0f64a5409e1d17588868215f2dbc13d18c8e5c15b54657a1ebc88d5aa15e5d3cc44320c024d5d46b08d9a105365f6aa0060cc4b01a5a0ceed0a74bd3223ff24092dfaea5ad"], 0x1a4}, 0x1, 0x0, 0x0, 0x20048082}, 0x20000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000001180)=""/238, 0xee) sendmmsg$alg(r6, &(0x7f0000008f40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="b715fc9ec583adcd0488f728d345607c", 0x10}], 0x1, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) [ 936.538080][T13658] IPVS: ftp: loaded support on port[0] = 21 17:19:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="77de0b0cff855d4a4c2e2c87b30c50fe4708de34e93316d058abdfd02ee41399710498f5ff8abedb286de15313d5840d999cbb4ad72d9089218157b18e0328b1", 0x40}, {&(0x7f0000000200)="4de8e3b443a2c6a2e4b794df5819406a1ad1b6d5b63f58d9d81904de804740b095a70bf71e08b70450cb03f0f94b4307c24f07a7e3413303fa1b22e0", 0x3c}, {&(0x7f0000000e00)="a62a2d01aff2d5c8e28b74f8ff50ed547cbb247543170b0352fc0b10802efab7e99a8a310d9ef8ead0aacba9af0c6152046368a5e101655d76a6f1163ee13e88d1ddb6555260d3505fe29e0963", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a39", 0xd0}], 0x1}}], 0x2, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 17:19:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="77de0b0cff855d4a4c2e2c87b30c50fe4708de34e93316d058abdfd02ee41399710498f5ff8abedb286de15313d5840d999cbb4ad72d9089218157b18e0328b1", 0x40}, {&(0x7f0000000200)="4de8e3b443a2c6a2e4b794df5819406a1ad1b6d5b63f58d9d81904de804740b095a70bf71e08b70450cb03f0f94b4307c24f07a7e3413303fa1b22e0", 0x3c}, {&(0x7f0000000e00)="a62a2d01aff2d5c8e28b74f8ff50ed547cbb247543170b0352fc0b10802efab7e99a8a310d9ef8ead0aacba9af0c6152046368a5e101655d76a6f1163ee13e88d1ddb6555260d3505fe29e0963", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a39", 0xd0}], 0x1}}], 0x2, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) [ 937.313364][T13663] IPVS: ftp: loaded support on port[0] = 21 17:19:44 executing program 2 (fault-call:13 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xa4070000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:44 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="03f8ff00668434c752bdfc154e7629715722c2a84256503750c4532ac7e90a882740a21cfac54dec6b9ca34bad6ce947", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f000095dffc)=0x2b) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r0}, 0x8) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000240)=""/224, 0xe0) pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000140), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="77de0b0cff855d4a4c2e2c87b30c50fe4708de34e93316d058abdfd02ee41399710498f5ff8abedb286de15313d5840d999cbb4ad72d9089218157b18e0328b1", 0x40}, {&(0x7f0000000200)="4de8e3b443a2c6a2e4b794df5819406a1ad1b6d5b63f58d9d81904de804740b095a70bf71e08b70450cb03f0f94b4307c24f07a7e3413303fa1b22e0", 0x3c}, {&(0x7f0000000e00)="a62a2d01aff2d5c8e28b74f8ff50ed547cbb247543170b0352fc0b10802efab7e99a8a310d9ef8ead0aacba9af0c6152046368a5e101655d76a6f1163ee13e88d1ddb6555260d3505fe29e0963", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a39", 0xd0}], 0x1}}], 0x2, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 17:19:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) accept(r1, 0x0, &(0x7f0000000280)) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getpeername(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000480)={{r0}, "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"}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250000000008001900000000000600030001000000060001000800000006001c000600000008001700", @ANYRES32=r4, @ANYBLOB="05002100010000000c0010000700000000000000080011000100000008000c00030000001b00210000000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev, 0x80000, 0x1, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) mmap(&(0x7f00000a7000/0x4000)=nil, 0x4000, 0x3000000, 0x810, r5, 0x5a736000) [ 937.656662][T13736] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:19:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xf0ffffff, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:44 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc020660b, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 937.764502][T13736] FAULT_INJECTION: forcing a failure. [ 937.764502][T13736] name failslab, interval 1, probability 0, space 0, times 0 [ 937.801345][T13736] CPU: 0 PID: 13736 Comm: syz-executor.2 Not tainted 5.9.0-rc3-syzkaller #0 [ 937.810054][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.820117][T13736] Call Trace: [ 937.823423][T13736] dump_stack+0x198/0x1fd [ 937.827772][T13736] should_fail.cold+0x5/0x14 [ 937.832394][T13736] should_failslab+0x5/0xf [ 937.836829][T13736] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 937.838984][T13747] device bond200 entered promiscuous mode [ 937.842909][T13736] kmem_cache_alloc+0x46/0x3a0 [ 937.842953][T13736] skb_clone+0x14f/0x3c0 [ 937.842978][T13736] netlink_deliver_tap+0x990/0xb70 [ 937.843007][T13736] netlink_unicast+0x5e5/0x7d0 [ 937.843033][T13736] ? netlink_attachskb+0x810/0x810 [ 937.843061][T13736] ? __phys_addr_symbol+0x2c/0x70 [ 937.877673][T13736] ? __check_object_size+0x171/0x3e4 [ 937.882973][T13736] netlink_sendmsg+0x856/0xd90 [ 937.887759][T13736] ? netlink_unicast+0x7d0/0x7d0 [ 937.892718][T13736] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 937.898019][T13736] ? netlink_unicast+0x7d0/0x7d0 [ 937.902962][T13736] sock_sendmsg+0xcf/0x120 [ 937.907388][T13736] ____sys_sendmsg+0x6e8/0x810 [ 937.912165][T13736] ? kernel_sendmsg+0x50/0x50 [ 937.917631][T13736] ? do_recvmmsg+0x6d0/0x6d0 [ 937.922236][T13736] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 937.928226][T13736] ? __lock_acquire+0x161b/0x5570 [ 937.933259][T13736] ? _parse_integer+0x132/0x180 [ 937.938124][T13736] ___sys_sendmsg+0xf3/0x170 [ 937.942724][T13736] ? sendmsg_copy_msghdr+0x160/0x160 [ 937.948016][T13736] ? __fget_files+0x272/0x400 [ 937.952715][T13736] ? lock_downgrade+0x830/0x830 [ 937.957573][T13736] ? lock_is_held_type+0xbb/0xf0 [ 937.962520][T13736] ? find_held_lock+0x2d/0x110 [ 937.967450][T13736] ? __fget_files+0x294/0x400 [ 937.972193][T13736] ? __fget_light+0xea/0x280 [ 937.976842][T13736] __sys_sendmsg+0xe5/0x1b0 [ 937.981364][T13736] ? __sys_sendmsg_sock+0xb0/0xb0 [ 937.986421][T13736] ? syscall_enter_from_user_mode+0x20/0x290 [ 937.992519][T13736] ? lockdep_hardirqs_on+0x53/0x100 [ 937.997748][T13736] do_syscall_64+0x2d/0x70 [ 938.002185][T13736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 938.008113][T13736] RIP: 0033:0x45d5f9 [ 938.012038][T13736] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 938.031658][T13736] RSP: 002b:00007fb00e3f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.040100][T13736] RAX: ffffffffffffffda RBX: 000000000002cf00 RCX: 000000000045d5f9 [ 938.048078][T13736] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000008 [ 938.056053][T13736] RBP: 00007fb00e3f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 938.064056][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 938.072032][T13736] R13: 00007ffeb0fb40cf R14: 00007fb00e3f99c0 R15: 000000000118cf4c [ 938.144904][T13789] IPVS: ftp: loaded support on port[0] = 21 17:19:45 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0189436, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 938.321261][T13797] IPVS: ftp: loaded support on port[0] = 21 [ 938.624006][ T27] audit: type=1804 audit(1599931185.623:326): pid=13785 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/168/cgroup.controllers" dev="sda1" ino=15824 res=1 errno=0 [ 938.728326][ T27] audit: type=1804 audit(1599931185.643:327): pid=13795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/168/cgroup.controllers" dev="sda1" ino=15824 res=1 errno=0 [ 938.868683][ T27] audit: type=1804 audit(1599931185.863:328): pid=13801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/168/cgroup.controllers" dev="sda1" ino=15824 res=1 errno=0 17:19:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) accept(r1, 0x0, &(0x7f0000000280)) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getpeername(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000480)={{r0}, "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"}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250000000008001900000000000600030001000000060001000800000006001c000600000008001700", @ANYRES32=r4, @ANYBLOB="05002100010000000c0010000700000000000000080011000100000008000c00030000001b00210000000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev, 0x80000, 0x1, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) mmap(&(0x7f00000a7000/0x4000)=nil, 0x4000, 0x3000000, 0x810, r5, 0x5a736000) [ 939.099136][T13747] device bond200 left promiscuous mode [ 939.137699][T13791] IPVS: ftp: loaded support on port[0] = 21 17:19:46 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x444200, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x4000) 17:19:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xffffa888, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 939.640690][T13736] bond200: (slave bridge166): Enslaving as a backup interface with a down link 17:19:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xfffff000, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:46 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r0}, 0x8) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000280)) r1 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 939.939425][T13838] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 940.169907][T13839] device bond201 entered promiscuous mode [ 940.192009][ T27] audit: type=1800 audit(1599931187.183:329): pid=13822 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=15824 res=0 errno=0 17:19:47 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1410, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00'}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x1000000c8) r8 = socket(0xa, 0x1, 0x0) close(r8) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="efa3e5", @ANYRES32=r8, @ANYRESDEC, @ANYRES64], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f00000000c0)) [ 940.293679][T13839] device bond201 left promiscuous mode [ 940.916433][T13862] bond201: (slave bridge167): Enslaving as a backup interface with a down link 17:19:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xffffff7f, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:48 executing program 5: pipe(&(0x7f0000000280)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x200603, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'team_slave_0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 941.198268][T13909] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 941.378711][T13913] device bond202 entered promiscuous mode [ 941.454978][T13913] device bond202 left promiscuous mode [ 941.926232][T13933] bond202: (slave bridge168): Enslaving as a backup interface with a down link [ 943.102764][T13933] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 944.264576][ T21] tipc: TX() has been purged, node left! [ 944.270612][ T21] tipc: TX() has been purged, node left! [ 944.278998][ T21] tipc: TX() has been purged, node left! [ 944.302258][ T21] tipc: TX() has been purged, node left! 17:19:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc020f509, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xffffff9e, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:51 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00'}, &(0x7f00000002c0)=0x54) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8100, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x2, 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000016c0), &(0x7f0000001700)=0x10) socketpair(0x19, 0xa, 0x8, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000180)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x2000}, [@IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 17:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 944.518196][T13983] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 944.547101][T13988] IPVS: ftp: loaded support on port[0] = 21 [ 944.667648][T13982] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 944.733796][T13989] device bond203 entered promiscuous mode [ 944.766476][T13989] device bond203 left promiscuous mode 17:19:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xfffffff0, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 944.928305][T13991] device bond17 entered promiscuous mode [ 944.946798][T13991] device bond17 left promiscuous mode [ 945.238379][T13998] bond203: (slave bridge170): Enslaving as a backup interface with a down link [ 945.269416][T14009] bond17: (slave bridge12): Enslaving as a backup interface with a down link 17:19:52 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x3a980, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x125540, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 945.314539][T14068] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 945.345452][T13993] IPVS: ftp: loaded support on port[0] = 21 [ 945.416251][T14073] device bond30 entered promiscuous mode [ 945.435492][T14073] device bond30 left promiscuous mode [ 945.640029][T14074] bond30: (slave bridge11): Enslaving as a backup interface with a down link [ 945.674446][T13983] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:19:52 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0xfe, 0x0, 0x3f, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) close(0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c90806fe305f2b84ee736568b1f7200000000000000084000000020000f0a30000020000000000ff83343a91", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xffffff73}, &(0x7f0000000140)=0x8) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000240)="755804f0677bf5b13a3d2a337197c5fe5665f7bb4eb4acce6d81912bcd38aaf8c503bd2302d5e685ca6c79dd7bbd30da62603908224059626d79380987ee448161db2891e9c592c93888f139497b03125c14a3515630332afab7b29bd6a6314396db9ed476f3") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f00000001c0)="d4053aa60b1a38ed1e944b431316a1dc22d3913886a072fe39c5b2f8a0fd15552d57ccaeaaf7db1aee5d353732e6b7edfc05c8bd63120a1969a08a8895b2b69e59", 0x41, 0x4000884, 0x0, 0x0) [ 945.723112][T13998] device bond203 entered promiscuous mode [ 945.734202][T13998] device bridge170 entered promiscuous mode [ 945.756511][T13998] device bond203 left promiscuous mode [ 945.768183][T13998] device bridge170 left promiscuous mode 17:19:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000507000000003c05000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) [ 946.071214][T14093] bond203: (slave bridge171): Enslaving as a backup interface with a down link 17:19:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 946.353188][T14170] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 946.421048][T14174] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 946.604912][T14187] device bond204 entered promiscuous mode [ 946.635229][T14187] device bond204 left promiscuous mode [ 947.199752][T14170] bond31: (slave bridge12): making interface the new active one [ 947.210527][T14170] bond31: (slave bridge12): Enslaving as an active interface with an up link [ 947.258154][T14215] bond204: (slave bridge172): Enslaving as a backup interface with a down link [ 947.350384][T14261] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 947.369902][T14174] device bond204 entered promiscuous mode [ 947.386423][T14174] device bridge172 entered promiscuous mode [ 947.410654][T14174] device bond204 left promiscuous mode [ 947.417810][T14174] device bridge172 left promiscuous mode [ 947.629684][T14264] bond204: (slave bridge173): Enslaving as a backup interface with a down link [ 947.700824][T14182] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:19:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc028660f, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:19:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0xffffffff, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:19:57 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:57 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0xfe, 0x0, 0x3f, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) close(0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c90806fe305f2b84ee736568b1f7200000000000000084000000020000f0a30000020000000000ff83343a91", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xffffff73}, &(0x7f0000000140)=0x8) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000240)="755804f0677bf5b13a3d2a337197c5fe5665f7bb4eb4acce6d81912bcd38aaf8c503bd2302d5e685ca6c79dd7bbd30da62603908224059626d79380987ee448161db2891e9c592c93888f139497b03125c14a3515630332afab7b29bd6a6314396db9ed476f3") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f00000001c0)="d4053aa60b1a38ed1e944b431316a1dc22d3913886a072fe39c5b2f8a0fd15552d57ccaeaaf7db1aee5d353732e6b7edfc05c8bd63120a1969a08a8895b2b69e59", 0x41, 0x4000884, 0x0, 0x0) 17:19:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:19:57 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0xfe, 0x0, 0x3f, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) close(0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c90806fe305f2b84ee736568b1f7200000000000000084000000020000f0a30000020000000000ff83343a91", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xffffff73}, &(0x7f0000000140)=0x8) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000240)="755804f0677bf5b13a3d2a337197c5fe5665f7bb4eb4acce6d81912bcd38aaf8c503bd2302d5e685ca6c79dd7bbd30da62603908224059626d79380987ee448161db2891e9c592c93888f139497b03125c14a3515630332afab7b29bd6a6314396db9ed476f3") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f00000001c0)="d4053aa60b1a38ed1e944b431316a1dc22d3913886a072fe39c5b2f8a0fd15552d57ccaeaaf7db1aee5d353732e6b7edfc05c8bd63120a1969a08a8895b2b69e59", 0x41, 0x4000884, 0x0, 0x0) 17:19:57 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1, 0x2, [{{0x2, 0x4e24, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @multicast1}}]}, 0x190) [ 950.282498][T14307] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:19:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) [ 950.357498][T14312] IPVS: ftp: loaded support on port[0] = 21 [ 950.481686][T14314] device bond205 entered promiscuous mode [ 950.590449][T14314] device bond205 left promiscuous mode [ 951.331544][T14333] bond205: (slave bridge174): Enslaving as a backup interface with a down link [ 951.380780][T14365] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 951.412379][T14307] device bond205 entered promiscuous mode [ 951.428885][T14307] device bridge174 entered promiscuous mode [ 951.450476][T14307] device bond205 left promiscuous mode [ 951.477264][T14307] device bridge174 left promiscuous mode 17:19:58 executing program 3: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x3a980, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x125540, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:19:58 executing program 4: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x3a980, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x125540, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 951.580393][T14318] IPVS: ftp: loaded support on port[0] = 21 [ 951.800714][T14368] bond205: (slave bridge175): Enslaving as a backup interface with a down link 17:19:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x2, 0x0, r1}}, 0x18}}, 0x0) 17:19:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 952.086021][T14419] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 952.198941][T14429] device bond206 entered promiscuous mode [ 952.256251][T14429] device bond206 left promiscuous mode [ 952.653846][T14446] bond206: (slave bridge176): Enslaving as a backup interface with a down link [ 952.700383][T14429] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 952.725641][T14419] device bond206 entered promiscuous mode [ 952.731394][T14419] device bridge176 entered promiscuous mode [ 952.754019][T14419] device bond206 left promiscuous mode [ 952.760040][T14419] device bridge176 left promiscuous mode [ 952.949060][T14446] bond206: (slave bridge177): Enslaving as a backup interface with a down link [ 952.994485][ T21] tipc: TX() has been purged, node left! 17:20:00 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0506617, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:20:00 executing program 3: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x3a980, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x125540, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:20:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x3, 0x0, r1}}, 0x18}}, 0x0) 17:20:00 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x0, [], [{0x1, 0x9, 0x400, 0x8, 0x2000000000, 0x1}, {0x80000000, 0xff, 0x7, 0x332b, 0x0, 0xffffffffffff9a56}], [[], [], []]}) 17:20:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x4, 0x0, r1}}, 0x18}}, 0x0) [ 953.988261][T14493] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 954.118700][T14502] IPVS: ftp: loaded support on port[0] = 21 [ 954.180029][T14495] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 954.250060][T14500] device bond207 entered promiscuous mode [ 954.276070][T14500] device bond207 left promiscuous mode [ 954.655584][T14499] device bond18 entered promiscuous mode [ 954.678924][T14499] device bond18 left promiscuous mode [ 954.852706][T14522] IPVS: ftp: loaded support on port[0] = 21 [ 955.048593][T14524] bond18: (slave bridge13): Enslaving as a backup interface with a down link [ 955.079853][T14523] bond31: (slave bridge178): Enslaving as a backup interface with a down link 17:20:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x14, &(0x7f0000000040)={r2}, 0x8) connect$packet(r0, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) [ 955.160173][T14533] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:02 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x800) write$binfmt_misc(r1, &(0x7f0000003b00)=ANY=[@ANYBLOB="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"], 0xba) r2 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x509001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvmmsg(r2, &(0x7f0000003980)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/70, 0x46}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/176, 0xb0}], 0x3, &(0x7f00000005c0)=""/155, 0x9b}, 0x80}, {{&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000740)=""/251, 0xfb}], 0x2, &(0x7f0000000880)=""/42, 0x2a}, 0x4}, {{&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/222, 0xde}, {&(0x7f0000000a40)=""/212, 0xd4}, {&(0x7f0000000b40)=""/14, 0xe}, {&(0x7f0000000b80)=""/220, 0xdc}, {&(0x7f0000000c80)=""/47, 0x2f}], 0x5, &(0x7f0000000d40)=""/150, 0x96}, 0x2}, {{&(0x7f0000000e00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000e80)=""/38, 0x26}, {&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000f00)=""/143, 0x8f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/216, 0xd8}, {&(0x7f00000020c0)=""/81, 0x51}, {&(0x7f0000002140)=""/22, 0x16}, {&(0x7f0000002180)=""/120, 0x78}], 0x8, &(0x7f0000002280)=""/200, 0xc8}, 0x6}, {{&(0x7f0000002380)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003580)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/27, 0x1b}, {&(0x7f0000003440)=""/6, 0x6}, {&(0x7f0000003480)=""/177, 0xb1}, {&(0x7f0000003540)=""/52, 0x34}], 0x5, &(0x7f0000003600)=""/168, 0xa8}, 0x5}, {{&(0x7f00000036c0)=@pppol2tpin6, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003740)=""/210, 0xd2}, {&(0x7f0000003840)=""/49, 0x31}, {&(0x7f0000003880)=""/43, 0x2b}], 0x3, &(0x7f0000003900)=""/67, 0x43}, 0x27a3d49f}], 0x6, 0x40010000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x200001, 0x0) pipe(&(0x7f0000000000)) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:20:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x6, 0x0, r1}}, 0x18}}, 0x0) 17:20:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4804, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @dev={[], 0x20}}, @IFLA_IFALIASn={0x4}]}, 0x58}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f00000031c0)=ANY=[@ANYBLOB="720208009e3f2ff2900fe55408d8a33438ad303895050b362feee6babf4e870d16f7eb9eccd741b4847942a425b7227201d99a7f00daea010e3e7c3b6baf5e5bd37ef40c798368fabca5ffffffff000000002a0cb2998b5c691479b01958c3eaa6d36af39f83ea63ec502bee35bb49343d0744757c3986ae44c37bac55ca37e4aeccfd3ec9c8a8ab01346a05927580baf4b3e9f765603f851e8df4fcac2f1d2997da40fd858dd101228c6a3317bda9311cd2f66b5fe1fb1044040631b2de3946abea8c1c699fa491dc7d829ebabf8de376ad3771c39bf76ba2ae273dbbe87b3609e4b900", @ANYRES16=r2, @ANYBLOB="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"], 0x770}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x10c, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xa0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x800}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, "ac75e0d078107f5d3c5c9535bad5e64e76"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, "9c31bd7a2991790c2ba07573e3b0"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x58, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x51, 0x1, "2a2cc5ca69cc105819dc12c15451105b11a728963638a0262f0f639b886f51135a9f6c16b4a7d218cebbaaba3f466a80ce60967fdbd39f4ad7b460787b501f22b96ea915de18e86ad40a042100"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x261991, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x17, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x00'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 17:20:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 955.521087][T14653] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 955.567249][T14651] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 955.581237][T14653] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 955.635652][T14655] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 955.693796][T14656] device bond208 entered promiscuous mode [ 955.788743][T14656] device bond208 left promiscuous mode 17:20:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0c89425, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:20:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) ioctl$int_in(r2, 0x541b, &(0x7f0000000300)) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:20:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x8, 0x0, r1}}, 0x18}}, 0x0) 17:20:03 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) connect$nfc_raw(r4, &(0x7f0000000280)={0x27, 0x1, 0x2, 0x7}, 0x10) bind$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800000}, [@netrom, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @netrom, @bcast]}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x208e24b) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b3e3", @ANYRES16=r6, @ANYRES32, @ANYBLOB="0900000024fd4e6347b0faa3de98fa5d6a4f06d88c889de923dba8503b4ca4c9d6cad610e72c5dc9b64bd30cf33600d1c52bfa7b1a80ce7feec2244540f854081a2859aba0d701f0d4542152ce7941e5560100481a2f63fc2fc507f6c4a9f04ab98e6c65e04e3caa448b3c5d26fdc79c9eb676ac5789f4bb82af4245f7f4968bac1871bf016f49be8d0b1f29cee02434405b2d4c0fd0082f3a8afadba194fa40b30ddf82148742a14fcc613b9602ea16845cf3d4a13b8bf8fbd9698423f0f15c21dba2310458b858f0a0fe809d677e5bffca99964089bcce2504a06d16b0ab00fb2ed0fb3b230ba16149ad6927452cef9ca1f1266a92f54c743f6da58d00"/265], 0x4}}, 0x54) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000180)={0x101}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x28, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc804) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x140c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x12ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&@$.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#/#-\\[)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x2f, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff01f7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "1f9c1d414585c80c4f2c6c08aff473d5897649d2c7afe48430f62eac"}, @ETHTOOL_A_BITSET_MASK={0xdd, 0x5, "cb90e2054d1671ed2893b9653ea322ce6769ae2611d196eafb91ba08a1c85266eb46a121ce61e56f4aa041c4e314f0e754122924c9bf38d7a1ce0413a0c60ce2595fdf70db116a83e4ccdc3174d2b2cc13dd5381ed1534ff201c67d5986b38c8be8e054c287e4715f0aacbf2adae2c38a81017f56616a2597fb85b6665fc136007b909712feaddf0dbb92aa040a52353e1e145653145ad4c7aaa8f6bfc17af84a03b7bd4d62854cc64464c29188d3c8957805e4d37c3d17e73737c41cf631e61e970e877fed92c011ef72841e3dd13c902657345029edfb473"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "984e43687524207e29f7a9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x46}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@#!\'&*{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x140c}}, 0x80) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x3a, &(0x7f0000000000)}, 0x0) [ 956.223770][T14706] IPVS: ftp: loaded support on port[0] = 21 17:20:03 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x8000000000004) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="0104d3b5548b3836ec041e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r6}, 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4) [ 956.470905][T14679] bond208: (slave bridge179): Enslaving as a backup interface with a down link [ 956.528548][T14651] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 956.555587][T14715] device bond208 entered promiscuous mode [ 956.586142][T14724] IPVS: ftp: loaded support on port[0] = 21 [ 956.592433][T14715] device bridge179 entered promiscuous mode [ 956.629897][T14715] device bond208 left promiscuous mode [ 956.655841][T14715] device bridge179 left promiscuous mode [ 957.156885][T14714] bond208: (slave bridge180): Enslaving as a backup interface with a down link [ 957.173510][T14710] IPVS: ftp: loaded support on port[0] = 21 17:20:04 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) connect$nfc_raw(r4, &(0x7f0000000280)={0x27, 0x1, 0x2, 0x7}, 0x10) bind$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800000}, [@netrom, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @netrom, @bcast]}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x208e24b) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b3e3", @ANYRES16=r6, @ANYRES32, @ANYBLOB="0900000024fd4e6347b0faa3de98fa5d6a4f06d88c889de923dba8503b4ca4c9d6cad610e72c5dc9b64bd30cf33600d1c52bfa7b1a80ce7feec2244540f854081a2859aba0d701f0d4542152ce7941e5560100481a2f63fc2fc507f6c4a9f04ab98e6c65e04e3caa448b3c5d26fdc79c9eb676ac5789f4bb82af4245f7f4968bac1871bf016f49be8d0b1f29cee02434405b2d4c0fd0082f3a8afadba194fa40b30ddf82148742a14fcc613b9602ea16845cf3d4a13b8bf8fbd9698423f0f15c21dba2310458b858f0a0fe809d677e5bffca99964089bcce2504a06d16b0ab00fb2ed0fb3b230ba16149ad6927452cef9ca1f1266a92f54c743f6da58d00"/265], 0x4}}, 0x54) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000180)={0x101}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x28, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc804) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x140c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x12ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&@$.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#/#-\\[)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x2f, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff01f7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "1f9c1d414585c80c4f2c6c08aff473d5897649d2c7afe48430f62eac"}, @ETHTOOL_A_BITSET_MASK={0xdd, 0x5, "cb90e2054d1671ed2893b9653ea322ce6769ae2611d196eafb91ba08a1c85266eb46a121ce61e56f4aa041c4e314f0e754122924c9bf38d7a1ce0413a0c60ce2595fdf70db116a83e4ccdc3174d2b2cc13dd5381ed1534ff201c67d5986b38c8be8e054c287e4715f0aacbf2adae2c38a81017f56616a2597fb85b6665fc136007b909712feaddf0dbb92aa040a52353e1e145653145ad4c7aaa8f6bfc17af84a03b7bd4d62854cc64464c29188d3c8957805e4d37c3d17e73737c41cf631e61e970e877fed92c011ef72841e3dd13c902657345029edfb473"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "984e43687524207e29f7a9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x46}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@#!\'&*{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x140c}}, 0x80) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x3a, &(0x7f0000000000)}, 0x0) [ 957.248023][T14731] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 17:20:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x9, 0x0, r1}}, 0x18}}, 0x0) [ 957.311179][T14731] device ipvlan2 entered promiscuous mode [ 957.392577][T14749] IPVS: ftp: loaded support on port[0] = 21 17:20:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:05 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x54, &(0x7f0000000140)=""/90, &(0x7f0000000240)=0x5a) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:20:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0xa, 0x0, r1}}, 0x18}}, 0x0) [ 958.249127][T14806] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 958.460514][T14813] device bond209 entered promiscuous mode 17:20:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x8, 0x0, r1}}, 0x18}}, 0x0) [ 958.534612][T14813] device bond209 left promiscuous mode [ 958.953361][T14826] bond209: (slave bridge181): Enslaving as a backup interface with a down link [ 959.030717][T14806] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:06 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 959.569353][ T21] tipc: TX() has been purged, node left! [ 959.593155][ T21] tipc: TX() has been purged, node left! 17:20:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}, 0x3}], 0x1, 0x2120, &(0x7f0000000100)={0x0, 0x989680}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f0000000080)="4500000038000535a4abd32b8018007a032482c137153e37080001800125d124000000b3e9d3dfd08300000000000000", 0x30}, {&(0x7f0000000100)="6a2a261bb49c3cfd4a93b0ed6022ad8aa9859d8787", 0x15}], 0x2}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4044) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000009000010800000000000000000c850000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 17:20:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0xc, 0x0, r1}}, 0x18}}, 0x0) 17:20:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:10 executing program 5: pipe(&(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000210", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r0}, 0x8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:20:10 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0c89425, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:20:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x3, 0x0, @broadcast}}) [ 963.107762][T14907] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0xe, 0x0, r1}}, 0x18}}, 0x0) [ 963.214125][T14941] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 963.268717][T14912] device bond210 entered promiscuous mode [ 963.281722][T14929] IPVS: ftp: loaded support on port[0] = 21 [ 963.341126][T14956] IPVS: ftp: loaded support on port[0] = 21 [ 963.353255][T14912] device bond210 left promiscuous mode [ 963.793272][T14954] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 963.921115][T14907] bond210: (slave bridge183): Enslaving as a backup interface with a down link [ 963.989743][T14969] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 964.011377][T14966] device bond210 entered promiscuous mode 17:20:11 executing program 5: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x88, 0x40, 0x200, 0x70bd27, 0x25dfdbff, {0xf}, [@typed={0x8, 0x64, 0x0, 0x0, @u32=0x3}, @generic="08d7740a6dc1b66dd82800d536681d14e1545d037cd86032b16f945c62e994b2398da677be2b4b50580bad961fbc7661ff80128b750df23b580c96ea9903d41892d6fb516437b06575aa38fc019036a472e47d237d196b6d3a509d47e3c6fbc7fc148483a8266979b90b1cb8"]}, 0x88}, 0x1, 0x0, 0x0, 0x4008801}, 0x80) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) [ 964.046861][T14966] device bridge183 entered promiscuous mode [ 964.077153][T14966] device bond210 left promiscuous mode [ 964.093286][T14966] device bridge183 left promiscuous mode 17:20:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 964.314135][T14949] IPVS: ftp: loaded support on port[0] = 21 17:20:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0xf, 0x0, r1}}, 0x18}}, 0x0) [ 964.434796][T14994] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 964.555796][T14995] device bond19 entered promiscuous mode [ 964.638882][T14995] device bond19 left promiscuous mode [ 964.916423][T15004] bond19: (slave bridge14): Enslaving as a backup interface with a down link 17:20:12 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="30889bbc722b5240914c269b3995d76dfdf26dcc44df6c1d44357f85354415fd350328e3edce5a133cad502063c2c71e926ce64e79926b236ccaf5aedfd64a62289ad61fe228a67621ff29f0e446435d7203dc793396b38e2b3a6931f0a20103d8dce8c44d03", 0x66}, {&(0x7f0000000240)="7c41db7bccdb38970a74194a2af78d05e889d2b8645c236e1aaa33d332a9b1c3da6d45477176e2e268767226d5462bc52d7d7bff816087146109d1ba766a376a81750c801d7e02", 0x47}, {&(0x7f00000002c0)="33e4e235daa219610ae1fefb6ee99061a7ef8ba22efce8d23457093b0eb5588e500ff80ce41db9a20f2fc754276e5c321c35967b97498c654da6123976c1a5a29b5de225b2320a3f6cd07e633c88600b1a535f867ae3457bc5c40bca1279139e70e72f2683638a557a0a61382ca25c78836adb6f3a9a1863225535ac95549b584dd67dc66b74ccd4a65e1c6236e518", 0x8f}, {&(0x7f0000000380)="ad60e725b9194a8d792eee2115a47ec135467a8b47acb1a0ecaa7b9c5a796ceb4951a643c13d01127399b970e1b35ccebac4a6771fa442b1b235f84d785fd11cc70357bfb7571d2e1a4ef1d5a7a850aa915ef4011ce51bdb672eec43e2e988fe9be239661e3a1365", 0x68}, {&(0x7f0000000400)="a0a63704231eae1a9cdf2bae0882aeb4a6f5cd0c5661fca148dd69ff51c5c4f636e6a4e52b98b10ca8b6f3efec09663297509f09f4", 0x35}], 0x5) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:20:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x10, 0x0, r1}}, 0x18}}, 0x0) 17:20:12 executing program 4: unshare(0x40000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6c, 0x0, 0x200, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "74f73082819c488bf84380fe66"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "475ccc707f"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44804) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="53e60000000000000000260000000e0001006e657464656d00efff0e0002006e657464657673696d00040000000000fa0c50c452329005e28e6598ad8700d6a1cf46b2d19cf5f9fce586b207000000a7dbc2bfa407b64723fbd65602de7abc6274a052831e8ccc0fb88c136ee78c895d27a2863dcfecf7665e07b35f2780808a9e6202998d5d8119807bcb07a249ffc2f69df96102224b0ad87ea0235db6253958c8042a7cdb0ad80edf573f1a1d68b07adc50316f79108adbc7ec0b191639b7bb83616feac3891bee9603d71324586800000041eb375853f594f9d4f46b3bab1dba90d07a81306031731a42248385f5e705ea0ba42b9af2705d69306b3d9d2429dee7675c9755e5b170d39e5e9713d9a0d141363e5d8ecf9ab82c7bda62fed3fc86c648202e578bcfc87662517ce69aab25a4be0d9c2ab3cde42bdfbf74c9504ee830123613c16ef1967e7288461ac23cb7984278a53c4a4bec9469e7054a5d0d49ebea1415737581fc5d4de127342476f808108c3f"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f80)) getsockname(r0, &(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000c00)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r4 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) [ 965.234766][T15107] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 965.338104][T15116] device bond211 entered promiscuous mode [ 965.368443][T15116] device bond211 left promiscuous mode [ 965.402955][T15155] IPVS: ftp: loaded support on port[0] = 21 [ 965.831107][T15107] bond211: (slave bridge184): Enslaving as a backup interface with a down link 17:20:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x60, 0x0, r1}}, 0x18}}, 0x0) [ 965.961230][T15107] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 965.996179][T15116] device bond211 entered promiscuous mode [ 966.053128][T15116] device bridge184 entered promiscuous mode [ 966.080551][T15116] device bond211 left promiscuous mode [ 966.102270][T15116] device bridge184 left promiscuous mode [ 966.203827][T15157] IPVS: ftp: loaded support on port[0] = 21 17:20:13 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x78, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '![\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x32}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x200008c4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ac1414aa080002"], 0x8c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x99a1, 0x20000000000036, 0x829, 0x9, 0x0, {0x3, 0x1000000, 0x1000000}, [@nested={0x2c7}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) [ 966.534274][T15203] netlink: 39285 bytes leftover after parsing attributes in process `syz-executor.5'. [ 966.563514][T15203] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 966.626180][T15107] bond211: (slave bridge185): Enslaving as a backup interface with a down link 17:20:17 executing program 3: unshare(0x60000000) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000004a80), 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100025bd7000ffdbdf25010000030000000000000000060002000100000008000c0003000000140008006272696467653000000006"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc891) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) close(r2) [ 970.865445][T15239] IPVS: ftp: loaded support on port[0] = 21 17:20:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x4, 0x0, @broadcast}}) 17:20:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:20:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 17:20:18 executing program 4: unshare(0x40000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6c, 0x0, 0x200, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "74f73082819c488bf84380fe66"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "475ccc707f"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44804) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f80)) getsockname(r0, &(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000c00)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r4 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) [ 971.199381][T15266] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 971.260095][T15270] IPVS: ftp: loaded support on port[0] = 21 [ 971.283576][T15279] IPVS: ftp: loaded support on port[0] = 21 [ 971.321050][T15273] device bond212 entered promiscuous mode 17:20:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x4, 0x5, 0x1a, @private0={0xfc, 0x0, [], 0x1}, @mcast2, 0x7, 0x80, 0x1, 0x800}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) [ 971.470780][T15273] device bond212 left promiscuous mode [ 971.661068][T15241] IPVS: ftp: loaded support on port[0] = 21 [ 971.991154][T15266] bond212: (slave bridge186): Enslaving as a backup interface with a down link 17:20:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x2, r1}}, 0x18}}, 0x0) [ 972.124587][T15306] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 972.198601][T15337] bond212: (slave bridge187): Enslaving as a backup interface with a down link [ 972.276025][T15336] bond212: (slave bridge188): Enslaving as a backup interface with a down link 17:20:19 executing program 5: r0 = socket(0x1, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20, 0x410}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x14, &(0x7f0000000040)={r4}, 0x8) ioctl$FIONCLEX(r3, 0x5450) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000340)=0x2c) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010400000000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="2533000000000000080023000900000008000a0066bc78898a2ffb38fd4807aeb20e844b93a1862a76b1aedc9e56b60334f50dbbb3abd564540a74bcef24bc7468df8f800b7dcf3c90738cf4e7ffc90ced1abb9a1a7f13bbe30428a9b280bc9de9310a3082339d6e3e3c081ef6982467508c0f00000000", @ANYRES32=r1, @ANYBLOB], 0x30}}, 0x0) [ 972.379114][T15304] IPVS: ftp: loaded support on port[0] = 21 17:20:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x3, r1}}, 0x18}}, 0x0) [ 972.619862][T15427] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 972.778915][T15438] device bond213 entered promiscuous mode 17:20:19 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000740)="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", 0x9f7}], 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xf112}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 972.862610][T15438] device bond213 left promiscuous mode 17:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x60, 0x7, r7}}, 0x20}}, 0x0) [ 973.214666][T15461] bond213: (slave bridge189): Enslaving as a backup interface with a down link [ 973.249388][T15487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 973.278591][ T982] tipc: TX() has been purged, node left! [ 973.293887][ T982] tipc: TX() has been purged, node left! [ 973.698395][T15427] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 973.711491][T15461] device bond213 entered promiscuous mode [ 973.718429][T15461] device bridge189 entered promiscuous mode [ 973.730094][T15461] device bond213 left promiscuous mode [ 973.736664][T15461] device bridge189 left promiscuous mode [ 974.052731][T15487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:20:24 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x5, 0x0, @broadcast}}) 17:20:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x4, r1}}, 0x18}}, 0x0) 17:20:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:24 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000001) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x3, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) socket$packet(0x11, 0x2, 0x300) 17:20:24 executing program 4: unshare(0x40000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6c, 0x0, 0x200, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "74f73082819c488bf84380fe66"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "475ccc707f"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44804) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f80)) getsockname(r0, &(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000c00)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r4 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) [ 977.255231][ T982] tipc: TX() has been purged, node left! [ 977.335183][T15585] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 977.357073][T15582] IPVS: ftp: loaded support on port[0] = 21 [ 977.363707][T15587] IPVS: ftp: loaded support on port[0] = 21 [ 977.384686][T15586] IPVS: ftp: loaded support on port[0] = 21 [ 977.456676][T15588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 977.669103][T15591] device bond32 entered promiscuous mode [ 977.714767][T15591] device bond32 left promiscuous mode [ 977.970808][T15594] device bond214 entered promiscuous mode [ 977.988837][T15594] device bond214 left promiscuous mode [ 978.159332][T15669] IPVS: ftp: loaded support on port[0] = 21 [ 978.310618][T15589] IPVS: ftp: loaded support on port[0] = 21 [ 978.371660][T15630] bond214: (slave bridge190): Enslaving as a backup interface with a down link [ 978.409343][T15585] bond32: (slave bridge13): Enslaving as a backup interface with a down link 17:20:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x6, r1}}, 0x18}}, 0x0) [ 978.449672][T15588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 978.478090][T15680] device bond214 entered promiscuous mode 17:20:25 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x4, 0x0, @broadcast}}) [ 978.559773][T15680] device bridge190 entered promiscuous mode [ 978.570345][T15680] device bond214 left promiscuous mode [ 978.603450][T15680] device bridge190 left promiscuous mode [ 978.626369][T15699] IPVS: ftp: loaded support on port[0] = 21 17:20:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x8, r1}}, 0x18}}, 0x0) 17:20:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x9, r1}}, 0x18}}, 0x0) [ 979.448647][T15767] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 979.545938][T15772] device bond215 entered promiscuous mode [ 979.627928][T15772] device bond215 left promiscuous mode 17:20:26 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@local}}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) [ 980.157553][T15774] bond215: (slave bridge191): Enslaving as a backup interface with a down link [ 980.192124][T15767] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 980.297480][T15772] device bond215 entered promiscuous mode [ 980.325767][T15772] device bridge191 entered promiscuous mode [ 980.369537][T15772] device bond215 left promiscuous mode [ 980.389836][T15772] device bridge191 left promiscuous mode [ 980.775547][T15767] bond215: (slave bridge192): Enslaving as a backup interface with a down link 17:20:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x6, 0x0, @broadcast}}) 17:20:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xa, r1}}, 0x18}}, 0x0) 17:20:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:32 executing program 4: unshare(0x40000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6c, 0x0, 0x200, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "74f73082819c488bf84380fe66"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "475ccc707f"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44804) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f80)) getsockname(r0, &(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000c00)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r4 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) 17:20:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x64010101}], 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000840)={r0, 0x7fff, 0x4, 0x2}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000240)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000880)={0x2, [0x1ff, 0x5]}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000200)={0x5, 0x8, 0x7, @multicast, 'batadv0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0x2, 0x80000001, 0x0, 0x30, 0x800, 0x22}, &(0x7f0000000000)=0x9c) [ 985.118254][ T982] tipc: TX() has been purged, node left! 17:20:32 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000400)={0x10, 0x0, {0x8001, @usage=0x9000000, 0x0, 0x200, 0x103, 0x723, 0x3, 0x1, 0x82, @usage=0x1, 0x7fff, 0x8, [0xffffffffffffff56, 0x1, 0x0, 0xfffffffffffffffe, 0x3f, 0x9]}, {0x5, @usage=0x101, r2, 0x5, 0x1f, 0x3, 0xd6d, 0x6, 0x44, @struct={0xfffffffd, 0x8}, 0x16d61fa6, 0x5, [0x4, 0x40, 0x3, 0x8000, 0xd2c, 0x400]}, {0x0, @struct={0x661, 0x30ed}, 0x0, 0xff, 0x101, 0xdba4, 0x3ff, 0x5, 0x4, @struct={0x80000001, 0x5c000000}, 0x981, 0x4, [0xffffffffaf1edc05, 0x0, 0x1, 0xffffffff, 0x7, 0x1]}, {0x0, 0x7, 0x4}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x8000, 0x1000, 0x0, 0x1}, 0x20) [ 985.231102][T15869] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xc, r1}}, 0x18}}, 0x0) [ 985.413606][T15875] device bond216 entered promiscuous mode [ 985.461115][T15875] device bond216 left promiscuous mode 17:20:32 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="857b4d86b69f1b73c42e9f0e22dfb8a986b084634b372c53b956ca4daf80267b408f1a7ff0a877deb0fc177d251aa9ab0789938db36b49ebfb557cfdabfee502e5c455931ba1e7e69e8e54"], 0x48}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r0 = socket(0xf, 0x80002, 0x10) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) close(0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}]}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x10, 0x7, 0x4, 0x54, {{0x18, 0x4, 0x2, 0xe, 0x60, 0x67, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x7, [0xfffffffe, 0x80000001]}, @ssrr={0x89, 0x1b, 0xe1, [@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, @local, @rand_addr=0x64010100, @broadcast, @loopback]}, @ssrr={0x89, 0x1b, 0x5e, [@private=0xa010102, @local, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @end, @noop, @noop]}}}}}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r7}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x1a0, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x50}, 0x6010) 17:20:33 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r1 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@x25={0x9, @remote}, &(0x7f0000000640)=0x80, 0x80000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) r3 = socket(0xf, 0x1, 0x3) r4 = socket(0xa, 0x1, 0x0) close(r4) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x14, &(0x7f0000000040)={r6}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x80, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x4806}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed625b60cc00f9cbca50a7fc14d3194496edf31125419ee59544b4c23890364e31fbab573a8164931108f36246529ce0b5fb5221f21faee6a1276283337f8fd6ba8f187a71c9af8f0b178fe12ad46d8d0566d8a4a351", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100001040000000000000000000000000ce348d37b897dd64f2156fe1d80b97540e3f6101a29d4a930db8f41e85818f30c6d22b98f8f3f650c2c109bbd6ef099da36ac6c868d0e5c7bae6de307166766ac27c745d8d3a5e0c891a744dc60e779eee1af81d1ed992de8", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x40}}, 0xffffff7f00000000) [ 985.991262][T15869] bond216: (slave bridge193): Enslaving as a backup interface with a down link [ 986.038385][T15934] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:33 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x1, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x9, 0x0, 0x0, 0x204, 0x0, 0x4, 0x6, 0x1]}, 0x5c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x5877, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8]}, 0x5c) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'xfrm0\x00', 0x30000}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, [], 0x33}, 0x2}, {0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xce21, 0xfffffffc, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8651, @empty, 0x7}, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffffffc]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 17:20:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xe, r1}}, 0x18}}, 0x0) [ 986.093341][T15869] device bond216 entered promiscuous mode [ 986.117864][T15869] device bridge193 entered promiscuous mode [ 986.137366][T15869] device bond216 left promiscuous mode [ 986.149245][T15869] device bridge193 left promiscuous mode [ 986.401167][T15875] bond216: (slave bridge194): Enslaving as a backup interface with a down link [ 986.422712][T15938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 986.444953][T15942] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 986.475697][T15938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 17:20:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$xdp(0x2c, 0x3, 0x0) gettid() syz_open_procfs$namespace(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000, 0x29}, 0x20) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x1}}, 0x10) write$binfmt_aout(r4, &(0x7f000001aa80)=ANY=[@ANYBLOB="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"], 0x9f3) 17:20:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x5865, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000076280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'geneve1\x00', 0x100}) 17:20:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xf, r1}}, 0x18}}, 0x0) 17:20:34 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x7, 0x0, @broadcast}}) 17:20:34 executing program 5: unshare(0x40000000) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") close(0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) [ 987.957809][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 988.005099][T15978] IPVS: ftp: loaded support on port[0] = 21 [ 988.019034][T15979] IPVS: ftp: loaded support on port[0] = 21 [ 988.036630][ T27] audit: type=1804 audit(1599931235.033:330): pid=15972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/186/cgroup.controllers" dev="sda1" ino=15962 res=1 errno=0 [ 988.050813][T15981] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 988.198625][T15990] device bond217 entered promiscuous mode [ 988.276765][T15990] device bond217 left promiscuous mode 17:20:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$xdp(0x2c, 0x3, 0x0) gettid() syz_open_procfs$namespace(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000, 0x29}, 0x20) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x1}}, 0x10) write$binfmt_aout(r4, &(0x7f000001aa80)=ANY=[@ANYBLOB="cc0002042c020000b60300004edc000079030000070000000000000000000000f4118c9061f85bb98a183b6c17a59a9c30d6a4bbd115047cd11dc4406a6129facf8d5f5f6801c3864b2faa08dc8b557bee010da31607824c73392dcd132ea52080e0f21f8e8a5ac29cb4dc7cd2a82a4e7377ca2e049e7eca1ae4e551cc3f685d1b3d0a13ed82b6509e0168f4224a0df3ad3be32e93e0f8caa75c977b87c5463381625d0336af195c31ed39ed98b27ffc29ac007c466b70f84b7f60db20f7a32359da25286311dd0918414858f93342f814d9a7eea120de63c6a8394b8a19aecadcd2a083523c43d76025750a86776a71c3f8270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d02ece2e8b856e1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076922bedeeb3c4dccc3549f0848392cd8df5699d1f180ee4281be7237e851022fc7f4a914ae85c0e4e2f3409f54dc24851c7746210fb2b9d1080f10e8cddd499db24409460a17e35031b7cfeb6eb1f8e6fedea3ffa1b20ce9daeeefc6e282325ce2685036848ec67bf5097c8869ca9af6bba6f7961264fea00c5521629a502f17569757732bee37157a9dd80837"], 0x9f3) [ 988.565930][T16005] bond217: (slave bridge195): Enslaving as a backup interface with a down link [ 988.616209][T16035] device geneve1 entered promiscuous mode 17:20:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x10, r1}}, 0x18}}, 0x0) [ 988.796149][T15993] IPVS: ftp: loaded support on port[0] = 21 [ 988.811325][ T27] audit: type=1804 audit(1599931235.803:331): pid=16046 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/187/cgroup.controllers" dev="sda1" ino=15856 res=1 errno=0 17:20:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'xfrm0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000240)={0x0, 0x8, 0x3ff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000380)={0x0, "a02d6917db9c44361b52ebb81eedd386"}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001380)={r4, 0x7fffffff, 0xffffffffffff5343, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="1400020020010000001100"/20], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7fff}}]}, 0x40}}, 0x0) [ 989.106864][T15986] IPVS: ftp: loaded support on port[0] = 21 [ 989.130485][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 989.156832][T16005] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x60, r1}}, 0x18}}, 0x0) 17:20:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000076280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'geneve1\x00', 0x100}) [ 989.263634][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:20:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 989.433286][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 989.500876][T16117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:20:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x5865, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 989.559607][T16123] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xf0, r1}}, 0x18}}, 0x0) [ 989.763654][T16131] device bond218 entered promiscuous mode [ 990.115146][T16131] device bond218 left promiscuous mode [ 990.241877][T16135] bond218: (slave bridge197): Enslaving as a backup interface with a down link [ 990.251655][T16162] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 990.320276][T16177] device bond33 entered promiscuous mode [ 990.328613][T16177] device bond33 left promiscuous mode [ 990.443579][T16182] bond33: (slave bridge16): Enslaving as a backup interface with a down link 17:20:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e6576650000040002"], 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f00000001c0)={'lo\x00', r2}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) [ 990.486944][T16123] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 990.549451][T16242] IPVS: ftp: loaded support on port[0] = 21 [ 990.776417][T16135] device bond218 entered promiscuous mode [ 990.800343][T16135] device bridge197 entered promiscuous mode [ 990.834399][T16135] device bond218 left promiscuous mode [ 990.839899][T16135] device bridge197 left promiscuous mode [ 991.057596][T16230] bond218: (slave bridge198): Enslaving as a backup interface with a down link 17:20:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x30, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 991.353730][T16242] IPVS: ftp: loaded support on port[0] = 21 [ 991.410423][ T27] audit: type=1804 audit(1599931238.403:332): pid=16294 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/190/cgroup.controllers" dev="sda1" ino=15866 res=1 errno=0 [ 991.557171][ T27] audit: type=1804 audit(1599931238.493:333): pid=16303 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/190/memory.events" dev="sda1" ino=15856 res=1 errno=0 [ 991.717867][ T27] audit: type=1800 audit(1599931238.493:334): pid=16303 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15856 res=0 errno=0 [ 991.817622][ T27] audit: type=1804 audit(1599931238.503:335): pid=16303 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/190/cgroup.controllers" dev="sda1" ino=15866 res=1 errno=0 [ 992.813689][ T2531] tipc: TX() has been purged, node left! 17:20:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x8, 0x0, @broadcast}}) 17:20:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x300, r1}}, 0x18}}, 0x0) 17:20:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:42 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e6576650000040002"], 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f00000001c0)={'lo\x00', r2}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 17:20:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x30, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 995.969530][T16346] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 996.033790][T16347] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 996.064742][T16350] IPVS: ftp: loaded support on port[0] = 21 [ 996.205343][T16406] IPVS: ftp: loaded support on port[0] = 21 [ 996.292790][T16346] bond219: (slave bridge199): Enslaving as a backup interface with an up link [ 996.382810][T16389] bond6: (slave bridge6): Enslaving as a backup interface with an up link [ 996.408391][ T27] audit: type=1804 audit(1599931243.403:336): pid=16349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/191/cgroup.controllers" dev="sda1" ino=16005 res=1 errno=0 [ 996.465005][T16360] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x600, r1}}, 0x18}}, 0x0) [ 996.559067][ T27] audit: type=1804 audit(1599931243.523:337): pid=16417 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/191/memory.events" dev="sda1" ino=16002 res=1 errno=0 17:20:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 996.808920][T16484] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 996.821117][ T27] audit: type=1800 audit(1599931243.523:338): pid=16417 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16002 res=0 errno=0 [ 996.926284][T16406] IPVS: ftp: loaded support on port[0] = 21 [ 997.055271][ T27] audit: type=1804 audit(1599931243.523:339): pid=16417 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/191/cgroup.controllers" dev="sda1" ino=16005 res=1 errno=0 17:20:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x30, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 997.114326][T16487] device bond7 entered promiscuous mode [ 997.150406][T16487] device bond7 left promiscuous mode [ 997.536303][ T27] audit: type=1804 audit(1599931244.533:340): pid=16538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/192/cgroup.controllers" dev="sda1" ino=16005 res=1 errno=0 [ 997.588331][T16489] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 997.634665][ T27] audit: type=1804 audit(1599931244.603:341): pid=16541 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/192/memory.events" dev="sda1" ino=16002 res=1 errno=0 [ 997.761743][T16490] bond7: (slave bridge7): Enslaving as a backup interface with a down link [ 997.802759][ T27] audit: type=1800 audit(1599931244.603:342): pid=16541 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16002 res=0 errno=0 [ 997.815833][T16504] device bond220 entered promiscuous mode [ 997.849258][ T27] audit: type=1804 audit(1599931244.613:343): pid=16541 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/192/cgroup.controllers" dev="sda1" ino=16005 res=1 errno=0 [ 997.895912][T16504] device bond220 left promiscuous mode 17:20:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 998.121136][T16521] bond31: (slave bridge201): Enslaving as a backup interface with a down link 17:20:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x7a4, r1}}, 0x18}}, 0x0) [ 998.164573][T16350] device geneve0 entered promiscuous mode [ 998.190362][T16527] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 998.238628][T16489] device bond220 entered promiscuous mode [ 998.275092][T16489] device bond220 left promiscuous mode [ 998.601525][T16583] bond220: (slave bridge202): Enslaving as a backup interface with a down link [ 998.619210][T16590] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 998.698089][T16593] device bond34 entered promiscuous mode [ 998.727906][T16593] device bond34 left promiscuous mode [ 998.844919][T16596] bond34: (slave bridge17): Enslaving as a backup interface with a down link [ 999.491563][ T2531] tipc: TX() has been purged, node left! [ 999.506856][ T2531] tipc: TX() has been purged, node left! 17:20:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0xe, 0x0, @broadcast}}) 17:20:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x54, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xec, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x84, 0x0, 0x310, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @local, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40400b0}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="440000042c00270d0000", @ANYRES32=r6, @ANYBLOB="0000000000000000080000000800010075333200180002000e000a"], 0x44}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 17:20:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x900, r1}}, 0x18}}, 0x0) 17:20:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1000.645015][T16665] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1000.771220][T16666] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1000.810510][T16695] IPVS: ftp: loaded support on port[0] = 21 [ 1001.004873][T16668] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1001.188528][T16667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1001.291381][T16689] device bond35 entered promiscuous mode [ 1001.323123][T16689] device bond35 left promiscuous mode [ 1001.628928][T16687] device bond8 entered promiscuous mode [ 1001.637740][T16687] device bond8 left promiscuous mode [ 1001.699018][T16709] IPVS: ftp: loaded support on port[0] = 21 [ 1001.860447][T16703] device bond221 entered promiscuous mode [ 1001.871038][T16703] device bond221 left promiscuous mode [ 1002.060951][T16710] bond35: (slave bridge18): Enslaving as a backup interface with a down link [ 1002.084650][T16712] bond221: (slave bridge203): Enslaving as a backup interface with a down link 17:20:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xa00, r1}}, 0x18}}, 0x0) [ 1002.105640][T16665] bond8: (slave bridge8): Enslaving as a backup interface with a down link [ 1002.119115][T16705] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1002.131120][T16789] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1002.158929][T16668] device bond221 entered promiscuous mode 17:20:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000001c0)=0xa2) recvmsg$can_j1939(r1, 0x0, 0x40002000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r5, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet6(0xa, 0x2, 0x693) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) [ 1002.183039][T16668] device bridge203 entered promiscuous mode [ 1002.208613][T16668] device bond221 left promiscuous mode [ 1002.220647][T16668] device bridge203 left promiscuous mode 17:20:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000f5ff007910300000000000a5000000ffffffff9500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x14, &(0x7f0000000040)={r2}, 0x8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 17:20:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xc00, r1}}, 0x18}}, 0x0) [ 1002.764904][T16835] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1002.991267][T16839] device bond36 entered promiscuous mode [ 1003.074253][T16839] device bond36 left promiscuous mode [ 1003.474453][T16841] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1003.639801][T16853] bond36: (slave bridge19): Enslaving as a backup interface with a down link [ 1003.708049][T16854] device bond222 entered promiscuous mode [ 1003.737999][T16854] device bond222 left promiscuous mode [ 1004.161198][T16865] bond222: (slave bridge204): Enslaving as a backup interface with a down link [ 1004.232089][T16925] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1004.246098][T16841] device bond222 entered promiscuous mode [ 1004.263130][T16841] device bridge204 entered promiscuous mode [ 1004.326334][T16841] device bond222 left promiscuous mode [ 1004.332321][T16841] device bridge204 left promiscuous mode [ 1004.661095][T16928] bond222: (slave bridge205): Enslaving as a backup interface with a down link [ 1005.800958][ T2531] tipc: TX() has been purged, node left! 17:20:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x10, 0x0, @broadcast}}) 17:20:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [], @local}}}, 0x0, 0x0, 0x0, 0x0, 0x326, 0x4}, 0x9c) close(0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000540)=ANY=[], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={0x0, 0xfffffffe, 0x0, 0x7fff, 0xfffb, 0x8, 0x7fff, 0x9, {r5, @in6={{0xa, 0x4e22, 0x200, @empty, 0x7}}, 0x0, 0x8000, 0x7, 0x5, 0x8}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000037c0)=@assoc_value={r5, 0x3000}, 0x8) r7 = accept4(r1, 0x0, &(0x7f0000001940), 0x80000) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000001980), &(0x7f00000019c0)=0x4) 17:20:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000001c0)=0xa2) recvmsg$can_j1939(r1, 0x0, 0x40002000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r5, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet6(0xa, 0x2, 0x693) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) 17:20:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000001c0)=0xa2) recvmsg$can_j1939(r1, 0x0, 0x40002000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r5, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet6(0xa, 0x2, 0x693) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) 17:20:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xe00, r1}}, 0x18}}, 0x0) 17:20:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1006.064720][T16960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1006.067453][T16959] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1006.133571][T16967] IPVS: ftp: loaded support on port[0] = 21 17:20:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xf00, r1}}, 0x18}}, 0x0) 17:20:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [], @local}}}, 0x0, 0x0, 0x0, 0x0, 0x326, 0x4}, 0x9c) close(0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000540)=ANY=[], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={0x0, 0xfffffffe, 0x0, 0x7fff, 0xfffb, 0x8, 0x7fff, 0x9, {r5, @in6={{0xa, 0x4e22, 0x200, @empty, 0x7}}, 0x0, 0x8000, 0x7, 0x5, 0x8}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000037c0)=@assoc_value={r5, 0x3000}, 0x8) r7 = accept4(r1, 0x0, &(0x7f0000001940), 0x80000) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000001980), &(0x7f00000019c0)=0x4) [ 1006.204372][T16965] device bond223 entered promiscuous mode [ 1006.277606][T16965] device bond223 left promiscuous mode [ 1006.926042][T17008] IPVS: ftp: loaded support on port[0] = 21 [ 1006.993388][T16959] bond31: (slave bridge206): Enslaving as a backup interface with a down link 17:20:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0xe, 0x0, @broadcast}}) [ 1007.239051][T17005] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x3f00, r1}}, 0x18}}, 0x0) 17:20:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003100270700000000000000000000000018000100147fa2e32075634862869c0e4158000100070001006374000004000280040006000000070000000000000000"], 0x2c}}, 0x0) 17:20:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1007.515954][T17062] IPVS: ftp: loaded support on port[0] = 21 [ 1007.592008][T17077] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1007.625298][T17076] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1007.811298][T17082] device bond224 entered promiscuous mode [ 1007.849081][T17082] device bond224 left promiscuous mode [ 1008.100462][T17083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1008.146829][T17100] bond224: (slave bridge207): Enslaving as a backup interface with a down link [ 1008.230414][T17082] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0xffff, 0x0, @broadcast}}) 17:20:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x4000, r1}}, 0x18}}, 0x0) 17:20:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 17:20:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:20:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffd0a, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff00000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c00120004000100806f6e64000000000c0002000800010004d830bb74b1c4b6a582cea7dc02f670838d47"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8902eee2aad7000000000100000006000a004e220000080008"], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r8, 0x711, 0x3, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082abd7000fcdbdf25060000000800340008002fcf40522aae86420f4d0b89c8f95a133f00"/50], 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x4000004) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de00e547}}, 0x20}}, 0x0) 17:20:57 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = socket(0xa, 0x1, 0x0) close(r1) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x14, &(0x7f0000000040)={r3}, 0x8) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='|', &(0x7f0000000200)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000001c0)={0x0, 'vlan0\x00', {0x4}, 0x81}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc0000001000010400ffffffee000000000000c8ddb658fecbd7a700", @ANYRES32=0x0, @ANYBLOB="00000000000000008c00128009000100766c616e000000007c00028006000100000000000c0002001400000000000000640003800c000100c03a0000ab0500000c00010040000000050000000c00010006000000000000800c00010000080000000000800c000100ff0f0000030000000c00010003000000010400000c000100ffffffff010000000c000100080000000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="105ab282f11fc773466fcbfe6da454206ec9e643b3f0814a1f7bd7c4e1ee0f0dea3390aa3f374d19e03f8a384cc8d1e5aaa43706c17b7082fb37e69ece2e665282550f32546567b44f8ed763be8c0fb6838cd435e43f079099659263eb754fe83ca7cbd0113513413750d4fca85500"/122], 0xbc}}, 0x0) [ 1010.356435][ T2531] tipc: TX() has been purged, node left! [ 1010.363460][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1010.374982][ T2531] tipc: TX() has been purged, node left! 17:20:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x5865, r1}}, 0x18}}, 0x0) [ 1010.407699][T17183] IPVS: ftp: loaded support on port[0] = 21 [ 1010.437808][ T27] audit: type=1804 audit(1599931257.433:344): pid=17186 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/197/cgroup.controllers" dev="sda1" ino=16003 res=1 errno=0 [ 1010.538318][T17176] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1010.694295][T17181] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 17:20:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1010.737704][T17182] device bond225 entered promiscuous mode [ 1010.774682][T17182] device bond225 left promiscuous mode [ 1011.053903][ T27] audit: type=1804 audit(1599931258.053:345): pid=17237 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/198/cgroup.controllers" dev="sda1" ino=16003 res=1 errno=0 [ 1011.147615][T17189] bond225: (slave bridge209): Enslaving as a backup interface with a down link [ 1011.165802][T17231] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1011.180509][T17176] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:20:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1011.196800][T17188] IPVS: ftp: loaded support on port[0] = 21 [ 1011.214740][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:20:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x6000, r1}}, 0x18}}, 0x0) [ 1011.423498][T17182] device bond225 entered promiscuous mode [ 1011.429262][T17182] device bridge209 entered promiscuous mode [ 1011.497366][ T27] audit: type=1804 audit(1599931258.493:346): pid=17262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir801870166/syzkaller.rmb7wk/1036/cgroup.controllers" dev="sda1" ino=16056 res=1 errno=0 [ 1011.529304][T17182] device bond225 left promiscuous mode [ 1011.550214][T17182] device bridge209 left promiscuous mode 17:20:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000009060101008000001000000000ff000005000100060000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x1, 0x0) close(r3) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x14, &(0x7f0000000040)={r5}, 0x8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 17:20:58 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) shutdown(r1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x8) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180)='mptcp_pm\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket(0x11, 0x5, 0x4) bind(r5, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r6}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000124f26d437827befd30e3536bb457727e9447358d2505522b8a7c54faace66dc330e224fccd45719f33df1768d021333385603f1a0e763847a9c20ca9e1f093b734b76e30c9ca9422ed94aaa9fda12218016c625c634109843a882d9f76f05928e1f88c6bd3e53d747e2ea8e13867d4d8be598823f525af7eb2ded5cff08982dfd0f53e75ab31e611be9ad3a7c2885092a1f0c5a459e2f6c45f362b4b4a4f0273d951488af495ebe79d897f9", @ANYRES16=r3, @ANYBLOB="00032abd7000ffdbdf250300000008000200040000004c000180080003007f00000108000300e000000108000700", @ANYRES32=r6, @ANYBLOB="14000400fe800000000000000000000000000030080006000100000014000400fe80000000000000000000000000001908000300070000000800030000000000080003000500000008000200030000000800030005000000"], 0x90}}, 0x1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) [ 1011.971484][T17189] bond225: (slave bridge210): Enslaving as a backup interface with a down link [ 1011.996659][T17284] IPVS: ftp: loaded support on port[0] = 21 [ 1012.748562][ T27] audit: type=1804 audit(1599931259.743:347): pid=17285 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/199/cgroup.controllers" dev="sda1" ino=15908 res=1 errno=0 [ 1012.867625][ T27] audit: type=1804 audit(1599931259.743:348): pid=17287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/199/cgroup.controllers" dev="sda1" ino=15908 res=1 errno=0 [ 1012.933575][T17284] IPVS: ftp: loaded support on port[0] = 21 [ 1013.244514][ T27] audit: type=1804 audit(1599931260.243:349): pid=17285 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir411198073/syzkaller.zDSWJ5/199/cgroup.controllers" dev="sda1" ino=15908 res=1 errno=0 17:21:02 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:21:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x6558, r1}}, 0x18}}, 0x0) 17:21:02 executing program 5: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000540)={0x1, 0x6, @status={[0x0, 0x0, 0x9, 0x7, 0x1, 0x3]}, [0xffff, 0x908, 0x0, 0x4, 0x1, 0x5, 0x8, 0x48, 0x1c00000, 0xfffffffffffffffb, 0x0, 0x401, 0x1, 0x7, 0x4, 0x20, 0x73e2, 0x376, 0x4, 0x5, 0x7, 0x6, 0x8, 0x7, 0x200, 0x1, 0x4, 0x0, 0xff, 0x5, 0x1, 0x0, 0x1ff, 0x0, 0x9, 0xff, 0xeb, 0x2b, 0x3, 0x1, 0xf8c, 0x20, 0x0, 0x8000, 0x9, 0x80, 0x7, 0x3ff, 0x20461a3d, 0x4, 0x8, 0x80000001, 0x0, 0xc8, 0x0, 0x40, 0x7, 0x1, 0x4b538, 0x4, 0xff, 0x7ff, 0x8, 0xd8]}) r0 = socket$netlink(0x10, 0x3, 0x0) gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xc7) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2674, 0x10494}}, 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x100000001, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff, 0x0, [0x0, 0x0, 0x0, 0xfeffffff]}) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="6076be3098da04381d4c79370bfd5f7d99fe0033d35cff02a7cc5a169910279ac4fcbba07c6e0ceda0d381e9ec62292013f2696707eed28941d2a9285fa2", 0x3e}], 0x1}, 0x40080) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000100), 0x0) 17:21:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1015.766416][ T2531] tipc: TX() has been purged, node left! [ 1015.768579][T17368] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1015.820327][ T2531] tipc: TX() has been purged, node left! [ 1015.830567][T17392] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1015.863104][T17410] IPVS: ftp: loaded support on port[0] = 21 [ 1015.924094][T17368] device bond226 entered promiscuous mode 17:21:03 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0xffff, 0x0, @broadcast}}) [ 1015.984169][T17368] device bond226 left promiscuous mode [ 1016.095143][T17454] IPVS: ftp: loaded support on port[0] = 21 [ 1016.377823][T17380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:21:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x8100, r1}}, 0x18}}, 0x0) [ 1016.488266][T17399] bond226: (slave bridge211): Enslaving as a backup interface with a down link [ 1016.554065][T17425] device bond37 entered promiscuous mode [ 1016.596854][T17425] device bond37 left promiscuous mode [ 1016.660481][T17452] IPVS: ftp: loaded support on port[0] = 21 [ 1016.867199][T17426] device bond20 entered promiscuous mode [ 1016.887860][T17426] device bond20 left promiscuous mode [ 1017.020031][T17450] bond37: (slave bridge20): Enslaving as a backup interface with a down link [ 1017.037859][T17392] bond20: (slave bridge15): Enslaving as a backup interface with a down link [ 1017.054130][T17506] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1017.075682][T17399] device bond226 entered promiscuous mode [ 1017.082967][T17399] device bridge211 entered promiscuous mode [ 1017.090733][T17399] device bond226 left promiscuous mode [ 1017.098958][T17399] device bridge211 left promiscuous mode 17:21:04 executing program 3: sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c044) r1 = socket$inet6(0xa, 0x4, 0x9) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711}, 0xf) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="00009a715e1a1266794e69b1c6d434f8efe99227f9891a15ace18d9b26ad43ca90374886f8647c51149d62a415d52f5fa63a7ac62316c2055231f14147d5fa0b08a1be729a91d50cd790392aa29cda4187ac50ed66d52aa0daf6d3559175dfe58ce1a1987170011c33ca84ff8bc64b30d91a3ddf546270b881de3c4b3a7820435fc068e9c882d37e4dffea6dcd0bb19d576236e19c2bfa35d97171c994de9f0775aa423aefde63c5c7936706e9d833ac8e6d2fad2529c3ab712506f0ff3bb8e271e645426386a71a2c", @ANYRES16=0x0, @ANYBLOB="20002cbd70000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) getsockname$ax25(0xffffffffffffffff, 0x0, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0xffffffffffffff87) [ 1017.206350][T17508] bond226: (slave bridge212): Enslaving as a backup interface with a down link 17:21:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x1c2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @window={0x3, 0x8}]}}}}}}}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f00000013c0), 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0xb0}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={@remote={[], 0x0}, 0xe, 'ip6gretap0\x00'}) r5 = socket(0xa, 0x1, 0x0) close(r5) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x14, &(0x7f0000000040)={r7}, 0x8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000380)=0x8, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x831}, {0xc, 0x90, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x10b8}, {0xc, 0x90, 0x2}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x40008d0) 17:21:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xa407, r1}}, 0x18}}, 0x0) 17:21:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1017.497516][T17564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1017.519775][T17565] IPVS: ftp: loaded support on port[0] = 21 [ 1017.630622][T17572] device bond227 entered promiscuous mode [ 1017.806766][T17572] device bond227 left promiscuous mode [ 1018.258604][T17611] IPVS: ftp: loaded support on port[0] = 21 [ 1018.284838][T17610] bond31: (slave bridge213): Enslaving as a backup interface with a down link [ 1018.353517][T17564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1018.376714][T17600] device bond227 entered promiscuous mode [ 1018.422602][T17600] device bond227 left promiscuous mode [ 1018.815065][T17628] bond227: (slave bridge214): Enslaving as a backup interface with a down link 17:21:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x2, @broadcast}}) 17:21:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x1c2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @window={0x3, 0x8}]}}}}}}}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f00000013c0), 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0xb0}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={@remote={[], 0x0}, 0xe, 'ip6gretap0\x00'}) r5 = socket(0xa, 0x1, 0x0) close(r5) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x14, &(0x7f0000000040)={r7}, 0x8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000380)=0x8, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x831}, {0xc, 0x90, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x10b8}, {0xc, 0x90, 0x2}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x40008d0) 17:21:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xf000, r1}}, 0x18}}, 0x0) 17:21:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) accept4(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80, 0x800) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x14, &(0x7f0000000040)={r2}, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000310001000000000000000000000000003c000100380001000c000100736b626564697400240003"], 0x1}}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1023.199602][T17681] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:21:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 1023.321012][T17685] IPVS: ftp: loaded support on port[0] = 21 [ 1023.392214][T17679] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1023.409178][T17679] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 1023.429524][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1023.445557][T17722] IPVS: ftp: loaded support on port[0] = 21 [ 1023.469977][T17686] device bond228 entered promiscuous mode [ 1023.516868][T17686] device bond228 left promiscuous mode [ 1023.936140][T17716] bond228: (slave bridge215): Enslaving as a backup interface with a down link [ 1023.957201][T17728] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1023.967105][T17728] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 1023.977487][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:21:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0xffff, r1}}, 0x18}}, 0x0) 17:21:11 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 1024.065152][T17708] IPVS: ftp: loaded support on port[0] = 21 [ 1024.137144][T17750] IPVS: ftp: loaded support on port[0] = 21 [ 1024.421649][T17716] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1025.025188][ T2531] tipc: TX() has been purged, node left! [ 1025.034994][ T2531] tipc: TX() has been purged, node left! 17:21:12 executing program 3: sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c044) r1 = socket$inet6(0xa, 0x4, 0x9) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711}, 0xf) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="00009a715e1a1266794e69b1c6d434f8efe99227f9891a15ace18d9b26ad43ca90374886f8647c51149d62a415d52f5fa63a7ac62316c2055231f14147d5fa0b08a1be729a91d50cd790392aa29cda4187ac50ed66d52aa0daf6d3559175dfe58ce1a1987170011c33ca84ff8bc64b30d91a3ddf546270b881de3c4b3a7820435fc068e9c882d37e4dffea6dcd0bb19d576236e19c2bfa35d97171c994de9f0775aa423aefde63c5c7936706e9d833ac8e6d2fad2529c3ab712506f0ff3bb8e271e645426386a71a2c", @ANYRES16=0x0, @ANYBLOB="20002cbd70000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) getsockname$ax25(0xffffffffffffffff, 0x0, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0xffffffffffffff87) 17:21:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0xf}}, 0x0) 17:21:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x3, @broadcast}}) [ 1025.070556][ T2531] tipc: TX() has been purged, node left! [ 1025.169872][T17855] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:21:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x10}}, 0x0) [ 1025.258259][T17858] IPVS: ftp: loaded support on port[0] = 21 [ 1025.306697][T17859] device bond229 entered promiscuous mode [ 1025.321013][T17862] IPVS: ftp: loaded support on port[0] = 21 17:21:12 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c044) r1 = socket$inet6(0xa, 0x4, 0x9) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711}, 0xf) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="00009a715e1a1266794e69b1c6d434f8efe99227f9891a15ace18d9b26ad43ca90374886f8647c51149d62a415d52f5fa63a7ac62316c2055231f14147d5fa0b08a1be729a91d50cd790392aa29cda4187ac50ed66d52aa0daf6d3559175dfe58ce1a1987170011c33ca84ff8bc64b30d91a3ddf546270b881de3c4b3a7820435fc068e9c882d37e4dffea6dcd0bb19d576236e19c2bfa35d97171c994de9f0775aa423aefde63c5c7936706e9d833ac8e6d2fad2529c3ab712506f0ff3bb8e271e645426386a71a2c", @ANYRES16=0x0, @ANYBLOB="20002cbd70000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) getsockname$ax25(0xffffffffffffffff, 0x0, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0xffffffffffffff87) [ 1025.400666][T17859] device bond229 left promiscuous mode 17:21:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x11}}, 0x0) [ 1025.635503][T17909] IPVS: ftp: loaded support on port[0] = 21 17:21:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x17}}, 0x0) 17:21:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0xc0}}, 0x0) [ 1026.187222][T17884] bond229: (slave bridge216): Enslaving as a backup interface with a down link [ 1026.228515][T17918] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1026.271642][T17855] device bond229 entered promiscuous mode [ 1026.293439][T17855] device bridge216 entered promiscuous mode [ 1026.335447][T17855] device bond229 left promiscuous mode [ 1026.358024][T17855] device bridge216 left promiscuous mode [ 1026.470566][T17881] IPVS: ftp: loaded support on port[0] = 21 [ 1026.797966][T17919] bond229: (slave bridge217): Enslaving as a backup interface with a down link 17:21:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0xec0}}, 0x0) [ 1029.452364][T18042] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1029.512289][T18044] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1029.569808][T18042] device bond230 entered promiscuous mode [ 1029.657032][T18042] device bond230 left promiscuous mode [ 1030.059579][T18069] bond230: (slave bridge218): Enslaving as a backup interface with a down link [ 1030.088413][T18044] device bond21 entered promiscuous mode [ 1030.128273][T18044] device bond21 left promiscuous mode [ 1030.428958][T18080] bond21: (slave bridge16): Enslaving as a backup interface with a down link [ 1030.450856][T18125] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1030.470767][T18126] bond230: (slave bridge219): Enslaving as a backup interface with a down link [ 1030.486883][T18069] device bond230 entered promiscuous mode [ 1030.497510][T18069] device bridge218 entered promiscuous mode [ 1030.511004][T18069] device bridge219 entered promiscuous mode [ 1030.539508][T18069] device bond230 left promiscuous mode [ 1030.549986][T18069] device bridge218 left promiscuous mode [ 1030.563178][T18069] device bridge219 left promiscuous mode 17:21:18 executing program 3: unshare(0x2a040e00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000280)=0x54) 17:21:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x4, @broadcast}}) 17:21:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x33fe0}}, 0x0) 17:21:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:18 executing program 5: socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x7, @loopback, 0x9}, {0xa, 0x4e22, 0x8, @ipv4={[], [], @private=0xa010100}, 0x6}, 0x3, [0x1ff, 0x400, 0x4f57, 0x2, 0x0, 0x6, 0xff, 0x7]}, 0x5c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000013bc056877d49b37e4b800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e20, 0x4e90, @dev={0xfe, 0x80, [], 0xa}, 0x80000000}, {0xa, 0x4e22, 0x7, @private0, 0x2}, 0x9be, [0x6, 0x3f, 0x1, 0x6103, 0x7ff, 0x10000, 0x4, 0x3]}, 0x5c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 1031.569471][T18149] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1031.623766][T18153] IPVS: ftp: loaded support on port[0] = 21 [ 1031.762557][T18152] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1031.857759][T18156] device bond22 entered promiscuous mode [ 1031.883925][T18156] device bond22 left promiscuous mode 17:21:19 executing program 5: socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x7, @loopback, 0x9}, {0xa, 0x4e22, 0x8, @ipv4={[], [], @private=0xa010100}, 0x6}, 0x3, [0x1ff, 0x400, 0x4f57, 0x2, 0x0, 0x6, 0xff, 0x7]}, 0x5c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000013bc056877d49b37e4b800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e20, 0x4e90, @dev={0xfe, 0x80, [], 0xa}, 0x80000000}, {0xa, 0x4e22, 0x7, @private0, 0x2}, 0x9be, [0x6, 0x3f, 0x1, 0x6103, 0x7ff, 0x10000, 0x4, 0x3]}, 0x5c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 1032.379392][T18159] device bond231 entered promiscuous mode [ 1032.397304][T18157] IPVS: ftp: loaded support on port[0] = 21 [ 1032.409200][T18159] device bond231 left promiscuous mode 17:21:19 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000030003b05000000000000000000000000380001000c000100090001000100000000000000200002801c00020000000000000000000000000000000000000000000100000004000600000007000000000000000000000008000100000000000000"], 0x4c}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x4, @empty, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x7, 0x72}, 0x2c) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @empty}}) [ 1032.866793][T18174] bond22: (slave bridge17): Enslaving as a backup interface with a down link [ 1032.888425][T18190] bond231: (slave bridge220): Enslaving as a backup interface with a down link 17:21:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x200000d8}}, 0x0) [ 1032.916925][T18250] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:21:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x7ffff000}}, 0x0) 17:21:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1032.959429][T18152] device bond231 entered promiscuous mode [ 1032.997965][T18152] device bridge220 entered promiscuous mode [ 1033.026685][T18152] device bond231 left promiscuous mode [ 1033.041575][T18152] device bridge220 left promiscuous mode 17:21:20 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2000}, 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @null, @remote, @null, @default, @netrom, @netrom, @rose]}, &(0x7f0000000040)=0x48, 0x81000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) close(r0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60) close(r5) 17:21:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0xfffffdef}}, 0x0) [ 1033.356154][T18256] bond231: (slave bridge221): Enslaving as a backup interface with a down link [ 1033.375138][T18268] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1033.398606][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1033.418662][T18286] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1033.462592][ T2531] tipc: TX() has been purged, node left! [ 1033.469204][ T2531] tipc: TX() has been purged, node left! [ 1033.518463][T18289] device bond23 entered promiscuous mode [ 1033.536927][T18289] device bond23 left promiscuous mode [ 1033.689606][T18292] bond23: (slave bridge18): Enslaving as a backup interface with a down link 17:21:23 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x5, @broadcast}}) 17:21:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x2}, 0x0) 17:21:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="7b1a55a97b6a240008d5a6671a000000000000ff7fffe332bd09b1a2cc2cb9817bea1e702dab56fc8f6935d2ad8201698b5662c206b7dfcc78e385bc6b18fbd6a866c09fa13c42f8359a79fe7138699744917a14f05a9a0615aca21c0766a89944f6d468"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1000}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xc}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2f}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1ff}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x35}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x1) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0xa000000, 0x0}}], 0x300, 0x0) 17:21:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b414fe00000000000002006fab000c7d0000200000851000000200000085000000050000009500"/48], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x29, 0x5, 0x6, 0x20, 0x47, 0xa9, 0xe4, 0x1, 0x8, 0x5, 0x1, 0x5, 0x3, 0x9}, 0xe) 17:21:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) recvmmsg(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000a40)=ANY=[@ANYBLOB="010000e8826a54d3fd20", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000009c0)={0x0, 0x6fc, 0x1, [0x0]}, &(0x7f0000000a00)=0xa) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x3ffd}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x3f00000000000000) sendfile(r4, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvmsg$can_j1939(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000580)=""/142, 0x8e}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/217, 0xd9}], 0x9, &(0x7f0000000840)=""/125, 0x7d}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x8, 0x2, @mcast1, @mcast2, 0x8000, 0x40, 0x406, 0x5}}) [ 1036.482785][T18360] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1036.539285][T18364] IPVS: ftp: loaded support on port[0] = 21 [ 1036.578899][T18373] device bond232 entered promiscuous mode 17:21:23 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x4, @broadcast}}) 17:21:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x3}, 0x0) [ 1036.662271][T18373] device bond232 left promiscuous mode 17:21:23 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x31688, 0x4000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) r3 = socket(0x2, 0x5, 0x0) setsockopt$inet_int(r3, 0x84, 0x7f, 0x0, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000000040)) [ 1036.816176][T18408] IPVS: ftp: loaded support on port[0] = 21 [ 1037.010949][T18413] IPVS: ftp: loaded support on port[0] = 21 [ 1037.338264][T18360] bond232: (slave bridge222): Enslaving as a backup interface with a down link [ 1037.406421][T18420] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1037.436087][T18419] device bond232 entered promiscuous mode 17:21:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="7b1a55a97b6a240008d5a6671a000000000000ff7fffe332bd09b1a2cc2cb9817bea1e702dab56fc8f6935d2ad8201698b5662c206b7dfcc78e385bc6b18fbd6a866c09fa13c42f8359a79fe7138699744917a14f05a9a0615aca21c0766a89944f6d468"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1000}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xc}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2f}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1ff}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x35}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x1) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0xa000000, 0x0}}], 0x300, 0x0) [ 1037.459931][T18419] device bridge222 entered promiscuous mode [ 1037.481183][T18419] device bond232 left promiscuous mode [ 1037.491034][T18419] device bridge222 left promiscuous mode [ 1037.677600][T18402] IPVS: ftp: loaded support on port[0] = 21 [ 1037.937772][T18425] bond232: (slave bridge223): Enslaving as a backup interface with a down link [ 1037.956554][T18414] IPVS: ftp: loaded support on port[0] = 21 17:21:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x8}, 0x0) 17:21:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x300}, 0x0) 17:21:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x6, @broadcast}}) 17:21:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0xffffff1f}, 0x0) 17:21:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@TCA_CHAIN={0x8, 0xb, 0xffff0001}]}, 0x2c}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1c0240}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xb4, 0x464, 0x2, 0x70bd2b, 0x25dfdbfb, "6e7c0645490cb0a0b6ae8c29b152204c830ee85d94416bd2992794d1b3ec29b36b526c91d53fddd6e0815e5a54bcbee3b524a2d0d76bae688e99ba30a67946aa3a4805a95cc1a57d2e82f5aa2788b11d19f786d713d7caa548d15bc15516964b491a4b96562d2a5641dd92eda8142854b25078dce1c1049e28dad7f34ee4d87962d42943ccd7c3d3e2f206f7a17e780d74e77a1d165b6b02b423c43fa8bd8c04e1", ["", "", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="d58a235a86fd766350c0b386b2c28caeb2b5c88ae25adfed790a567deba3fab3d4222d01265eb4dad0ffdb6bb553845962310995811f64b18c4ee94a0c2da0", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8}}}, &(0x7f00000001c0)=0x84) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 17:21:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x2}, 0x0) [ 1043.301638][T18599] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:21:30 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x31688, 0x4000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) r3 = socket(0x2, 0x5, 0x0) setsockopt$inet_int(r3, 0x84, 0x7f, 0x0, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000000040)) [ 1043.386933][T18601] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1043.426285][T18623] IPVS: ftp: loaded support on port[0] = 21 [ 1043.554534][T18617] device bond24 entered promiscuous mode [ 1043.586247][T18617] device bond24 left promiscuous mode [ 1043.628355][T18685] IPVS: ftp: loaded support on port[0] = 21 [ 1043.975598][T18631] device bond233 entered promiscuous mode [ 1043.985993][T18631] device bond233 left promiscuous mode [ 1044.201321][T18641] IPVS: ftp: loaded support on port[0] = 21 [ 1044.209546][T18625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1044.251569][T18655] bond233: (slave bridge224): Enslaving as a backup interface with a down link [ 1044.297198][T18599] bond24: (slave bridge19): Enslaving as a backup interface with a down link 17:21:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x8, 0x7}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5c}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1a4}, {0x6, 0x11, 0xe}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000980)={0x0, 0x97d}, &(0x7f00000009c0)=0x8) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000a00)={0x1d, 0x0, 0x0, {0x1, 0x1}, 0x1}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000a40)={{0xa02f82b06ce76e9b, 0x0, @descriptor="7634a568217deba9"}}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xbc, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8004}, 0x40004) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000c80)={r3, @in6={{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0xfffffff7}}, [0x10000, 0x93, 0x3, 0x7fffffff, 0x2, 0x2, 0x8, 0x80000000, 0x9, 0x3, 0x1, 0x3, 0x0, 0x12, 0x5]}, &(0x7f0000000d80)=0x100) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000e80)={'ip6gre0\x00', &(0x7f0000000e00)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x81, 0x200, 0x0, @private1, @private0, 0x10, 0x1, 0x30, 0x53e}}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0}, &(0x7f0000000f00)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f40)={{{@in=@loopback, @in=@local, 0x4e24, 0x8, 0x4e24, 0x9, 0xa, 0x80, 0xc21b5dd09cbf5614, 0x67, r7, r8}, {0x8000, 0x1, 0x80000000, 0x6, 0x100000000, 0x7fff, 0xc5, 0x5}, {0x6904, 0x8000, 0xffffffffffffffc1, 0x80000000}, 0x2, 0x6e6bb3, 0x2, 0x1, 0x2, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in=@multicast2, 0x0, 0x4, 0x1, 0x6, 0x6, 0x6, 0x8}}, 0xe8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001040)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000001080)) write$binfmt_misc(r5, &(0x7f00000010c0)={'syz0', "564bf7038ce1c53358506935d248948401e760a5586a31bf4c57074ee038d15f462b522ac12da2c261a2e00bd9b5eb94b382f34c7d0f466dd2"}, 0x3d) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000001100)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000001140)=0xffff, 0x4) [ 1044.347826][T18601] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1044.369053][T18700] device bond233 entered promiscuous mode [ 1044.384554][T18700] device bridge224 entered promiscuous mode 17:21:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) r1 = socket(0xa, 0x1, 0x0) close(r1) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x14, &(0x7f0000000040)={r3}, 0x8) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x2c, @loopback, 0x4e23, 0x4, 'lblc\x00', 0x11, 0x3, 0x67}, 0x2c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) syz_emit_ethernet(0x1ce, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) write(r0, &(0x7f00000000c0)="8439757c9fa8c37385551aa356d4758df57d07e5066ab5c8", 0x18) [ 1044.441417][T18700] device bond233 left promiscuous mode [ 1044.466906][T18700] device bridge224 left promiscuous mode [ 1044.559941][T18734] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 17:21:31 executing program 3: r0 = socket(0xa, 0x0, 0x8001) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002b0000000000"], 0x3c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="fc7ef53fe9413b9cbc410cd1ce85d36f221d7488e67309d2018b6533e8b6528527b5c69e5b863fca52de773d184d626cafe86f5054136c666b691e3bed523a63312be4691185ed1ef6cd0a780b6d8ff91d9e09ac025fbd02fcc0bfde17ecedfbb035bed28db12e8c7d34c6a9f71ba309899d0e061564d90a8f4dea9e90cce7fe9dd6dcd5299e6e1534f216ea9e236e2b92bbefa7f5f3d07a29e5f283ee64a678597033cedf23ad884fdb51e3b9b3aff1f5764a8b2f537b4999c4244f27ebafdccc22382d205c4c7dcadce63a82a8145314ddc30eb0728b47b03c2c1394b6f970103e1846b45acabac9b4a2ad7b9bc013c86d7d6967", 0xf5, 0x8085, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 1044.805570][T18701] bond233: (slave bridge225): Enslaving as a backup interface with a down link [ 1044.841218][T18702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:21:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x3}, 0x0) 17:21:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1044.918551][T18749] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 1045.117450][T18778] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1045.280400][T18782] device bond234 entered promiscuous mode [ 1045.310849][T18782] device bond234 left promiscuous mode [ 1045.537740][T18788] bond234: (slave bridge226): Enslaving as a backup interface with a down link [ 1045.612110][T18778] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1045.647396][T18782] bond234: (slave bridge227): Enslaving as a backup interface with a down link 17:21:35 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x7, @broadcast}}) 17:21:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x3ff800) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7000010, 0x50, r2, 0x357fb000) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x100000000004}) 17:21:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x4}, 0x0) 17:21:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200}}], 0x20}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x8) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000200), &(0x7f0000000140)=0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="ff849bda55458f0d8a6991c6862b87b9000000000000000100000003000000050000b3cc9b05b90007000000", @ANYRES32=r0, @ANYBLOB="00000000ff0100"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r2, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r4, @ANYBLOB="00000000f40500"/28]) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x10, 0x5, 0x0, 0x490, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x10, 0x4}, 0x40) bpf$MAP_CREATE(0x4, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FIOCLEX(r6, 0x5451) 17:21:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1048.235672][T18858] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:21:35 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x6, @broadcast}}) [ 1048.304906][T18883] IPVS: ftp: loaded support on port[0] = 21 [ 1048.328841][T18887] device bond235 entered promiscuous mode [ 1048.346035][T18887] device bond235 left promiscuous mode [ 1048.529138][T18903] IPVS: ftp: loaded support on port[0] = 21 17:21:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$inet(0x2, 0x1, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000140)=0x10001, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) 17:21:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x6}, 0x0) [ 1048.742256][T18858] bond235: (slave bridge228): Enslaving as a backup interface with a down link [ 1048.860052][T18924] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1048.888897][ T27] audit: type=1804 audit(1599931295.883:350): pid=18922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/717/cgroup.controllers" dev="sda1" ino=16157 res=1 errno=0 [ 1048.933623][T18887] bond235: (slave bridge229): Enslaving as a backup interface with a down link [ 1048.995169][T18858] device bond235 entered promiscuous mode [ 1049.043642][ T27] audit: type=1804 audit(1599931296.033:351): pid=18945 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/717/memory.events" dev="sda1" ino=16154 res=1 errno=0 [ 1049.070606][T18858] device bridge228 entered promiscuous mode [ 1049.101406][T18858] device bridge229 entered promiscuous mode [ 1049.149746][T18901] IPVS: ftp: loaded support on port[0] = 21 [ 1049.158479][T18858] device bond235 left promiscuous mode [ 1049.202793][T18858] device bridge228 left promiscuous mode [ 1049.222338][ T27] audit: type=1800 audit(1599931296.033:352): pid=18945 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16154 res=0 errno=0 [ 1049.247759][T18858] device bridge229 left promiscuous mode 17:21:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$inet(0x2, 0x1, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000140)=0x10001, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) [ 1049.588806][ T27] audit: type=1804 audit(1599931296.583:353): pid=18963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/718/cgroup.controllers" dev="sda1" ino=16151 res=1 errno=0 [ 1049.803217][ T27] audit: type=1804 audit(1599931296.803:354): pid=18963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/718/memory.events" dev="sda1" ino=16050 res=1 errno=0 [ 1049.881927][ T27] audit: type=1800 audit(1599931296.803:355): pid=18963 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16050 res=0 errno=0 17:21:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$inet(0x2, 0x1, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000140)=0x10001, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) [ 1050.252056][ T27] audit: type=1804 audit(1599931297.253:356): pid=18984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/719/cgroup.controllers" dev="sda1" ino=16169 res=1 errno=0 [ 1050.377678][ T27] audit: type=1804 audit(1599931297.373:357): pid=18998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/719/memory.events" dev="sda1" ino=16168 res=1 errno=0 17:21:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x8}, 0x0) 17:21:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1050.556894][ T27] audit: type=1800 audit(1599931297.373:358): pid=18998 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16168 res=0 errno=0 [ 1050.753222][T19004] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1050.860573][T19005] device bond236 entered promiscuous mode [ 1050.871271][T19005] device bond236 left promiscuous mode [ 1051.087251][T19010] bond236: (slave bridge230): Enslaving as a backup interface with a down link [ 1051.194147][T19005] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1051.219493][T19004] device bond236 entered promiscuous mode [ 1051.231878][T19004] device bridge230 entered promiscuous mode [ 1051.258107][T19004] device bond236 left promiscuous mode [ 1051.267044][T19004] device bridge230 left promiscuous mode [ 1051.535153][T19010] bond236: (slave bridge231): Enslaving as a backup interface with a down link 17:21:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x8, @broadcast}}) 17:21:41 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xfefffffe) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x2) ioctl$FIONCLEX(r3, 0x5450) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 17:21:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x8383b3a0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x9}, 0x0) 17:21:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={0x0, "e348d35e6c3908a85d5cc576827a41e3"}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000003100090300000000000000000000000014000100100001000a0001007065646974000000038ca4225a7c1a503523bfcb51a3c4058a71a2c648dd52a749232807ff1c2b3c474174c20907e94c81b218e96636d810ce6f7115df7ecb6229dbe504a70cdbc2cbd0193e47d3e6d5ce5f2e9c9b6d632f953d559bfcd191209247d515341c0a1cd02d9ba7d3f61393c897a976a8eccae1faa71fafd26bf261fce74bf7739bdd76559a49b2db1e6f47fb6f8eb38a"], 0x28}}, 0x0) 17:21:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1054.451395][T19111] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1054.542776][T19141] IPVS: ftp: loaded support on port[0] = 21 [ 1054.565148][ T27] audit: type=1804 audit(1599931301.563:359): pid=19112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/720/cgroup.controllers" dev="sda1" ino=16182 res=1 errno=0 [ 1054.589729][T19116] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1054.681690][T19124] device bond38 entered promiscuous mode [ 1054.754803][T19124] device bond38 left promiscuous mode 17:21:41 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x7, @broadcast}}) [ 1054.786602][ T27] audit: type=1804 audit(1599931301.613:360): pid=19136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/720/memory.events" dev="sda1" ino=16177 res=1 errno=0 [ 1054.909742][ T27] audit: type=1800 audit(1599931301.613:361): pid=19136 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16177 res=0 errno=0 [ 1054.964604][T19199] IPVS: ftp: loaded support on port[0] = 21 17:21:42 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x7, @broadcast}}) [ 1055.012388][ T27] audit: type=1804 audit(1599931301.623:362): pid=19136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/720/memory.events" dev="sda1" ino=16177 res=1 errno=0 [ 1055.093091][ T27] audit: type=1804 audit(1599931301.623:363): pid=19136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/720/cgroup.controllers" dev="sda1" ino=16182 res=1 errno=0 [ 1055.199292][ T27] audit: type=1804 audit(1599931301.623:364): pid=19136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/720/cgroup.controllers" dev="sda1" ino=16182 res=1 errno=0 [ 1055.245398][T19205] IPVS: ftp: loaded support on port[0] = 21 [ 1055.288209][T19150] bond38: (slave bridge21): Enslaving as a backup interface with a down link [ 1055.303929][ T27] audit: type=1804 audit(1599931301.953:365): pid=19136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/720/cgroup.controllers" dev="sda1" ino=16182 res=1 errno=0 [ 1055.335063][T19157] IPVS: ftp: loaded support on port[0] = 21 [ 1055.361452][T19116] device bond237 entered promiscuous mode [ 1055.388895][T19116] device bond237 left promiscuous mode [ 1055.423118][ T27] audit: type=1804 audit(1599931301.953:366): pid=19112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/720/cgroup.controllers" dev="sda1" ino=16182 res=1 errno=0 [ 1055.708226][T19144] device bond237 entered promiscuous mode [ 1055.726610][T19144] device bond237 left promiscuous mode 17:21:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xa}, 0x0) [ 1055.940239][T19159] bond237: (slave bridge232): Enslaving as a backup interface with a down link [ 1055.965232][T19209] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:21:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1056.017801][T19212] bond237: (slave bridge233): Enslaving as a backup interface with a down link 17:21:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x88a8ffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xc}, 0x0) [ 1056.210505][T19264] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1056.342372][T19270] device bond39 entered promiscuous mode [ 1056.366886][T19270] device bond39 left promiscuous mode [ 1056.803699][T19275] bond39: (slave bridge22): Enslaving as a backup interface with a down link [ 1056.854241][T19278] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1056.991195][T19316] device bond238 entered promiscuous mode [ 1057.069631][T19316] device bond238 left promiscuous mode [ 1057.414344][T19318] bond238: (slave bridge234): Enslaving as a backup interface with a down link [ 1057.484670][T19278] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1057.507997][T19366] device bond238 entered promiscuous mode [ 1057.554057][T19366] device bridge234 entered promiscuous mode [ 1057.586237][T19366] device bond238 left promiscuous mode [ 1057.602071][T19366] device bridge234 left promiscuous mode 17:21:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x300, @broadcast}}) 17:21:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xe}, 0x0) 17:21:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:47 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000140)={0x7, 0x79f, 0x8, 0x8, 0x7, 0x10, 0x4, "e627a9c74a4e9fb82c6b11b34aa48d699675ae57", "b88747e6817356487b1a8d68381de0a42a8bdf49"}) r0 = socket$inet(0x10, 0x3, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x10}, 0xffffffffffffff2a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 1060.746011][T19410] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1060.775301][T19412] IPVS: ftp: loaded support on port[0] = 21 [ 1060.832138][T19413] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1060.875558][T19426] IPVS: ftp: loaded support on port[0] = 21 17:21:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf}, 0x0) 17:21:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2408c73c, &(0x7f0000deaff0)={0x2, 0x3}, 0x10) sendto$inet(r0, &(0x7f0000000480)="1a", 0x1, 0x4028000, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9000010}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) close(r0) [ 1061.066158][T19424] device bond239 entered promiscuous mode [ 1061.087891][T19424] device bond239 left promiscuous mode 17:21:48 executing program 5: r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'veth0_macvtap\x00', {0x2}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01040010ba1a4b6552d3eb162127ff6d73ea2c63677163101e1a2c8d21bcbb7248839eceaa4dd623ef67ea9d20e69ae0d599e15e26332329c3a51c2284d75d52deb3ab56ce4ebee584f676aa37caaf550c7549d2c8bb5845ad6ee209066d00df2248c42c8634ce9ae5f143f67090861913563e83a79e2f4e06a4fd67271373159e89b9366bf66bd246352e83b750e224f50c3422d13c29db80d05d452a306d07eac80b87e3ab8801ff5e013950e810", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x4000000000000006}, &(0x7f0000000040)=0x6c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r5, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000000c0)="427c93bdac5a94ca6d0cf9efece4e122f82dfdc68dc979d71e47b25836b9aec8ee98ab6844f7ae21e6b7432059c0bb760786c0251aea7e378597f20890770f1fec3384ab1a1ff2e9764b074333488b9fcedb900f06c46457f994d0f5fec5ce74230a83d9b1805a2e7bd787661b0acef1a02018ff57db687f6acf56fb74ac66d854a4d1929a55c4343a6bc274e3c4", 0x8e) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x4000000, 0x0, 0x30) [ 1061.461583][T19439] device bond40 entered promiscuous mode [ 1061.489804][T19439] device bond40 left promiscuous mode [ 1061.559859][T19501] IPVS: ftp: loaded support on port[0] = 21 [ 1061.596570][T19454] IPVS: ftp: loaded support on port[0] = 21 [ 1061.789941][T19410] bond239: (slave bridge235): Enslaving as a backup interface with a down link [ 1061.849218][T19453] bond40: (slave bridge23): Enslaving as a backup interface with a down link [ 1061.868535][T19513] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1061.888329][T19512] device bond239 entered promiscuous mode [ 1061.902083][T19512] device bridge235 entered promiscuous mode [ 1061.922266][T19512] device bond239 left promiscuous mode [ 1061.928129][T19512] device bridge235 left promiscuous mode [ 1062.096595][T19515] bond239: (slave bridge236): Enslaving as a backup interface with a down link 17:21:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x10}, 0x0) 17:21:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xa0b38383, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:49 executing program 3: unshare(0x60020200) mmap(&(0x7f000050f000/0x4000)=nil, 0x4000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB='bil\x00er\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00'], 0x48) r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0)=0xe6, 0x4) connect$nfc_llcp(r1, &(0x7f0000000140)={0x27, 0x0, 0x1, 0x4, 0x1f, 0x81, "79f0a35498f603642a65d63a848447fc041d0af0a528116626e4ab674aa18f6254310ff57e3eeaf7769d76cbf2464ed6a2a73e2f2992c2aada7b4f86d4d411", 0x13}, 0x60) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 17:21:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) pread64(r0, &(0x7f0000000140)=""/117, 0x63, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) [ 1062.390830][ T25] tipc: TX() has been purged, node left! [ 1062.419159][T19569] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1062.447829][T19566] IPVS: ftp: loaded support on port[0] = 21 [ 1062.703274][T19572] device bond240 entered promiscuous mode [ 1062.763094][T19572] device bond240 left promiscuous mode [ 1063.198081][T19570] IPVS: ftp: loaded support on port[0] = 21 [ 1063.293204][T19579] bond240: (slave bridge237): Enslaving as a backup interface with a down link [ 1063.326518][T19589] tipc: Started in network mode [ 1063.331633][T19589] tipc: Own node identity 366b37a3b311, cluster identity 4711 [ 1063.362248][T19589] tipc: Enabled bearer , priority 10 [ 1063.543569][T19571] tipc: Resetting bearer [ 1064.218002][T19571] tipc: Disabling bearer [ 1064.284577][T19569] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1064.306525][T19626] device bond240 entered promiscuous mode [ 1064.320568][T19626] device bridge237 entered promiscuous mode [ 1064.343940][T19626] device bond240 left promiscuous mode [ 1064.349452][T19626] device bridge237 left promiscuous mode [ 1064.627485][T19627] bond240: (slave bridge238): Enslaving as a backup interface with a down link [ 1064.845372][T19634] tipc: Enabled bearer , priority 10 [ 1064.881377][T19603] tipc: Resetting bearer [ 1065.646735][T19603] tipc: Disabling bearer 17:21:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x500, @broadcast}}) 17:21:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x60}, 0x0) 17:21:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="84010000100013077a7f005ef2090aa9e97c7bc9be92c9715807001500000000000e040000000000050000000000000001ac1e0001000000000000000002000000000000000000d241181571ce8344fc6f14258604090002000000000046625bb666efb60cc65a408bedfef0d273c0f0d1bdac9ee863d8a43adccc97bc5c0cec8c54277dd3e89e6da374314bb56bd916", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffff0000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c00"/316], 0x184}}, 0x0) 17:21:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000140)={0x7, 0x79f, 0x8, 0x8, 0x7, 0x10, 0x4, "e627a9c74a4e9fb82c6b11b34aa48d699675ae57", "b88747e6817356487b1a8d68381de0a42a8bdf49"}) r0 = socket$inet(0x10, 0x3, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x10}, 0xffffffffffffff2a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 1067.287292][T19660] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1067.304930][T19662] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1067.328184][T19661] IPVS: ftp: loaded support on port[0] = 21 17:21:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf0}, 0x0) 17:21:54 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket(0x0, 0x1, 0x0) close(r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x7800, 0x7800, 0x1, 0x0, {{0xa, 0x4, 0x3, 0x21, 0x28, 0x65, 0x0, 0xfe, 0x4, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x7, 0xe6, [@local]}, @ssrr={0x89, 0xb, 0x9c, [@loopback, @private=0xa010100]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000880)={@local, @private0={0xfc, 0x0, [], 0x1}, @private2, 0x9, 0x0, 0xfffd, 0x480, 0xe565, 0x2200042, r5}) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x14, &(0x7f0000000040)={r7}, 0x8) getsockname$qrtr(r3, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) [ 1067.414648][T19666] IPVS: ftp: loaded support on port[0] = 21 [ 1067.487021][T19667] device bond241 entered promiscuous mode [ 1067.523399][T19667] device bond241 left promiscuous mode [ 1067.598405][ T27] audit: type=1804 audit(1599931314.593:367): pid=19708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/726/memory.events" dev="sda1" ino=16209 res=1 errno=0 [ 1067.757449][ T27] audit: type=1800 audit(1599931314.623:368): pid=19708 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16209 res=0 errno=0 [ 1067.887378][ T27] audit: type=1804 audit(1599931314.623:369): pid=19708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/726/memory.events" dev="sda1" ino=16209 res=1 errno=0 [ 1068.112993][T19686] bond241: (slave bridge239): Enslaving as a backup interface with a down link [ 1068.176914][T19662] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1068.191635][ T27] audit: type=1804 audit(1599931315.183:370): pid=19708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/726/memory.events" dev="sda1" ino=16209 res=1 errno=0 [ 1068.236164][T19721] device bond241 entered promiscuous mode [ 1068.258830][T19721] device bridge239 entered promiscuous mode 17:21:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x300}, 0x0) [ 1068.332197][ T27] audit: type=1800 audit(1599931315.223:371): pid=19708 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16209 res=0 errno=0 [ 1068.367168][T19721] device bond241 left promiscuous mode [ 1068.372999][T19721] device bridge239 left promiscuous mode [ 1068.706225][T19678] IPVS: ftp: loaded support on port[0] = 21 [ 1068.858249][T19722] bond241: (slave bridge240): Enslaving as a backup interface with a down link 17:21:56 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) 17:21:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffa888, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1069.216322][T19776] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1069.424525][T19777] device bond242 entered promiscuous mode [ 1069.510490][T19777] device bond242 left promiscuous mode [ 1070.138229][T19782] bond242: (slave bridge241): Enslaving as a backup interface with a down link [ 1070.193358][T19776] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1070.217120][T19826] device bond242 entered promiscuous mode [ 1070.245528][T19826] device bridge241 entered promiscuous mode [ 1070.264869][T19826] device bond242 left promiscuous mode [ 1070.289411][T19826] device bridge241 left promiscuous mode [ 1070.541538][T19827] bond242: (slave bridge242): Enslaving as a backup interface with a down link 17:21:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffa888, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:21:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x600}, 0x0) [ 1071.746987][T19866] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1071.869930][T19873] device bond41 entered promiscuous mode [ 1071.944010][T19873] device bond41 left promiscuous mode [ 1072.356377][T19894] bond41: (slave bridge24): Enslaving as a backup interface with a down link 17:22:00 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x600, @broadcast}}) 17:22:00 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) 17:22:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x7a4}, 0x0) [ 1073.856343][T19918] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1073.934922][T19956] IPVS: ftp: loaded support on port[0] = 21 [ 1073.943541][T19918] device bond243 entered promiscuous mode [ 1073.983987][T19918] device bond243 left promiscuous mode 17:22:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x500, @broadcast}}) 17:22:01 executing program 3: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) 17:22:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x900}, 0x0) [ 1074.382926][T19969] IPVS: ftp: loaded support on port[0] = 21 [ 1074.641675][T19953] bond243: (slave bridge243): Enslaving as a backup interface with a down link [ 1074.751124][T19986] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1074.900864][T19979] IPVS: ftp: loaded support on port[0] = 21 17:22:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xa00}, 0x0) 17:22:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1075.175563][ T25] tipc: TX() has been purged, node left! [ 1075.282232][T20051] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:22:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xc00}, 0x0) 17:22:02 executing program 3: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) [ 1075.517207][T20054] device bond244 entered promiscuous mode [ 1075.574638][T20054] device bond244 left promiscuous mode [ 1076.025931][T20068] bond244: (slave bridge245): Enslaving as a backup interface with a down link [ 1076.044784][T20084] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1076.128981][T20098] device bond9 entered promiscuous mode [ 1076.145906][T20098] device bond9 left promiscuous mode [ 1076.508033][T20102] bond9: (slave bridge9): Enslaving as a backup interface with a down link [ 1076.519149][T20051] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1076.545791][T20068] device bond244 entered promiscuous mode [ 1076.562354][T20068] device bridge245 entered promiscuous mode [ 1076.604134][T20068] device bond244 left promiscuous mode [ 1076.609964][T20068] device bridge245 left promiscuous mode [ 1076.846309][T20143] bond244: (slave bridge246): Enslaving as a backup interface with a down link 17:22:05 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x700, @broadcast}}) 17:22:05 executing program 3: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) 17:22:05 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) 17:22:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xe00}, 0x0) 17:22:05 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) 17:22:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1078.782441][T20194] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1078.865449][T20198] IPVS: ftp: loaded support on port[0] = 21 17:22:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf00}, 0x0) [ 1079.030920][T20199] device bond245 entered promiscuous mode [ 1079.118684][T20199] device bond245 left promiscuous mode 17:22:06 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x600, @broadcast}}) 17:22:06 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) 17:22:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1079.840225][T20205] IPVS: ftp: loaded support on port[0] = 21 [ 1079.919777][T20214] bond245: (slave bridge247): Enslaving as a backup interface with a down link [ 1079.949695][T20265] IPVS: ftp: loaded support on port[0] = 21 [ 1079.964520][T20194] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1079.989058][T20250] device bond245 entered promiscuous mode [ 1080.021332][T20250] device bridge247 entered promiscuous mode [ 1080.058334][T20250] device bond245 left promiscuous mode [ 1080.091562][T20250] device bridge247 left promiscuous mode 17:22:07 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x12) [ 1080.794953][T20251] bond245: (slave bridge248): Enslaving as a backup interface with a down link [ 1080.862965][T20266] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:22:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x3f00}, 0x0) [ 1081.597071][ T25] tipc: TX() has been purged, node left! 17:22:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x3f00, @broadcast}}) 17:22:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x4000}, 0x0) 17:22:12 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) 17:22:12 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r4 = socket(0xa, 0x1, 0x0) close(r4) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200000000000be479343d0922048000000000002000000000000000098e0c2e0aa4c4741a4395f146c30ce47243caa5e85cd193544cd6194ac871fc928640983fb3c45d358e436aafd79de21317d1f40d49399f00196df573337c565914ac0f12d8cf29d979244a293842e3fb002a34586000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="7b0100001395fe82c2af19afa634cda202ca0f39468515822bfc6566e1355985f802dec479c92db4c56c307d07022741a5c2a88b0b40d2b4180e20f0d37fddff7b59ff330079376e9997a0b5ab21891e43bdf9e71b585a8394ecc3f3a7f432712a62aeb35b8b36cacb", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x14, &(0x7f0000000040)={r6}, 0x8) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r2], 0x48}}, 0x4040001) r7 = epoll_create1(0x0) readv(r7, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000340)=""/100, 0x64}, {0x0}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f0000000600)=""/149, 0x95}], 0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000011003bfbffffffffffd3ff00000000070142f4c649d321234bb2eff5f5ce20d5080d3e2185159c9380b3ec4bb041a93d2e031406c735ee64130be1107a40bd17bd31d180d2f2cae1d4a8971e31fa581b6ea20cd861312acb301272921f6bbe5d4b4ee25971964ff442851321557a411b290636e8c05fa509402c33fa8a6515f86340937a146ca6a804edca4c0100f01fe776d38afe94", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1085.448657][T20405] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1085.525282][T20411] IPVS: ftp: loaded support on port[0] = 21 [ 1085.622835][T20407] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1085.806653][T20414] device bond25 entered promiscuous mode [ 1085.879165][T20414] device bond25 left promiscuous mode 17:22:13 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) [ 1086.425386][T20412] device bond246 entered promiscuous mode [ 1086.454243][T20412] device bond246 left promiscuous mode [ 1086.455958][T20429] IPVS: ftp: loaded support on port[0] = 21 [ 1086.829805][T20436] bond246: (slave bridge249): Enslaving as a backup interface with a down link 17:22:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x5865}, 0x0) [ 1086.872566][T20435] bond25: (slave bridge20): Enslaving as a backup interface with a down link [ 1086.902207][T20491] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1086.916769][T20405] device bond246 entered promiscuous mode [ 1086.950250][T20405] device bridge249 entered promiscuous mode [ 1086.993310][T20405] device bond246 left promiscuous mode [ 1086.998894][T20405] device bridge249 left promiscuous mode 17:22:14 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) [ 1087.468992][T20493] bond246: (slave bridge250): Enslaving as a backup interface with a down link 17:22:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x6000}, 0x0) [ 1087.685962][T20534] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:22:14 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) [ 1087.845764][T20552] device bond247 entered promiscuous mode [ 1087.938408][T20552] device bond247 left promiscuous mode [ 1088.759584][T20534] bond247: (slave bridge251): Enslaving as a backup interface with a down link [ 1088.887797][T20579] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1088.907787][T20578] device bond247 entered promiscuous mode [ 1088.932646][T20578] device bridge251 entered promiscuous mode [ 1089.022249][T20578] device bond247 left promiscuous mode [ 1089.027843][T20578] device bridge251 left promiscuous mode [ 1089.419654][T20581] bond247: (slave bridge252): Enslaving as a backup interface with a down link 17:22:17 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0xff00, @broadcast}}) 17:22:17 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 17:22:17 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) 17:22:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x804}}) close(r0) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0x8, 0x2, {0xfffffffffffffff9, @usage=0xa33b, 0x0, 0x400000000000, 0xfffffffffffffffb, 0x7e3, 0x8, 0x1f, 0x3, @usage=0xfffffffeffffffff, 0x10000, 0xffffffff, [0x3, 0x5, 0x1000, 0x4, 0x10000, 0x8501]}, {0x8, @struct={0x1, 0x12f3}, 0x0, 0x6, 0x18000000000, 0x6, 0xb7, 0x100000001, 0x90, @usage=0x8000, 0xffffb6cf, 0xf99, [0xffffffff, 0x8, 0xbba, 0x5df, 0x3, 0x7]}, {0x8, @struct={0x3f, 0x19f3fe05}, 0x0, 0x2, 0x6, 0x7fffffff, 0x5, 0x358, 0x12, @struct={0x7, 0x100}, 0x0, 0x21, [0x0, 0x8, 0x1000, 0x3, 0x7, 0xc00000000]}, {0x8000, 0x8, 0x23c000000000000}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r3}, {@val={r5}, @actul_num={@val=0x2b, 0x0, 0x4b}}}) 17:22:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x6558}, 0x0) 17:22:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="0f0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x8100}, 0x0) [ 1090.944068][T20610] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1091.054923][T20617] IPVS: ftp: loaded support on port[0] = 21 17:22:18 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1091.157220][T20627] device bond248 entered promiscuous mode [ 1091.208041][T20627] device bond248 left promiscuous mode 17:22:18 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 17:22:18 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1091.807688][T20633] IPVS: ftp: loaded support on port[0] = 21 17:22:18 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 17:22:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xa407}, 0x0) [ 1091.911242][T20610] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1092.284583][ T39] tipc: TX() has been purged, node left! 17:22:21 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 17:22:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:21 executing program 3: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 17:22:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf000}, 0x0) 17:22:21 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0x5}}) 17:22:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1094.446000][T20781] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:22:21 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 17:22:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x34000}, 0x0) [ 1094.544219][T20782] IPVS: ftp: loaded support on port[0] = 21 [ 1094.553956][T20780] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:22:21 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0xff00, @broadcast}}) [ 1094.770144][T20783] device bond249 entered promiscuous mode [ 1094.827165][T20783] device bond249 left promiscuous mode 17:22:21 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1094.875087][T20864] IPVS: ftp: loaded support on port[0] = 21 17:22:22 executing program 5: bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0) 17:22:22 executing program 5: bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0) [ 1095.337187][T20821] IPVS: ftp: loaded support on port[0] = 21 [ 1095.345403][T20784] device bond26 entered promiscuous mode [ 1095.366056][T20784] device bond26 left promiscuous mode 17:22:22 executing program 5: bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0) [ 1095.789601][T20820] bond26: (slave bridge21): Enslaving as a backup interface with a down link [ 1095.903023][T20781] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1095.916857][T20811] device bond249 entered promiscuous mode [ 1095.926253][T20811] device bond249 left promiscuous mode 17:22:23 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x0, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x400300}, 0x0) 17:22:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1096.372383][T20933] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1096.546012][T20936] device bond250 entered promiscuous mode [ 1096.605542][T20936] device bond250 left promiscuous mode [ 1097.085026][T20933] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1097.112550][T20936] device bond250 entered promiscuous mode [ 1097.175032][T20936] device bond250 left promiscuous mode 17:22:26 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0x6}}) 17:22:26 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendfile(r2, r1, 0x0, 0x8000000000004) 17:22:26 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x0, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf0ffff}, 0x0) [ 1099.247397][T20999] IPVS: ftp: loaded support on port[0] = 21 [ 1099.888725][T20999] IPVS: ftp: loaded support on port[0] = 21 17:22:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00e00001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:27 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x0, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:27 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0x5}}) 17:22:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x1000000}, 0x0) [ 1100.066759][ T39] tipc: TX() has been purged, node left! 17:22:27 executing program 4: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)}, {&(0x7f0000000200)="e7cc45aa2d363ed0e2e93fa1ed28f9bcd6be98d55a44383ff76b690d031d0f331e695552983d12d20397e7b7be33adc2db0ae9b2153fa860012a9dde", 0x3c}, {&(0x7f0000000300)="fcece812cfe2e0357efeb5ef2c808f5ae8a29eddfc96b1c802a4f8544eaa855b3c88bba87c75c69dbf0769f9", 0x2c}, {&(0x7f0000000340)}], 0x4, &(0x7f00000003c0)="eac0575eb73cfea13478c86c3439e1babf9b45426998129f4b5c1e1f1d5f7db5e42241dfe6aeae585b10ea77636cb8f58a5bfff5437eb7b506a178a1fbcf2afea1b1848895deaf36c7da5991154789e3492e0f96ca", 0x55, 0x8080}, 0xe0) r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x40000400) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000100)=0x120400, 0x2) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) 17:22:27 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x0, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1100.221026][T21060] IPVS: ftp: loaded support on port[0] = 21 [ 1100.236509][T21056] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:22:27 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x0, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1100.436649][T21062] device bond251 entered promiscuous mode [ 1100.455295][T21062] device bond251 left promiscuous mode [ 1100.467538][T21107] IPVS: ftp: loaded support on port[0] = 21 17:22:27 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x0, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1100.959606][T21056] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1101.005652][T21062] device bond251 entered promiscuous mode [ 1101.044656][T21062] device bond251 left promiscuous mode 17:22:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0xe}}) 17:22:28 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x2000000}, 0x0) [ 1101.233797][T21108] IPVS: ftp: loaded support on port[0] = 21 17:22:28 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1101.430576][T21152] IPVS: ftp: loaded support on port[0] = 21 17:22:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e03f03001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:28 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1101.957038][T21190] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1102.202837][T21152] IPVS: ftp: loaded support on port[0] = 21 [ 1102.496073][T21202] device bond252 entered promiscuous mode [ 1102.510170][T21202] device bond252 left promiscuous mode [ 1102.743181][T21211] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1102.767070][T21190] device bond252 entered promiscuous mode [ 1102.784370][T21190] device bond252 left promiscuous mode 17:22:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}, 0x108) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000000008008400ee31c7c4d97c155030f3c96af8a4e6000000ff3f74020b7db9b97a499bcf92b12bc7b853e5147a84a97ecb7986d31bd8065314f74b3bc0b41580e9e9165bb5e59c88d28371e502138915d8e28c707b110b0754c39b4b7055658e0559ce5891071ff8d8d34f15b072053abce7a9c959a8aea5929d804447040bdce9e6c2c6330eea7751a38680112f5918a01a1e4c500c8cb22ccf33ac3233b213f74199fa6a0274648b", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r4}, 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001380)={{}, "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"}) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x78) 17:22:33 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x3000000}, 0x0) 17:22:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0200201000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00e00001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:33 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0x5000000}}) [ 1106.951340][T21286] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:22:34 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1107.088640][T21307] IPVS: ftp: loaded support on port[0] = 21 [ 1107.110423][T21288] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:22:34 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1107.369283][T21292] device bond27 entered promiscuous mode [ 1107.388777][T21292] device bond27 left promiscuous mode 17:22:34 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) 17:22:34 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) [ 1107.849771][T21293] device bond253 entered promiscuous mode [ 1107.869623][T21293] device bond253 left promiscuous mode [ 1107.900836][T21325] IPVS: ftp: loaded support on port[0] = 21 17:22:34 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) 17:22:35 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0xe}}) [ 1108.272524][T21323] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1108.303005][ T39] tipc: TX() has been purged, node left! [ 1108.320574][ T39] tipc: TX() has been purged, node left! 17:22:35 executing program 3 (fault-call:0 fault-nth:0): bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x4000000}, 0x0) [ 1108.398842][T21410] IPVS: ftp: loaded support on port[0] = 21 [ 1108.499734][T21416] FAULT_INJECTION: forcing a failure. [ 1108.499734][T21416] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.547685][T21416] CPU: 1 PID: 21416 Comm: syz-executor.3 Not tainted 5.9.0-rc3-syzkaller #0 [ 1108.556395][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.566468][T21416] Call Trace: [ 1108.569785][T21416] dump_stack+0x198/0x1fd [ 1108.574330][T21416] should_fail.cold+0x5/0x14 [ 1108.579057][T21416] should_failslab+0x5/0xf [ 1108.583487][T21416] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1108.589568][T21416] kmem_cache_alloc_node_trace+0x55/0x3f0 [ 1108.596012][T21416] __kmalloc_node+0x38/0x60 [ 1108.600535][T21416] __bpf_map_area_alloc+0x11d/0x150 [ 1108.605745][T21416] array_map_alloc+0x518/0x8b0 [ 1108.610533][T21416] ? cpumask_weight.constprop.0+0x40/0x40 [ 1108.616260][T21416] ? __might_fault+0x190/0x1d0 [ 1108.621036][T21416] ? bpf_lsm_bpf+0x5/0x10 [ 1108.625385][T21416] ? cpumask_weight.constprop.0+0x40/0x40 [ 1108.631120][T21416] __do_sys_bpf+0x959/0x4c20 [ 1108.635733][T21416] ? bpf_link_get_from_fd+0x110/0x110 [ 1108.641119][T21416] ? get_pid_task+0x138/0x200 [ 1108.645822][T21416] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1108.651382][T21416] ? lock_is_held_type+0xbb/0xf0 [ 1108.656334][T21416] ? wait_for_completion+0x260/0x260 [ 1108.661640][T21416] ? check_preemption_disabled+0x50/0x130 [ 1108.667370][T21416] ? syscall_enter_from_user_mode+0x20/0x290 [ 1108.675213][T21416] ? lockdep_hardirqs_on+0x53/0x100 [ 1108.680425][T21416] do_syscall_64+0x2d/0x70 [ 1108.684851][T21416] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1108.690751][T21416] RIP: 0033:0x45d5f9 [ 1108.694751][T21416] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.714391][T21416] RSP: 002b:00007f634e7d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1108.722829][T21416] RAX: ffffffffffffffda RBX: 00000000000019c0 RCX: 000000000045d5f9 [ 1108.730816][T21416] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0c00000000000000 [ 1108.738911][T21416] RBP: 00007f634e7d2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1108.746891][T21416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.754869][T21416] R13: 00007ffcb1b6db9f R14: 00007f634e7d39c0 R15: 000000000118cf4c 17:22:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f0ff7f1000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:35 executing program 4: listen(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000240)=0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00000000000f000300000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x81) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x2343a726) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, 0x0, &(0x7f0000000080)) 17:22:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x6000000}, 0x0) [ 1109.141430][T21457] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1109.228514][T21457] device bond28 entered promiscuous mode [ 1109.241688][T21456] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1109.341415][T21499] IPVS: ftp: loaded support on port[0] = 21 [ 1109.476330][T21465] device bond254 entered promiscuous mode [ 1109.495911][T21465] device bond254 left promiscuous mode [ 1109.899793][T21465] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1109.944207][T21457] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1109.974017][T21457] bond29 (uninitialized): Released all slaves [ 1110.037594][T21567] IPVS: ftp: loaded support on port[0] = 21 17:22:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0x6000000}}) 17:22:41 executing program 3: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x8000000}, 0x0) 17:22:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x3, 0x4) r1 = socket(0xa, 0x1, 0x0) close(r1) sendmmsg$inet_sctp(r1, &(0x7f0000000180), 0x492492492492793, 0x4040) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x140, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@local, 0x36, r4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x14, &(0x7f0000000040)={r5}, 0x8) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 17:22:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000100050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1114.228196][T21635] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:22:41 executing program 3: bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1114.314747][T21649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1114.333487][T21636] IPVS: ftp: loaded support on port[0] = 21 17:22:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x3, 0x4) r1 = socket(0xa, 0x1, 0x0) close(r1) sendmmsg$inet_sctp(r1, &(0x7f0000000180), 0x492492492492793, 0x4040) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x140, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@local, 0x36, r4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x14, &(0x7f0000000040)={r5}, 0x8) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 1114.423411][T21637] device bond255 entered promiscuous mode [ 1114.436980][T21637] device bond255 left promiscuous mode 17:22:41 executing program 3: bpf$MAP_CREATE(0x20000000000000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:41 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0x5000000}}) 17:22:41 executing program 3: bpf$MAP_CREATE(0xc00000000000002, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:41 executing program 4: listen(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000240)=0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00000000000f000300000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x81) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x2343a726) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, 0x0, &(0x7f0000000080)) 17:22:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x9000000}, 0x0) [ 1114.873222][T21697] IPVS: ftp: loaded support on port[0] = 21 [ 1114.876175][T21637] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1115.115482][T21730] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1115.155718][T21730] bond29 (uninitialized): Released all slaves [ 1115.283574][T21730] IPVS: ftp: loaded support on port[0] = 21 [ 1115.441046][T21636] IPVS: ftp: loaded support on port[0] = 21 [ 1116.091315][ T39] tipc: TX() has been purged, node left! [ 1116.104468][ T39] tipc: TX() has been purged, node left! 17:22:43 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0xe000000}}) [ 1116.137529][ T39] tipc: TX() has been purged, node left! [ 1116.159139][ T39] tipc: TX() has been purged, node left! 17:22:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000200050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:43 executing program 3: bpf$MAP_CREATE(0xc00000000000003, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xa000000}, 0x0) 17:22:43 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0xe0ffffff, 0xfffffffffffffe09}, 0x28) r5 = socket(0xa, 0x1, 0x0) close(r5) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="0180e692bb71471a228b59490a236873a93218a47a64bde522082e3ce8e1a301bc2edea7c3002fa068ef22ab66d0db5f662884ff0ba8680040f3cb1277adefb3b9e1518ce780c6a8768f9f9d46201c6608f3403567248bcd6c431cf24701cee607a9b8701aa57354755d90ee7000"/124, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x14, &(0x7f0000000040)={r7}, 0x8) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x862) 17:22:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:22:43 executing program 3: bpf$MAP_CREATE(0xc00000000000004, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1116.275235][T21816] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:22:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xc000000}, 0x0) [ 1116.424433][T21824] IPVS: ftp: loaded support on port[0] = 21 17:22:43 executing program 3: bpf$MAP_CREATE(0xc00000000000005, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1116.593613][T21822] device bond256 entered promiscuous mode [ 1116.660996][T21822] device bond256 left promiscuous mode 17:22:43 executing program 3: bpf$MAP_CREATE(0xc00000000000006, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:43 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast=0x6000000}}) 17:22:44 executing program 3: bpf$MAP_CREATE(0xc00000000000007, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1117.048230][T21876] IPVS: ftp: loaded support on port[0] = 21 [ 1117.307822][T21816] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1117.329171][T21843] device bond256 entered promiscuous mode [ 1117.340049][T21843] device bond256 left promiscuous mode [ 1117.581058][T21842] IPVS: ftp: loaded support on port[0] = 21 17:22:48 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xfe656bc7d1972a7, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0xa, 0x1, 0x0) close(r2) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={r4, 0x11, "15a19924ae0355132175510b5a10443692"}, &(0x7f0000000140)=0x19) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x14, &(0x7f0000000040)={r6}, 0x8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) 17:22:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xe000000}, 0x0) 17:22:48 executing program 3: bpf$MAP_CREATE(0xc00000000000008, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:22:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000a00050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="d800000018008108e00f80ecdb4cb9040a6965ef0f087c02e87c55a1bc000900b8004099100000000500150004008178a8001600120008c00600026fe48a51f00003ac0414c05c06ad01eb1e634154870fd00fde0000d67f6fa7007134cf6efb8000a007a290457f0189b316277ce06bbace80174c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3089ad809d5e1cace81ed0b7fece0b42a9ecbee5de6", 0xd8}], 0x1}, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x14, &(0x7f0000000040)={r3}, 0x8) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000040)=0x91a, 0x4) 17:22:48 executing program 3: bpf$MAP_CREATE(0xc00000000000009, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1121.824806][T21970] IPv6: NLM_F_CREATE should be specified when creating new route [ 1121.845181][T21970] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. 17:22:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf000000}, 0x0) [ 1121.891451][T21977] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1121.915152][T21976] IPVS: ftp: loaded support on port[0] = 21 17:22:49 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000147000/0x1000)=nil, 0x1000, 0x0, 0x2013, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8000, @empty, 0x6}}, 0x0, 0x0, 0x2, 0x0, "056e7d8cb888695aa1ef5e517288740769d2ab9956f710229f7c35618fe08c05c94039ab9cc507acd3f40a83c7c903c8f91a96b6909854b1c7ed23c83edbe307bf9fc9c5c50f7a8615439d59a156fb7c"}, 0xd8) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 17:22:49 executing program 3: bpf$MAP_CREATE(0xc0000000000000a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1122.128984][T21980] device bond257 entered promiscuous mode [ 1122.195352][ T27] audit: type=1804 audit(1599931369.193:372): pid=22026 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/768/memory.events" dev="sda1" ino=15892 res=1 errno=0 [ 1122.230189][T21980] device bond257 left promiscuous mode 17:22:49 executing program 3: bpf$MAP_CREATE(0xc0000000000000b, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1122.343606][ T27] audit: type=1800 audit(1599931369.193:373): pid=22026 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=15892 res=0 errno=0 17:22:49 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000147000/0x1000)=nil, 0x1000, 0x0, 0x2013, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8000, @empty, 0x6}}, 0x0, 0x0, 0x2, 0x0, "056e7d8cb888695aa1ef5e517288740769d2ab9956f710229f7c35618fe08c05c94039ab9cc507acd3f40a83c7c903c8f91a96b6909854b1c7ed23c83edbe307bf9fc9c5c50f7a8615439d59a156fb7c"}, 0xd8) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) [ 1122.460738][ T27] audit: type=1804 audit(1599931369.203:374): pid=22026 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/768/memory.events" dev="sda1" ino=15892 res=1 errno=0 [ 1122.664555][ T27] audit: type=1804 audit(1599931369.233:375): pid=22026 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/768/memory.events" dev="sda1" ino=15892 res=1 errno=0 [ 1122.789786][ T27] audit: type=1804 audit(1599931369.313:376): pid=22029 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/768/memory.events" dev="sda1" ino=15892 res=1 errno=0 [ 1122.951419][ T27] audit: type=1804 audit(1599931369.713:377): pid=22038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/769/memory.events" dev="sda1" ino=15892 res=1 errno=0 [ 1122.994814][T21977] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1123.028024][T21995] device bond257 entered promiscuous mode [ 1123.064641][ T27] audit: type=1800 audit(1599931369.713:378): pid=22038 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=15892 res=0 errno=0 [ 1123.086703][T21995] device bond257 left promiscuous mode [ 1123.142606][ T27] audit: type=1804 audit(1599931369.743:379): pid=22038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/769/memory.events" dev="sda1" ino=15892 res=1 errno=0 [ 1123.180049][T21978] IPVS: ftp: loaded support on port[0] = 21 [ 1123.326042][ T27] audit: type=1804 audit(1599931369.773:380): pid=22038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/769/memory.events" dev="sda1" ino=15892 res=1 errno=0 [ 1123.362609][ T27] audit: type=1804 audit(1599931369.893:381): pid=22042 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir578574584/syzkaller.XEXexx/769/memory.events" dev="sda1" ino=15892 res=1 errno=0 [ 1124.206433][ T39] tipc: TX() has been purged, node left! [ 1124.217247][ T39] tipc: TX() has been purged, node left! 17:22:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:22:52 executing program 3: bpf$MAP_CREATE(0xc0000000000000c, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x10000000}, 0x0) 17:22:52 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @hci={0x1f, 0x1, 0x1}, @nfc={0x27, 0x0, 0x0, 0x1}, @ipx={0x4, 0x3, 0x80000000, "9cfc1ee4f6cf", 0x8}, 0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0_to_bond\x00', 0x1, 0xffffffff0000, 0x7}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000081006e7230000000000600002000000000007465616d300000000000000000000000766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba316000000000000000000080000000000000200000000892f071b636f6e6e6c6162656c000000000000000000e5ffffff00000000000020000000080000000000000000000000000000004e465154455545000000000000000000000000000000000000000000000000000800000000000000000000000000000400000000000000000000000000000000000000000000000000000008000000000000000001000000ffffffff0000000000000000000000000004000000000000000000000000000000000000000000000000000001000000000000000000626f6e643000000000000000000000007465616d300000000000000000000000626f6e6430000000000000000000000076657468315f746f5f62726964676500aaaaaaaaaabb000000000000ffffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d41524b00000000008279000000000000000000000000000008040000000900"/560]}, 0x2a8) 17:22:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000f00050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x14, &(0x7f0000000040)={r2}, 0x8) r3 = socket$inet(0x2, 0x1, 0xc5d) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@int=0x8, 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:22:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x3f000000}, 0x0) 17:22:52 executing program 3: bpf$MAP_CREATE(0xc0000000000000d, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1125.267098][T22096] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1125.292296][T22093] IPVS: ftp: loaded support on port[0] = 21 [ 1125.381018][T22100] IPVS: ftp: loaded support on port[0] = 21 [ 1125.555183][T22099] device bond258 entered promiscuous mode 17:22:52 executing program 3: bpf$MAP_CREATE(0xc0000000000000e, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1125.617325][T22099] device bond258 left promiscuous mode 17:22:52 executing program 3: bpf$MAP_CREATE(0xc0000000000000f, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:53 executing program 3: bpf$MAP_CREATE(0xc00000000000010, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1126.291658][T22096] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1126.327755][T22110] device bond258 entered promiscuous mode 17:22:53 executing program 3: bpf$MAP_CREATE(0xc00000000000011, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1126.376977][T22098] IPVS: ftp: loaded support on port[0] = 21 [ 1126.388789][T22110] device bond258 left promiscuous mode [ 1126.532771][T22170] IPVS: ftp: loaded support on port[0] = 21 17:22:53 executing program 3: bpf$MAP_CREATE(0xc00000000000012, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:53 executing program 3: bpf$MAP_CREATE(0xc00000000000013, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:54 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xfe656bc7d1972a7, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0xa, 0x1, 0x0) close(r2) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={r4, 0x11, "15a19924ae0355132175510b5a10443692"}, &(0x7f0000000140)=0x19) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x14, &(0x7f0000000040)={r6}, 0x8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) 17:22:54 executing program 3: bpf$MAP_CREATE(0xc00000000000014, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1127.914195][T22262] IPVS: ftp: loaded support on port[0] = 21 [ 1129.947971][ T39] tipc: TX() has been purged, node left! [ 1129.962439][ T39] tipc: TX() has been purged, node left! [ 1129.980322][ T39] tipc: TX() has been purged, node left! 17:22:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1402, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}}, 0x4081) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:22:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x40000000}, 0x0) 17:22:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) 17:22:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:22:57 executing program 3: bpf$MAP_CREATE(0xc00000000000015, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) sendmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x4, 0x4, 0x3, 0x3}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="995eb53c2a584c52610c71ca85e85e6783bc891e8b56e2e4b236658a98d5ee4b443a9949da10413b55161b93cd05636ba1264ae55ef3f0381633a4b8fffb79aa6c66fc6bfd914f005addd4b69d06cc013a5098a067222049c199daac91347372d18395697dbd1d3e3704c5ca3d5bed50a5fcd325fb89662e574f27c9244c9eec9922826d982c2286424043a42cbea9f3ad67e38c41b54ce440bc17dc7d665e6e0b8e3bd16fce480c53cb9e5867746c494d00175ad0ad2e669d54cde2c2", 0xbd}], 0x1, &(0x7f00000036c0)=ANY=[@ANYBLOB="d00000000000000006000000c6e141c266d3658667c313ff8162d5651f19fb8937ac46e50dae675c5d0c1b0f7a2bfbb5150ab84b806c2a12e509c20525c0df3bb6b7e698d01e9dc62c74da2ecd6e9b742128002c3027b3063195bbea47823544a85671e938f980c16825ea885bee23503b61c394a84b556fbe0d90859c57e767f7a2e9de3e0ef70c9b49e99b5dfbdd1e55ca9b168005000e79d52f5b1b683025e842db2f913c29892439bfa65de9992dc75285e20e00000078000000000000000600000006000000067b296599e386d95d21cca9b28a84cbe533e0af20fe0f59b801205bce0019e2e5c323513276238cedd21307a5800fab7c9c0b1e9686ab4019fc7b36d19d1379b4a3fd5d40e5ac74e65deb2c7789aef6917d51aa05594d766a829e7d7d1dd2a488926c802f2da6b610d0933670c24b266aec5b657000b80000000000000013010000000000805296375cbfe661865d75e9783a0789ed64ccee7aaee700d4af4e723e9e7b9bf6b15f226daee7ad51c2ae80c815e531cdc31aad88e15e37f47c2d889872d2d1360e4b299f34841b729a11d895a4603a4730b296ac0b339670b4a5fafe25c6b6472f80613b669c68b1ca92365f4de6714b15d71fa765c8662a74cd5ed3196a9c90f3b8789bb0cef820b88a9b16b2d1c725f2edd69c3be665e227e35960431598ca29c076b73d7764004000000000000000110000000200000071b9d8bceaed74932d519683fdcdc9bad410e361c3072e69a1780af6989ddfe3fb4d850a09f813d2f600"/584], 0x240}}, {{&(0x7f0000000540)=@phonet={0x23, 0x1f, 0x40, 0x80}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)="aa0c147edb22714231196f76", 0xc}, {&(0x7f0000001380)="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", 0x1000}], 0x2, &(0x7f00000007c0)=[{0xb8, 0x10a, 0x6dfb, "0463b97809ad44f439bda93058998aa46fe8a27a794024df215c297a00312532dbe05959d1fd818cf92bae80bc57e09427b93e6083578681fe27de1a1fa7204ca5d758eaee695aaf1d0214741ce870f24cb8379c433168bded1528c29d8b92adf14286be6164bcac91e322bcab0fe9d401abf86885ac397418f871eceecbca2af96be5d3faf004277df287b62234524ff714c851c7fb19646c73dbe8a9cc50ead3"}, {0x60, 0x10b, 0x101, "d308a05f6d1f788dbff208e38ef5594ffec17fdaf225f55a394d5f311916c7a75a66586dfb3fb6a2f85167fa3a21e49b6f931560c24d9226f45d935e01b6fe7fe39f9a334f36a1c7c69dccab9fb2"}], 0x118}}, {{&(0x7f0000000900)=@nl=@unspec, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000980)="46ce9e8526746983e6bf629257e6ccf02a85efaea80dffd694d3d37611b88f1176d21925a8e7e024ada4c46074e3e3ab0bb0080970ad9899e0e39e5227bbe58a22b8af664f816f860fc0c803fda7d6bfed742f524b3c1a0a4a8a01da1b6d024f5233f8a744f546bca86d6cdbd2f7969e10351ebe8e29898fe8c34838b1921de86fbc79c3e70bf86c0343461bbdad3b59f72da437dbf2878b07a9a81472e9294db6f6345461b1c094a84429b8dd725c1f11b54e33d461c98b625b3bdea187206b23808365af743307e6a181d6f7303312cbe05ab4c9bc8da8", 0xd8}, {&(0x7f0000000a80)="9cb81dbe985f5632857ff6238339054cf805c862e68beb42ccb4717324c9d678de3892d7a159db2d5151c475ea06ebcfae2dc9d94a056ef9439a8e9959f370c187438b41bb2e3b07faf0da884833c951cedfcbd93115da8b912f552bd45e6b4df4b90d6d881af4538382b0d278ba3c0d195358e01865031108384d02fc803b6e48c055886ae6a7b28fd5a2c39c0872681bf9c28e4ff52a8ce396ad50f5daaa81e0f8ba6788eac96dbb01bf91477dfeeb0bd53d24cbdab24338244bc8a4fee76502c6cd960f5ba3260cbc882bfca4ff1a95033db3534622db074f52b5e7129bcbe0db11c5ab17267e9ffacf7a2ef8d53723876ed8", 0xf4}, {&(0x7f0000000b80)="d7cdb41e451e50ff1dfc25cb38d47138ffd34188af958c7be04eebb7de3d72517b28e0b84483b5521b139f602eba54862af96fadc3db1f04f75c79a826ec011b28c0784621094907a2cd2e1068747e54a49b0b612b66049322c2c2147a02399938", 0x61}, {&(0x7f0000000c00)="482722c0afdc223eaeba1191c62c14e8f200145dc49d7f28fdfb10c9ad6d50b62c15326c191657fa3127e70488387ca1d0e8bbe2cec52e8c45b3f0d6555a9cd5785870dce87ad489d305210e5034ca76d2fd999e0af5c3db657239f2d2de699a58722b1b5013c7bbc74783", 0x6b}, {&(0x7f0000000c80)="b993d2d865c6eb63aa9c8c83838af57149d7927686a6d93603068d06873fc920fd950e5e547f769dd771afd6e136e50cc9845f63f1410ee8b6a55748c7b824bed8ac8b4962961adbaa602430011570dbc5c813b63e3590523714059534a7a6ddd9a04dedc7de0bf886fc804070a2b9fe5a393825365ae298e39a134a6d8580d734ab4e08aacbde9afd61233354d8086d579809", 0x93}], 0x5, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x1340}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="1869d83442b0f3ee0fd781c793b6a61f7d5870bd2d46859e45000404d959fa542e161d36373a35d496f1c5fbc6d4dc41ac12fa222abf7d4b8d024dec6b6ae9a9333fa61188d682c97869638d8cede416f7cdcd965f494604045e5818ba80301c36da2f39a890d278778f18d3594f61704ba4cba93bbbc9920acc67d392635ba2f9fdadbe7209e0b0720aa8f3f58e46ee6735af3f1d4b9905c37e0e5ea1d0927b9aa10d95040baf74485153d64316f4", 0xaf}, {&(0x7f0000000e80)="e465764291d021ca23c5851b1ca8daa0e796b1c5ed913f62e1d1cd069249c41f6287875b0cb30f55f67f4a4e4785231c344530945f3233f310e81704d1c86855fa8f3811354b060cec37fc906490d8c2026031e245193bd81cfe25a64c549b2ff52f651b1b4f2d23401beb7ce96e997b2ed4f99a21b6fc3604cc562cd4dccea7811bad78a8df5ffc8d670a6a6c11c00de5f1de92b6ee4368597fd616be082635b3c6ce502f0f82b7018cd15096e17d5b38d75ecb34301375c364c005880b2732e60967d5d52e59079441583cb56ced2615ea1c4f93b03f3b2314f7037191bae6c1689210e4664ed1f2b9b0", 0xeb}], 0x2}}], 0x4, 0x80) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket(0x11, 0x800000003, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0}, 0x0) accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x40, 0x7f}) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6874e56cbabfc45a, 0x28011, r0, 0x0) 17:22:57 executing program 3: bpf$MAP_CREATE(0xc00000000000016, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1130.583062][T22301] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1130.609344][T22304] IPVS: ftp: loaded support on port[0] = 21 [ 1130.839864][T22306] device bond259 entered promiscuous mode 17:22:57 executing program 3: bpf$MAP_CREATE(0xc00000000000017, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1130.902323][T22306] device bond259 left promiscuous mode 17:22:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) sendmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x4, 0x4, 0x3, 0x3}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="995eb53c2a584c52610c71ca85e85e6783bc891e8b56e2e4b236658a98d5ee4b443a9949da10413b55161b93cd05636ba1264ae55ef3f0381633a4b8fffb79aa6c66fc6bfd914f005addd4b69d06cc013a5098a067222049c199daac91347372d18395697dbd1d3e3704c5ca3d5bed50a5fcd325fb89662e574f27c9244c9eec9922826d982c2286424043a42cbea9f3ad67e38c41b54ce440bc17dc7d665e6e0b8e3bd16fce480c53cb9e5867746c494d00175ad0ad2e669d54cde2c2", 0xbd}], 0x1, &(0x7f00000036c0)=ANY=[@ANYBLOB="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"/584], 0x240}}, {{&(0x7f0000000540)=@phonet={0x23, 0x1f, 0x40, 0x80}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)="aa0c147edb22714231196f76", 0xc}, {&(0x7f0000001380)="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", 0x1000}], 0x2, &(0x7f00000007c0)=[{0xb8, 0x10a, 0x6dfb, "0463b97809ad44f439bda93058998aa46fe8a27a794024df215c297a00312532dbe05959d1fd818cf92bae80bc57e09427b93e6083578681fe27de1a1fa7204ca5d758eaee695aaf1d0214741ce870f24cb8379c433168bded1528c29d8b92adf14286be6164bcac91e322bcab0fe9d401abf86885ac397418f871eceecbca2af96be5d3faf004277df287b62234524ff714c851c7fb19646c73dbe8a9cc50ead3"}, {0x60, 0x10b, 0x101, "d308a05f6d1f788dbff208e38ef5594ffec17fdaf225f55a394d5f311916c7a75a66586dfb3fb6a2f85167fa3a21e49b6f931560c24d9226f45d935e01b6fe7fe39f9a334f36a1c7c69dccab9fb2"}], 0x118}}, {{&(0x7f0000000900)=@nl=@unspec, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000980)="46ce9e8526746983e6bf629257e6ccf02a85efaea80dffd694d3d37611b88f1176d21925a8e7e024ada4c46074e3e3ab0bb0080970ad9899e0e39e5227bbe58a22b8af664f816f860fc0c803fda7d6bfed742f524b3c1a0a4a8a01da1b6d024f5233f8a744f546bca86d6cdbd2f7969e10351ebe8e29898fe8c34838b1921de86fbc79c3e70bf86c0343461bbdad3b59f72da437dbf2878b07a9a81472e9294db6f6345461b1c094a84429b8dd725c1f11b54e33d461c98b625b3bdea187206b23808365af743307e6a181d6f7303312cbe05ab4c9bc8da8", 0xd8}, {&(0x7f0000000a80)="9cb81dbe985f5632857ff6238339054cf805c862e68beb42ccb4717324c9d678de3892d7a159db2d5151c475ea06ebcfae2dc9d94a056ef9439a8e9959f370c187438b41bb2e3b07faf0da884833c951cedfcbd93115da8b912f552bd45e6b4df4b90d6d881af4538382b0d278ba3c0d195358e01865031108384d02fc803b6e48c055886ae6a7b28fd5a2c39c0872681bf9c28e4ff52a8ce396ad50f5daaa81e0f8ba6788eac96dbb01bf91477dfeeb0bd53d24cbdab24338244bc8a4fee76502c6cd960f5ba3260cbc882bfca4ff1a95033db3534622db074f52b5e7129bcbe0db11c5ab17267e9ffacf7a2ef8d53723876ed8", 0xf4}, {&(0x7f0000000b80)="d7cdb41e451e50ff1dfc25cb38d47138ffd34188af958c7be04eebb7de3d72517b28e0b84483b5521b139f602eba54862af96fadc3db1f04f75c79a826ec011b28c0784621094907a2cd2e1068747e54a49b0b612b66049322c2c2147a02399938", 0x61}, {&(0x7f0000000c00)="482722c0afdc223eaeba1191c62c14e8f200145dc49d7f28fdfb10c9ad6d50b62c15326c191657fa3127e70488387ca1d0e8bbe2cec52e8c45b3f0d6555a9cd5785870dce87ad489d305210e5034ca76d2fd999e0af5c3db657239f2d2de699a58722b1b5013c7bbc74783", 0x6b}, {&(0x7f0000000c80)="b993d2d865c6eb63aa9c8c83838af57149d7927686a6d93603068d06873fc920fd950e5e547f769dd771afd6e136e50cc9845f63f1410ee8b6a55748c7b824bed8ac8b4962961adbaa602430011570dbc5c813b63e3590523714059534a7a6ddd9a04dedc7de0bf886fc804070a2b9fe5a393825365ae298e39a134a6d8580d734ab4e08aacbde9afd61233354d8086d579809", 0x93}], 0x5, &(0x7f0000002380)=ANY=[@ANYBLOB="10100000000000003a00000000000000749dee822c6eb8b5a484243aa5545e7b9e880cbcd68d3bfd2f57c956d73d1aff31c6a03300021a46df31443695e04723c716fac4587c6a1151704874eff7d04635251dac21c1aac845adbae9dfad9f7f8af64a3069e793c303316480668c76558f3b1213af3835a46ba7d32d4a959151e0bc8f5314d30fabb83207732a361acb140c749be9eec2d3f89255823013235fce4e8ae908d6606e583efa999f4ff1e6cb5accdc61dd4ce326db7031fa0af1490aa1508a31c799e0a8407080d327222d64f1c4b7b559ca948fea684bb710aff52f8f87608893bee7094ba79766ee42b4cdd56730fb6d7e6907bca553ab445235f67aca9e07c7c804653636956c54ac4af5062e969432471b93bebe1f2bd494fe71b821a3d447825715d33e78c0cf4ecd2861632bc0cde9b5a55643ca71fffd924553cfea3ba3cf485748a6c28b397b5384f27dff577b3f2c25cb72820d27754ab17d4c3f6cd09ecc06f468cc7ba6dab4687cf65e8d2d8513ec002d744913fac60bbc50457fc94e8d9e9dceba31d2cd0ef2b1a54b36e2993e38fde6f7498091b7a08c65e477d269965ccc9777908148edd5a04b248713cb244abeb0338c722d5b8124cdf7f8b2f0139eee22f4ba139dabdddd79b6511c2a437d35c4f40ac8996c05f6674b5e8f8fce9a1df0ef8b8030ad8a3eeddcdfff309658b92289cd4bfa0b392c3859710956350f5f046d0bd0032be182c32c3521a272648a6638abdd30711209bd6dcb24857e309854f2c7d1b16d9fbea5e982e03f09539513ae1b7acea80761879986a266cd4fb9a0b050f2d7313e935b7ab51a3ecdaa7b7cfa9b93a7d3ec8e0bcef887561facd2a5cbee2ce0e9e8a0ff79ae248643502b2e0d21d921783c7439cdebc92bb46ab55604b264122b8dacef51489a0f2ebee3d3639a79f69425ed75fdc8a0f3ebae8071d5ef1ac6c6dcbd3986a6229aae4317b577243001d3e41fd1b50c1bd7ce56af3e17c002c7bc9794377c302d565cbb711b6c894c647e676c308d8960c8e37684a8ee2a2493ad797992513a20628860f09f2103aee0fefb1527f6b2406e88d45253c1d8bf32c66605099936beec7c107f90fe77fd1a0ecc320cf5f4ce014bb2d40a3960ce0a9462d7c173c696b9156998e30b0276c7e0fd271f2e7c41c74954fb2d799c5e2e9c7e6e928207050c6e89f50c4cf5a227ceac093262427d1ea403e010e84f47dd9dda1a249f013fa2eade6bf2d0a0822b51a20944d4c0317b9b168fa3eedd6fa74ada9fa0f99ad57ed10bae80c804aff7587e5c972bf517e3677664a55e9d15cc7a87a2edcd7807cd19b621027ffd6465784429fda55645eea1a2abe3301dfee4694fda7e5fe2912ec3ce8324882bbac9d379e8d9b7457ebaf5f98a2b4c3f565a572f0cb8676f239f00e15c7bf26fbcdb343ade5e0a23a3b6be54f7672fa24c9bb59e473aaf097d64b9468586df33051bb3ea34fc014c27d28b6b32734b1215a9f7eb45e85d121f127f8076c81502f93a0f8bca231f02566453325a886e8c3224511eea03ff2eacd820027684fbc4976968c9b7c8048b5d3a1ccd8d62181cf8cd095170366784e5f0822e6a19bbc67fb9f0a79788f0c486bed382325db9a251f0ca0f48f3c6b5003acf31293dbe68ac18aeab6139279c01a2ce8bab5fd1badbe136ebd9d64c4533e58ee2f25f40f245e9b9089370e554cf2779eb5bedf1abdd4e4d1844a2acc9dc883fcdd0b9040a3f7720dd89a76a280e4699792587d6ec3de65680693a215279d8cdeec6c635eb7f44a50a8007630e4d8153326b0c3683b8f27364052cbe51fad50a6e8c5fa41f7fd570fc47cae14cba69859d46e2fbc2b24722b02d2fa2838dfd869ffd97769310631cd272beda0389032965f33a96a7b3891d1c5d3f64dec444d17b8c1c6c31206745e0b53f9d35ac7256385cbbf65dd06dd251fec278da4a9c5e8cda1636069a3b5e652b358630a25739a4798ad0141bc8680a4e867e9c276b653e60306932eef12f766f087c4a8fca5fa3da1c9748961d3ee4402ca96f2cc497f75473e1aa8d3f1d3c18ca63d8e86ff2dbaf88d0e3c3d42d337225f7b905e5dd2c8d74d62ef1575d1963dd45789ece70bf9773b28951c07e82423fa7df5248faed8b85e49564b31794303935bc22de7d2c8cdc92b0732131728388d47cc56f84d22fd071aec8e1ef18bb4a1a60f4a5b93b8c8b430d6f5a53cfdfd9f9a51b3d8d0dc801acce3c9b21daf6abea977d1729d3df53f2cdc21d1b8442965ddae4e67f1bd5b016cae192e8283f00f62333bbac011ed8b822d067a1f5ea33a3567b32f9356b62d6aa48046ad49d269504457d10a99eefbf2df2df24bb774a4805b1191f4fa672c4e09fe6eb880ca5ead1ce81f4d4cb9354bb50d9f42ea51ce09c4d064f5a677186ff114ee6426f9e67c53cb927b0144d41ebfcfd7585c0febae6065388aea12e41c08a5a5c1df8f8e3ca3b384297cedf65a03e394a24ce631815aac80c2f28438b6135b3f9a51f43e2766afda7cba767661a813e8964d9631fc49f153ebe1fd1c54cb9069217c753af4e68215c757d0c1ebfc70c839ce298d25a2dc45fbd45cb0364eaf802bef8ed1f931e41c564fa06e7034fa5d5432c4b5864704b06ef99153f721268289c8ba6a5ab5c3718ea280b33cebc55f6ed54fd51f0f83d2a3960c2f738f74064e9bfcb805ebf01d03f18672588f26ab5970340a92301cc1d0d411483d0910fb2977a514ed108da7f13893c1a786abd0348c87083ae16a0fd80f137c4742296b9aa6d42528d0fa33eab155ecf576de39fe504e878b1619a4601c74b54db265a62a0bb472e5d3d40f7013872435d89f365aba376940a36a176a3c7381153916db0ba2c4aaea7df096be74cc08b227f73973ad1c9b30f3a02f5fc3f8912f4599f7aa22e3d3b083392f0ed46efb48821e639043cbf0db533464deae9533b10162425e67a281171299d84f631f8555425687b44fe9fcd71db192e51e9de9c4bb66639057d62087b42ed7792cc2cc5b29443daab2460236a1ae00947ba9abafbafac6eb2376f5e4595b278b7c4a4cf66934b1043c2b9709b9c4d0e9840c43561231444ab43eed8273b2a9ffc6034e246eead93f52ed72c32b787f654c3a007fb0a52e54248be93b66ac2a11b59aa5a95dcc48ca4dd1198cec009d9aa0eeb09185bd7b83c0b9aecbe2f7144e4f1867947bb4b16daeb034ce0775d8f9d74fd53e244757b71508d48638c2b7641361cf3622c869b56d70de7fcad2f64d359d3c09c7065b507d8388ef0c861b30a4980740ef1cf243ba0e923425bbb40911c88b03fe37d0431fd1f8a49ed76de1cc94ef479496148f34a923dbb3935cdac39bd598b081f0d9b88e115376f83e4d6b850f91e8a40ca13699c26a79081ac966391787fb9265ba2ffd3af8c8b77558654d95982083348504b0ac98b0af56fbe82c709ba5f950a0831e14d8fdc61b1099f28c88506f95771f79c524872411a3812a0a6f4ae164a1f9bd3838869d0721f60f76ec350013f39409aae8cf495fb01de50e352d540ad4b705d7058cf9048f1113474fb83116fbc7cb5bdee8a4c7e86f975560b576de3902b39d554bbf67119da8e75bda047bd43e2d43c5e0389ac6879fb9115f9e6300998299bf79fecdb7932282a2d800f4abaef50eaf08b0e637a559e5c9b685470df82cf46618352bd79035fe539324829a7a8922ac1eb6419a554dba286e7fa1b753ef9391dc5a51d196dc5dfd8ffa059df643cf05039657f2360ca4552bd05e3f950a5a45939816ef385181a9965f22b97610c89e3d2d9613fda8fe970a72d1ac2795c7bf2298feba1b6d81c2f23dada08a8fe5328a80bb39be83b737eeb3ffed5d300179536ead3e664d7523a3889c26e80bf3e9d6873172cb91bf21e6fbeb477a99ee0443f6d4cc0a6aeb7769ee6846f05e0f90ca5dd2989b647959810c8bdb3aa55dcf8182948dfbadbbb44b8eb621168586c8ddcb24b34b9e18a801086890601768aa621a4a50512d4906dd9858a0e1b31f75b007996e9653b408605384c5555dc0f1962d0f35400cee517e77e2e5be3cfb0bdbe13f03276564229aeadba7935f0f5b6ec61a550c2473dce0c8350f28326f5e74c297876ec2d62503eb5a73218f32cb9b1ed6fc8a4d5d93622e24184e274e8ff147a128a7b3657fd176a2429b6eb557759b1f52b8dce0933d1f0216455b618b528f63b255e1063254e317662e9bd35c3ab8ce26bece159febfb5536872f9a8a816e2803777dd570c61932bc1422f4bca14befa6c06129efb51b80fff81722aeb39af2bcf87af69170ba8eeb5515270d66e57e7c8b17fcc9c926839b44ffc9d4f3933615b8060d0695b030bfee4ebe0d55d4fd1ac2b28a4db8250bfcaa1af037f3b1ca68356f52666ae87d1fa6c8b8ac6ec496ba81dda37c49775f5c90b12cb9965e156ecc957d93c85ca0f5a95b8246bb42f2ccac0ec14e2706cf19c4d714ef93f98ca1f4b535d36b43d8ce91c1e1e94d327a3ab9f175ae260886f978302e4b8c81567c4660071418a92c2c35429d56b52d2f416ea61708a464012cdbbe1ad40db735649062f55f02eed66605d8ed4dd5a4510a8ea3ee963c5a810da9fda0d6f282ab0423631341703a2afa30d1652e22984d6064f9276bcfe8c2a8dcecb131ea376fdd4fbf08345296c7a885bfc65537a2550e2a7a4df8cf2e6b096b3a47b18e121f2cf0425fdb7dc913d0cb56792d3390c19c632d29b08f31d718bbd23894949757b8ac71e46149a36c7686982f442ec87dd4d320d6bc44c32f6d6db66982fa415d322efb372478c54289f1ee80be4c2aec110c7859b9227e7dc77b20245001dff64e6ac4b6d2468fa73f212d818709ee49edcf3dbc136bc3f4ca81a137a1f0d6a1108e6df9d601baddec574921c4688bb6a67934c1858c0b9eea59304e7947e42046a6d2c8b1e3700ba47bdb19799a281c3199044fe62737fdfe98752752006d3bcfcd64c8e27186cda29cdcb93bf5c98f354180f6756fa44269118f616675c3c0f513ca78f8e2723b6e17923426dcf98a18ba3052354354ad0cf3f73b18d49b64aaef20bc92dbd68499a54e96827a5c48ddeb05e23bd6d2ff9af065d0fa8b6b94491a389defd9c1edfb3bb08ed9e0743e1829d651998cca93548db936d2df1175665fd9b25776c3ae747294c3c07878bdd85a1bb4f05afc509779cbc3744172409417198eff69532e6c16392d7a34fefab900e5126ef7428c515a21657548c4568f4d219416fbe8d3ab834a4d9666979122fe21ea335d51076ead73f2b8228dea733be6c899d23cf13845eb7709cc4ab0dc557810ffb8b289c07b90cabd7326ca00e6dee7bb39fff68fc07a5e74948a97e5b14312feeaf88045e2cb1845bd4c45c5a558951f2e9bc087abbee6168395052f9b3ac31d6cf39f071c326631de026e2a7bbf8f552419bab2e5e13510cd3595f35eddb6e8fd6ce42e875625991525606c40fe575275f1cd307c6583f392c8cc093231a46dd89c7abad7fce2790140518dd7220ab42044732914540e6e75241fafe09dc27175d1dd19aeca4651e29795ae2ab9f732b96edd2bede2e8f705130ea3c140da1e21407bea4e4eddc2118cb7973ae5565c0263c912e97965844db6a929a023ede8da1b464161eccd47d7b3c9b01e25566308afdb095d2e223ee30eaef6fb95affb085ff47c586a4b78e9b2992b910c5a677f6ff1bafe0d27c49bbd04894ea2e2437f2eca8830f82c5f5b359b2653ab2914b9b8e4d78f048f80c163e2befa76de211ab10000000000000000801000006000000b0000000000000000b01000000fb0000a43f73ecb95b68d121853381d43457df8f5635817b0286fbb1f80fb40822b62945aa1ed3773b706b86aeebfddcc09c753cdefd3ab3a96e0140a924d1c13bf629b590bbe29674e08dd5177105f7ce309e9df0ec09d309e57fa6b8258454cb0ae2b7570b40cf5ce15b8f9cd81beed6462a95c18ec6f30a3d00f4ba79acd18be464fa4e17d9c8ee326a5c846cc104c44a5c32cf8f3527b64ac888fc8d625bd45b00a8000000000000002900000009000000744c5209273a133a2c6007a85195e36bc0ab585e47077d47b9a10b37b41aa0bb14bdc63826098e23c51bae2b9de3c42da5dc28e9e82e6ec5899583dee7665c127824b71cca21eabe72ea5c300a05e1be5cc052ef3f478cb8031341353a579173913bbace31f2723fb2ac61676cfa68391d8dd9681d7c015dea6a66b16ab20fff0f24c13864f77a85a0ffa72569252c730169d90000000000a000000000000000100100000700000078a7f2b16c4a35df1c1c0b5d4bb4d7e8b67c390475845603a289fdd2dec87862e0b4c18f2d87dde61d61e97b67f0b6f6bbfd2e9663315b2703d2ea29e4a80dd19405aca13948d4619fe97cd7c037840af3799cedcaada8ec178c5630d86b5c3e13689923e832c879fdd5633b6ddb315ef003c751537be17a796bfd77406da98a669ca20fa498347f6000000000000000c0000000000000000a010000ffffff7f541e7c027320bdc7598cb93e972944c4a9fc67646b09c76beaea0f71640ca84b07db0afb0bda2e2c455ce18f052984e2650a7dda711e7214d8e7ad3156ad23710d3617edc3bbd49dda869e5fe710bc2c0f9e5ed1d6b4c2251cf8fc05415c78006cb9447a35a575476d893715fd8f0f800c5d3ff038a8875cd075d5600128a0d4c70b3b7ec05c7e49050f40b9d7016c854ab8aee232e0325459cbff5e91acd14336aa930f630b074fde2c260000000000680000000000000084000000ffff00007bd3d4aed173fb84ca8b547a38b957ac6598c9910df3c17cd88ab47d433aac7542bdba21bfa73dfed35cb42d6f7c3c3712b980a0a06d415228a40e2c8c3e3477e68b5a561cbc762318e35a210d9430e5a3000000000000000000"], 0x1340}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="1869d83442b0f3ee0fd781c793b6a61f7d5870bd2d46859e45000404d959fa542e161d36373a35d496f1c5fbc6d4dc41ac12fa222abf7d4b8d024dec6b6ae9a9333fa61188d682c97869638d8cede416f7cdcd965f494604045e5818ba80301c36da2f39a890d278778f18d3594f61704ba4cba93bbbc9920acc67d392635ba2f9fdadbe7209e0b0720aa8f3f58e46ee6735af3f1d4b9905c37e0e5ea1d0927b9aa10d95040baf74485153d64316f4", 0xaf}, {&(0x7f0000000e80)="e465764291d021ca23c5851b1ca8daa0e796b1c5ed913f62e1d1cd069249c41f6287875b0cb30f55f67f4a4e4785231c344530945f3233f310e81704d1c86855fa8f3811354b060cec37fc906490d8c2026031e245193bd81cfe25a64c549b2ff52f651b1b4f2d23401beb7ce96e997b2ed4f99a21b6fc3604cc562cd4dccea7811bad78a8df5ffc8d670a6a6c11c00de5f1de92b6ee4368597fd616be082635b3c6ce502f0f82b7018cd15096e17d5b38d75ecb34301375c364c005880b2732e60967d5d52e59079441583cb56ced2615ea1c4f93b03f3b2314f7037191bae6c1689210e4664ed1f2b9b0", 0xeb}], 0x2}}], 0x4, 0x80) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket(0x11, 0x800000003, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0}, 0x0) accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x40, 0x7f}) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6874e56cbabfc45a, 0x28011, r0, 0x0) 17:22:58 executing program 3: bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:58 executing program 3: bpf$MAP_CREATE(0xc00000000000019, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:22:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) [ 1131.501386][T22357] IPVS: ftp: loaded support on port[0] = 21 [ 1131.536136][T22301] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1131.569990][T22330] device bond259 entered promiscuous mode [ 1131.604204][T22330] device bond259 left promiscuous mode 17:23:01 executing program 0: mmap(&(0x7f00008a7000/0x2000)=nil, 0x2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x8f7bc000) unshare(0x10000500) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) 17:23:01 executing program 3: bpf$MAP_CREATE(0xc0000000000001a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x60000000}, 0x0) 17:23:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) 17:23:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0400001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1134.644883][T22455] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:01 executing program 3: bpf$MAP_CREATE(0xc0000000000001b, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1134.939797][T22461] device bond260 entered promiscuous mode [ 1135.007508][T22461] device bond260 left promiscuous mode 17:23:02 executing program 3: bpf$MAP_CREATE(0xc0000000000001c, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:02 executing program 3: bpf$MAP_CREATE(0xc0000000000001d, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:02 executing program 3: bpf$MAP_CREATE(0xc0000000000001e, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) [ 1135.735172][T22455] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1135.759132][T22469] device bond260 entered promiscuous mode [ 1135.795441][T22469] device bond260 left promiscuous mode 17:23:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket(0xa, 0x1, 0x0) close(r1) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) connect(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, 0x80) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x14, &(0x7f0000000040)={r3}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 1136.356457][ T39] tipc: TX() has been purged, node left! 17:23:03 executing program 3: bpf$MAP_CREATE(0xc00000000000021, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x65580000}, 0x0) 17:23:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0600001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:03 executing program 3: bpf$MAP_CREATE(0xc00000000000022, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x81000000}, 0x0) [ 1136.608430][T22554] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1136.633151][T22555] IPVS: ftp: loaded support on port[0] = 21 17:23:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:03 executing program 3: bpf$MAP_CREATE(0xc0000000000002a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1136.878348][T22557] device bond261 entered promiscuous mode [ 1136.958032][T22557] device bond261 left promiscuous mode 17:23:04 executing program 3: bpf$MAP_CREATE(0xc00000000000072, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:04 executing program 3: bpf$MAP_CREATE(0xc00000000000079, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:04 executing program 3: bpf$MAP_CREATE(0xc00000000000084, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1137.519307][T22567] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1137.558079][T22554] device bond261 entered promiscuous mode [ 1137.630996][T22554] device bond261 left promiscuous mode 17:23:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:07 executing program 3: bpf$MAP_CREATE(0xc00000000000094, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x88a8ffff}, 0x0) 17:23:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) 17:23:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0800001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:07 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000140)={0x425, {{0xa, 0x4e21, 0x0, @empty, 0x1}}, {{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x19}, 0x9}}}, 0x108) r0 = socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x40840) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 1140.387449][T22646] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:07 executing program 3: bpf$MAP_CREATE(0xc000000000000b0, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1140.455765][T22652] IPVS: ftp: loaded support on port[0] = 21 [ 1140.641610][T22653] device bond262 entered promiscuous mode 17:23:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x9effffff}, 0x0) [ 1140.689247][T22653] device bond262 left promiscuous mode 17:23:07 executing program 3: bpf$MAP_CREATE(0xc000000000000ce, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:08 executing program 3: bpf$MAP_CREATE(0xc000000000000d4, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1141.227735][T22666] IPVS: ftp: loaded support on port[0] = 21 [ 1141.295116][T22669] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:08 executing program 3: bpf$MAP_CREATE(0xc000000000000e2, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xa4070000}, 0x0) 17:23:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) 17:23:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0a00001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:08 executing program 3: bpf$MAP_CREATE(0xc000000000000f0, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf0ffffff}, 0x0) [ 1141.608115][T22761] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1141.712780][T22761] device bond263 entered promiscuous mode [ 1141.772172][T22761] device bond263 left promiscuous mode [ 1142.402103][T22770] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1142.456772][T22770] device bond263 entered promiscuous mode [ 1142.501615][T22770] device bond263 left promiscuous mode 17:23:11 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e683f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, r0, 0x18}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xffffa888}, 0x0) 17:23:11 executing program 3: bpf$MAP_CREATE(0xc0000000000010a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0c00001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1144.887844][T22856] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xfffff000}, 0x0) 17:23:12 executing program 3: bpf$MAP_CREATE(0xc0000000000010c, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1144.928586][T22858] IPVS: ftp: loaded support on port[0] = 21 [ 1145.170966][T22859] device bond264 entered promiscuous mode [ 1145.229005][T22859] device bond264 left promiscuous mode 17:23:12 executing program 3: bpf$MAP_CREATE(0xc00000000000114, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:12 executing program 3: bpf$MAP_CREATE(0xc0000000000011e, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:12 executing program 3: bpf$MAP_CREATE(0xc00000000000141, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1145.860886][T22856] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1145.883819][T22875] device bond264 entered promiscuous mode [ 1145.923814][T22875] device bond264 left promiscuous mode [ 1146.234884][T22925] IPVS: ftp: loaded support on port[0] = 21 [ 1146.889353][ T21] tipc: TX() has been purged, node left! 17:23:14 executing program 0: unshare(0x40000000) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x13, r1, 0x2000) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:14 executing program 3: bpf$MAP_CREATE(0xc00000000000148, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xffffff7f}, 0x0) 17:23:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0e00001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:14 executing program 3: bpf$MAP_CREATE(0xc0000000000017a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1147.192555][T22998] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1147.327976][T23000] IPVS: ftp: loaded support on port[0] = 21 17:23:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xffffff9e}, 0x0) [ 1147.447754][T23001] device bond265 entered promiscuous mode [ 1147.544334][T23001] device bond265 left promiscuous mode 17:23:14 executing program 3: bpf$MAP_CREATE(0xc0000000000017e, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:14 executing program 3: bpf$MAP_CREATE(0xc00000000000180, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:15 executing program 3: bpf$MAP_CREATE(0xc00000000000184, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1148.034634][T23019] IPVS: ftp: loaded support on port[0] = 21 [ 1148.168903][T22998] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1148.196502][T23026] device bond265 entered promiscuous mode [ 1148.220067][T23026] device bond265 left promiscuous mode 17:23:18 executing program 0: unshare(0x44000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:18 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e683f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, r0, 0x18}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:18 executing program 3: bpf$MAP_CREATE(0xc000000000001b8, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c1000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xfffffff0}, 0x0) 17:23:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1151.655659][ T25] tipc: TX() has been purged, node left! [ 1151.688294][T23098] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:18 executing program 3: bpf$MAP_CREATE(0xc000000000001c3, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1151.764725][T23101] IPVS: ftp: loaded support on port[0] = 21 [ 1151.851429][T23106] IPVS: ftp: loaded support on port[0] = 21 17:23:18 executing program 3: bpf$MAP_CREATE(0xc00000000000240, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x40030000000000}, 0x0) [ 1151.927613][T23102] device bond266 entered promiscuous mode [ 1151.990212][T23102] device bond266 left promiscuous mode 17:23:19 executing program 3: bpf$MAP_CREATE(0xc00000000000258, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:19 executing program 3: bpf$MAP_CREATE(0xc00000000000266, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:19 executing program 3: bpf$MAP_CREATE(0xc00000000000268, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1152.630191][T23098] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1152.652377][T23123] device bond266 entered promiscuous mode [ 1152.679652][T23123] device bond266 left promiscuous mode [ 1152.870437][T23115] IPVS: ftp: loaded support on port[0] = 21 17:23:23 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0xa, [0x1000, 0x8001, 0x8, 0x200, 0x101, 0x100, 0xa64, 0x1f, 0x3, 0x40]}, &(0x7f0000000040)=0x1c) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:23 executing program 3: bpf$MAP_CREATE(0xc00000000000280, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c2000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf0ffffffffffff}, 0x0) 17:23:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1156.981383][T23269] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:24 executing program 3: bpf$MAP_CREATE(0xc00000000000288, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1157.163575][T23277] IPVS: ftp: loaded support on port[0] = 21 [ 1157.278944][T23274] device bond267 entered promiscuous mode [ 1157.320473][T23274] device bond267 left promiscuous mode 17:23:24 executing program 3: bpf$MAP_CREATE(0xc0000000000028a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:24 executing program 3: bpf$MAP_CREATE(0xc0000000000029a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:24 executing program 3: bpf$MAP_CREATE(0xc000000000002a8, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x100000000000000}, 0x0) [ 1157.951104][T23269] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1157.981384][T23289] device bond267 entered promiscuous mode [ 1158.056589][T23289] device bond267 left promiscuous mode [ 1158.247156][T23305] IPVS: ftp: loaded support on port[0] = 21 [ 1158.764904][T14739] tipc: TX() has been purged, node left! 17:23:27 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:27 executing program 3: bpf$MAP_CREATE(0xc000000000002b0, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:27 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c) 17:23:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x200000000000000}, 0x0) 17:23:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c6000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1160.690452][T23393] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:27 executing program 3: bpf$MAP_CREATE(0xc000000000002b8, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1160.736067][T23397] IPVS: ftp: loaded support on port[0] = 21 17:23:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0x5, 0x0, &(0x7f0000000180)) 17:23:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}}, 0x0) [ 1160.941642][T23400] device bond268 entered promiscuous mode [ 1160.979082][T23400] device bond268 left promiscuous mode 17:23:28 executing program 3: bpf$MAP_CREATE(0xc000000000002bc, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:28 executing program 3: bpf$MAP_CREATE(0xc000000000002ff, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x300000000000000}, 0x0) [ 1161.534692][T23393] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1161.561513][T23400] device bond268 entered promiscuous mode [ 1161.624885][T23400] device bond268 left promiscuous mode [ 1161.760822][T23473] IPVS: ftp: loaded support on port[0] = 21 17:23:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20050040}, 0x42801) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:29 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @loopback, 0x3}, 0x1c) 17:23:29 executing program 3: bpf$MAP_CREATE(0xc00000000000300, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x400000000000000}, 0x0) 17:23:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3cf000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1162.505416][T23530] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x4b) [ 1162.579531][T23533] IPVS: ftp: loaded support on port[0] = 21 17:23:29 executing program 3: bpf$MAP_CREATE(0xc0000000000031c, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:29 executing program 3: bpf$MAP_CREATE(0xc00000000000330, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1162.711675][T23536] device bond269 entered promiscuous mode [ 1162.778689][T23536] device bond269 left promiscuous mode 17:23:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) 17:23:29 executing program 3: bpf$MAP_CREATE(0xc00000000000344, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:30 executing program 3: bpf$MAP_CREATE(0xc0000000000035a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1163.318849][T23530] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1163.360761][T23563] device bond269 entered promiscuous mode [ 1163.384672][T23563] device bond269 left promiscuous mode [ 1163.547774][T14739] tipc: TX() has been purged, node left! [ 1163.567055][T14739] tipc: TX() has been purged, node left! [ 1163.592081][T23533] IPVS: ftp: loaded support on port[0] = 21 17:23:31 executing program 0: unshare(0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, r0, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:31 executing program 3: bpf$MAP_CREATE(0xc00000000000372, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 17:23:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x600000000000000}, 0x0) 17:23:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0006001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x800000000000000}, 0x0) 17:23:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) [ 1164.155406][T23668] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1164.220688][T23670] IPVS: ftp: loaded support on port[0] = 21 17:23:31 executing program 3: bpf$MAP_CREATE(0xc00000000000384, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1164.408344][T23672] device bond270 entered promiscuous mode 17:23:31 executing program 3: bpf$MAP_CREATE(0xc0000000000038c, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1164.461049][T23672] device bond270 left promiscuous mode 17:23:31 executing program 3: bpf$MAP_CREATE(0xc0000000000038e, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1165.028688][T23677] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1165.056563][T23668] device bond270 entered promiscuous mode [ 1165.097954][T23668] device bond270 left promiscuous mode [ 1165.346969][T23674] IPVS: ftp: loaded support on port[0] = 21 17:23:33 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f0000000040)=0x28) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x30}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0x80, &(0x7f0000000340)=""/128, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:23:33 executing program 3: bpf$MAP_CREATE(0xc000000000003c6, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x900000000000000}, 0x0) 17:23:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000a001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1166.213267][T23809] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:33 executing program 3: bpf$MAP_CREATE(0xc000000000003ea, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:33 executing program 5: ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f7, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r2], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x11) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 1166.346493][T23815] IPVS: ftp: loaded support on port[0] = 21 [ 1166.363081][T23814] device bond271 entered promiscuous mode [ 1166.474741][T23814] device bond271 left promiscuous mode 17:23:33 executing program 3: bpf$MAP_CREATE(0xc000000000003f2, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:33 executing program 3: bpf$MAP_CREATE(0xc000000000003f4, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:34 executing program 3: bpf$MAP_CREATE(0xc000000000003fa, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1167.084988][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.248492][T23809] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1167.304242][T23870] device bond271 entered promiscuous mode [ 1167.322813][T23870] device bond271 left promiscuous mode [ 1167.420438][T23878] IPVS: ftp: loaded support on port[0] = 21 [ 1167.872559][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1169.528150][T14739] tipc: TX() has been purged, node left! [ 1169.537782][T14739] tipc: TX() has been purged, node left! [ 1169.549724][T14739] tipc: TX() has been purged, node left! [ 1169.558144][T14739] tipc: TX() has been purged, node left! [ 1169.565062][T14739] tipc: TX() has been purged, node left! 17:23:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="8a235432c9b8a9622c267f73e73e6f80cdb0f42e9824c17786ccd74007312451bdfeb61ecadc0a5b161f2b01b32d46ffe6262c7f3d3028f5d853e3e6974f8789cb0d913193ed87bbe903c95c6e5794efe2ef1b9d50b779403860e0bae7e05c5fb1bee2e82a3220bb800be14d28c706d59ee2c316cafbb236ff5d2696fd5482155104ded0874ee9cfeebc813d09ac1270def9e817b25c36f9a07be0809147b8cd4f99631d3856ec7eb8bf17") ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:36 executing program 3: bpf$MAP_CREATE(0xc00000000000500, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xa00000000000000}, 0x0) 17:23:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000c001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:36 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 17:23:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:36 executing program 3: bpf$MAP_CREATE(0xc00000000000600, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x44, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x44}}, 0x0) [ 1169.939368][T23935] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x8000000}, 0x0) [ 1170.004007][T23938] IPVS: ftp: loaded support on port[0] = 21 17:23:37 executing program 3: bpf$MAP_CREATE(0xc00000000000700, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:37 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe000000008500000011000000b70000000000000095000000000000009cc6b3fcd62c7d4dcd38975d43a4505f80fc889f3c530cf08e467b592f868ee3b0a434df080e8c1bf176dc3d09138adb2a6b2fc9761df79a15682683df42eb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9884971c7c56f0979bd10e97163c1d6d0e196bf02f46c7953a02000000cbe8f9de9c92a2819bd6d46ba1517d8ba3c00cb9bd4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263f63223b7b80197aa743f7555193161f45346b100000000000000000089e399f6609876b5888ae4718bfbc02a740675298b79dc3e136a194e533583412dff048fc21f28bdd3e26a5ab2728a0481e9f0da43bb6cfb851ce5a9ff19ffcafe3e64be033c9d2f002cc93c5328c443bb8ae4083420336b010000009fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3bd54984dfa276ad3d7b9ff337860d94819ba09749765750db59c546f614ce821ec7400f06489cc758f3c30ae48a67fc8283e316f2b2ec3ace45b1ea00f869799dab4d39488f0a2b6ec1e42f1ec5f4b6352fea45350c1a761c966c42dfcfb1bbfe66affe9958e4fdb7f31a92d11dea22a998b2303073a06dac887f60d4cb5b61e6c6c50ec8f2f4676311258ddf2f58a1aa4180e3316992e33384d73c1644718efb1f22c3a7d400104d350df3f59bfd963fb611a84574d5460b6d6ea7a8d26bd04172ed52440bcc05b598f695cc27e4b4cebbcc347093403ecb3f724d2f21ae2b1bb46794d54e3f3f05d521e2429038b44ba97361eeff77d7f449ee025765cbd076cedb9f7cc4653dbded27da6f8288319389b3a354fee1b2fb4f9296b71a3972874e426943efaf3e1be84e0ce26329f5f4a0606dd4c215fe447a05b2e0c9f8b083ef7f20821128515635b5194fd2674a1ef05a767310c2924644e7f3d495710000000000000000000000000ddc99e42fb6850cde32d31cddeaaf720c556d521fa4332b84a3a3340c9427b2aa2cc84b432589dd6a0d82c766f0605784c030720a9d0154f3c3b94de2234ec7b6ff8102d76efb63386e000993203fdff05665b403b7fb21edfe58f900279b425f9f5228db8a11e8add152db0845750815c26dd77652b29f0b6228418a746382ce4f33af0a8c31ec99884c3a214ccebe0905cd87f91e9d436ba2bfdb038d0eb4633a4958cd3ec3c5fd179ca8efe3460707620e24fe437f1110cf9bdb707fca11602de6366e26d0e8d618613cffd12de229039fe35fdd696667c58f287be9490373092fc9506d21ca79cbab0f1047b218d98e3c187c1f3f0e195a788833b0fbda08ef39cec634ad9ff9563b445fbca33a653db3dca837baa9d53c235c35fac39757fd5fe3cf1c3ae39d68296d0ed12cd05dc31fa0e2b7bd9e83dea1f6ee596bfa50903e413628caa8"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="2b206d8c4843b3977b7ea49da2aa", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffff7f0e000000, 0x0, 0x4044850}, 0x4000801) 17:23:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xc00000000000000}, 0x0) [ 1170.268988][T23939] device bond272 entered promiscuous mode [ 1170.311124][T23939] device bond272 left promiscuous mode [ 1170.759529][T23935] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1170.789705][T23942] IPVS: ftp: loaded support on port[0] = 21 [ 1170.795890][T23962] device bond272 entered promiscuous mode [ 1170.815089][T23962] device bond272 left promiscuous mode 17:23:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="0c262c927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa030596aecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 17:23:41 executing program 3: bpf$MAP_CREATE(0xc00000000000900, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xe00000000000000}, 0x0) 17:23:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000e001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'veth1_to_hsr\x00', {0x2, 0xfffd, @multicast1}}) 17:23:41 executing program 3: bpf$MAP_CREATE(0xc00000000000a00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1174.424905][T24089] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 1174.541237][T24094] device bond273 entered promiscuous mode [ 1174.554917][T24094] device bond273 left promiscuous mode [ 1174.606748][T24103] IPVS: ftp: loaded support on port[0] = 21 17:23:41 executing program 3: bpf$MAP_CREATE(0xc00000000000a01, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:23:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf00000000000000}, 0x0) 17:23:41 executing program 3: bpf$MAP_CREATE(0xc00000000000b00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1174.853925][T24094] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c6558001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:42 executing program 3: bpf$MAP_CREATE(0xc00000000000c00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1175.177917][T24174] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x1000000000000000}, 0x0) 17:23:42 executing program 3: bpf$MAP_CREATE(0xc00000000000c01, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1175.357422][T24179] device bond274 entered promiscuous mode [ 1175.428118][T24179] device bond274 left promiscuous mode [ 1175.507080][T24103] IPVS: ftp: loaded support on port[0] = 21 [ 1175.969991][T24174] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:44 executing program 0: unshare(0x40000000) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@private, @dev}, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x10000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:44 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xffe0}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd0098a8, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0xb84e0000, 0x8, {0x0, @empty}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0xedf8, 0x7}}], 0x98, 0xa8980000}, 0x0) 17:23:44 executing program 3: bpf$MAP_CREATE(0xc00000000000d00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x3f00000000000000}, 0x0) 17:23:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0060001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1177.506813][ T39] tipc: TX() has been purged, node left! 17:23:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x4000000000000000}, 0x0) 17:23:44 executing program 3: bpf$MAP_CREATE(0xc00000000000e00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1177.567449][T24259] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:44 executing program 5: r0 = socket(0x2, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1c1c4e2100000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], &(0x7f00000000c0)=0xff79) 17:23:44 executing program 3: bpf$MAP_CREATE(0xc00000000000f00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1177.637225][T24262] IPVS: ftp: loaded support on port[0] = 21 [ 1177.790502][T24264] device bond275 entered promiscuous mode 17:23:44 executing program 3: bpf$MAP_CREATE(0xc00000000001100, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1177.856258][T24264] device bond275 left promiscuous mode 17:23:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1178.312703][T24259] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1178.408294][T24265] IPVS: ftp: loaded support on port[0] = 21 [ 1180.711093][ T39] tipc: TX() has been purged, node left! 17:23:47 executing program 5: r0 = socket(0x2, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 17:23:47 executing program 3: bpf$MAP_CREATE(0xc00000000001200, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x6000000000000000}, 0x0) 17:23:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c5865001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:47 executing program 0: unshare(0x40000000) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0xd2e46000) r0 = socket(0x0, 0x2, 0x3) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000004c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000095dffc)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x3}}]}]}, 0x2c}, 0x1, 0x200000000000000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200408c4}, 0x44b8c420b0ee52c8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0xa4, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x69, 0x4, "8d9a89a4e56317a797c91d57e406926b9fdaa01eed3ae2ad1d6dc13dc3c4490f77eb9500ac2e9259eabcdf636b2d59e9a4d2ba6cca2e2e063ea853cae52b3d6b7484b85f53a746d7ca1ff6a21398a71a51c13db6b108d7c658a05c00bdbb5749ada6ae09ce"}, @ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}]}]}, 0xa4}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000f0", @ANYRES16=r5, @ANYBLOB="daac27bd7000fbdbdf25180000000800070005000000680102803c00038014000180070002006c6f0000070002006c6f000024000180040003000800010004000000070002006c6f00000400030008000100ff03000008000200050000000400010036000400855a6337e43214009f02fd9e8a13e4dea28e7c9832f5630b92ad9d9f82ebe047280ddb3f6b09f04f1773d9f96f563ed3dd230000870004006650b3145e06f0b956f32d7d7179ecabc3175d134bf8469d783c7ac6a87ef569426a6d3bde1ce0276da13cacd1a3cbe18615c16e7d2f3b1d53ddb88f2ce4ed0006035a7242ca4500b3ba7865ff56f0d958a5ae9926b2df434d9f20188aeec16f1e5760df5c72c7771e4673ba6aecd4bfd77df1add361f2ad8823584b01991cbd50644e004e000400b720ea54a2ab09e2cb6b86b68e0dde0798e19b4acb365a1079023a52c7b3b9be21ad8fc07285c8deb2dd453f71687db7469bfd7da9519af03ff0885627908368621a01d3be546589fdb600000400010008000200010000809c000280900003802c0001800400030008000100ff030000060002005c000000070002006c6f00000c0002005b292f5b2d232f001c000180080001000800000008000100b20000000800010001000000340001800800010081000000080001000300000004000300040003000800010005000000080001005affffff070002006c6f0000100001800b0002002723272a292100000800020008000000"], 0x220}, 0x1, 0x0, 0x0, 0x28000}, 0xc0) 17:23:47 executing program 3: bpf$MAP_CREATE(0xc00000000001300, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1180.927737][T24396] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:23:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x6558000000000000}, 0x0) [ 1181.061931][T24415] IPVS: ftp: loaded support on port[0] = 21 17:23:48 executing program 3: bpf$MAP_CREATE(0xc00000000001400, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1181.117245][T24401] device bond276 entered promiscuous mode [ 1181.153508][T24401] device bond276 left promiscuous mode 17:23:48 executing program 3: bpf$MAP_CREATE(0xc00000000001401, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:48 executing program 3: bpf$MAP_CREATE(0xc00000000001500, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:48 executing program 3: bpf$MAP_CREATE(0xc00000000001600, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x8100000000000000}, 0x0) [ 1181.620119][T24396] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1181.669257][T24396] device bond276 entered promiscuous mode [ 1181.714522][T24396] device bond276 left promiscuous mode 17:23:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:48 executing program 3: bpf$MAP_CREATE(0xc00000000001700, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1181.820740][T24431] IPVS: ftp: loaded support on port[0] = 21 17:23:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0081001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1182.427939][T24513] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1182.616657][T24516] device bond277 entered promiscuous mode [ 1182.636617][T24516] device bond277 left promiscuous mode [ 1182.959893][T24516] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:23:52 executing program 3: bpf$MAP_CREATE(0xc00000000001800, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x88a8ffff00000000}, 0x0) 17:23:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00f0001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x2, @multicast1}}) 17:23:52 executing program 3: bpf$MAP_CREATE(0xc0000000000186a, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1185.660690][T24572] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:52 executing program 3: bpf$MAP_CREATE(0xc00000000001900, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1185.759511][T24578] IPVS: ftp: loaded support on port[0] = 21 [ 1185.837093][T24580] device bond278 entered promiscuous mode [ 1185.918321][T24580] device bond278 left promiscuous mode 17:23:53 executing program 3: bpf$MAP_CREATE(0xc00000000001a00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:53 executing program 3: bpf$MAP_CREATE(0xc00000000001b00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:53 executing program 3: bpf$MAP_CREATE(0xc00000000001c00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x9effffff00000000}, 0x0) [ 1186.465956][T24572] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1186.507576][T24601] IPVS: ftp: loaded support on port[0] = 21 17:23:53 executing program 5: r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000080), 0x8) 17:23:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:23:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000007300050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:53 executing program 3: bpf$MAP_CREATE(0xc00000000001c03, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xa407000000000000}, 0x0) [ 1186.817170][T24692] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1187.006725][T24697] device bond279 entered promiscuous mode [ 1187.040941][T24697] device bond279 left promiscuous mode [ 1187.367958][T14739] tipc: TX() has been purged, node left! [ 1187.400308][T24697] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1187.430690][T24692] device bond279 entered promiscuous mode [ 1187.467134][T24692] device bond279 left promiscuous mode 17:23:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'dummy0\x00', {0x2, 0x0, @broadcast}}) 17:23:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) 17:23:57 executing program 3: bpf$MAP_CREATE(0xc00000000001d00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xf0ffffff00000000}, 0x0) 17:23:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0002001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1190.091667][T24789] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:57 executing program 3: bpf$MAP_CREATE(0xc00000000001e00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1190.165755][T24793] IPVS: ftp: loaded support on port[0] = 21 [ 1190.180239][T24789] device bond280 entered promiscuous mode 17:23:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xffffff7f00000000}, 0x0) [ 1190.282680][T24789] device bond280 left promiscuous mode 17:23:57 executing program 3: bpf$MAP_CREATE(0xc00000000001e01, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:57 executing program 3: bpf$MAP_CREATE(0xc00000000001f00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:57 executing program 3: bpf$MAP_CREATE(0xc00000000002000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1190.933692][T24829] IPVS: ftp: loaded support on port[0] = 21 [ 1191.254142][T24795] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1191.515218][T14739] tipc: TX() has been purged, node left! 17:23:58 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8010, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'rose0\x00', {0x7d}, 0x369}) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:23:58 executing program 3: bpf$MAP_CREATE(0xc00000000002100, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:58 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}], 0x1}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800090000b70000", 0x52) 17:23:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xffffffff00000000}, 0x0) 17:23:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0004001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 17:23:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) [ 1191.907605][T24919] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:23:59 executing program 3: bpf$MAP_CREATE(0xc00000000002200, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1192.000517][T24927] IPVS: ftp: loaded support on port[0] = 21 17:23:59 executing program 3: bpf$MAP_CREATE(0xc0000000000238e, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:59 executing program 3: bpf$MAP_CREATE(0xc00000000002a00, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1192.094557][T24921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1192.151463][T24925] device bond281 entered promiscuous mode 17:23:59 executing program 3: bpf$MAP_CREATE(0xc00000000003003, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1192.198357][T24925] device bond281 left promiscuous mode 17:23:59 executing program 3: bpf$MAP_CREATE(0xc00000000004000, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:23:59 executing program 3: bpf$MAP_CREATE(0xc00000000004002, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1192.615803][T24972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1192.673235][T24919] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1192.706227][T24925] device bond281 entered promiscuous mode [ 1192.749587][T24925] device bond281 left promiscuous mode [ 1192.768727][T24941] IPVS: ftp: loaded support on port[0] = 21 17:24:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @private1, 0x8}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:24:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0xfffffffffffff000}, 0x0) 17:24:01 executing program 3: bpf$MAP_CREATE(0xc00000000004101, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:24:01 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="b41200000000000000000000000100000000000000110080dbfed5181f66c08d94e9c1de1722d976418867299bfacaec8fcaea310b547f9eccf33ad118ef7a92a027cb67b3143d528427c7676c40ed363478cab978f5053a99fd80933e651ebbb95ddd74f07afb8c25883d514090cce3b943af764e5b060d7944b9a786fd4bd66852e9f7530f54ab3808c72bb6000000"], 0x12b4}, {&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x12f8}, {&(0x7f0000002700)={0x1a58, 0x0, 0x0, 0x0, 0x0, "", [@generic="5a8d98d3dfec713dc5f7b543a982de8d73a50fafa71d0f4198b35381b322f40327f52c50b1e43d0f4d12ad8fabd5096d666db9eddaf4963b7e355416b9ff76ef5460cc929fd340b8a25fd67c938613ee6d2bf86508df8453c3df47ce4b49a766284652807c6cc98d9a0cbea2e9b43aa2cf2c20d153d80ed8d9c5018ab05b3df7ebb3439ad50538e48e2bf940d074d76d44190e2cb6a2a7b3b11df8f7d2b356926342922475ecfcefe245ecc19b6e9e6543af2b1711074a8e0caa3dfb7e3ae108011e8cc94de085d00df86c0a5dd3a6f5b48a5fce2fa662", @generic="20657cb44e863fb41d628b12cb02904f2420b6acd24572e3b742dbd256d7d26b9aa3e2219a45b48d6e1d4d012a47aa0ea750a0b0762708da6dd2fa2da8f2253106cd0ac9a618fddabb25910e3b8827deed4a848a9f5a7192d96d7cc9dc30434c9eb407ea60196062490ffb7b8e0d9b4a13afc27ab01fdc6cc543f3b22fba5e14dc0db8cd96f3d6a29f61bc09d5ad0cd47f0de26f7498ba92f67db5889d90", @nested={0x18d0}]}, 0x1a58}], 0x3}, 0x0) 17:24:01 executing program 0: unshare(0x7e020200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x7ffffffc) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) r2 = accept(r0, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000140)={0x6f, 0x14, [], [@hao={0xc9, 0x10, @empty}, @generic={0x80, 0x40, "ba828f80b0c044ca9e8e55482ccccbdd2980088c4a1142a7343791b8f4e813b395d0eaa5f3feddffb5482aec6621a5ec6cb71a38ad125b6038f7f26473d0488e"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x60, 0x1000, [0x40, 0x8, 0x80000001, 0x5, 0x1, 0x100000001]}}, @hao={0xc9, 0x10, @private1}]}, 0xa8) 17:24:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0006001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1194.993355][T14739] tipc: TX() has been purged, node left! [ 1195.016595][T14739] tipc: TX() has been purged, node left! 17:24:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x2}, 0x0) [ 1195.054123][T25036] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:24:02 executing program 3: bpf$MAP_CREATE(0xc00000000004403, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:24:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100013070000000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000000dff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000018000000000000000000000000000000000000096b8000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r4], 0x144}}, 0x0) 17:24:02 executing program 3: bpf$MAP_CREATE(0xc00000000004801, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) [ 1195.262843][T25038] device bond282 entered promiscuous mode 17:24:02 executing program 3: bpf$MAP_CREATE(0xc00000000005802, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:24:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x3}, 0x0) [ 1195.305467][T25038] device bond282 left promiscuous mode [ 1195.377716][T25084] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm [ 1195.421849][T25084] netdevsim netdevsim5 netdevsim0: Failed to get key data for SA table [ 1195.503052][T25090] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm [ 1195.546085][T25090] netdevsim netdevsim5 netdevsim0: Failed to get key data for SA table 17:24:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:24:02 executing program 3: bpf$MAP_CREATE(0xc00000000005a03, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:24:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x4}, 0x0) 17:24:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100013070000000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000000dff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000018000000000000000000000000000000000000096b8000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r4], 0x144}}, 0x0) [ 1195.889215][T25104] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm [ 1195.897515][T25063] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1195.939566][T25104] netdevsim netdevsim5 netdevsim0: Failed to get key data for SA table 17:24:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x14, &(0x7f0000000040)={r2}, 0x8) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x2, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x20004094) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 17:24:03 executing program 3: bpf$MAP_CREATE(0xc00000000006602, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:24:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x6}, 0x0) 17:24:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100013070000000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000000dff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000018000000000000000000000000000000000000096b8000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r4], 0x144}}, 0x0) 17:24:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0008001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) [ 1196.390823][T25126] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1196.401466][T25125] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm 17:24:03 executing program 3: bpf$MAP_CREATE(0xc00000000006802, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:24:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x8}, 0x0) [ 1196.439820][T25125] netdevsim netdevsim5 netdevsim0: Failed to get key data for SA table [ 1196.511879][T25129] IPVS: ftp: loaded support on port[0] = 21 [ 1196.537290][T25130] device bond283 entered promiscuous mode 17:24:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100013070000000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000000dff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000018000000000000000000000000000000000000096b8000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r4], 0x144}}, 0x0) [ 1196.668063][T25130] device bond283 left promiscuous mode 17:24:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 17:24:03 executing program 3: bpf$MAP_CREATE(0xc00000000006a18, &(0x7f0000000080)={0x6, 0x4, 0x7fff, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x40) 17:24:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x809, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x9}, 0x0) [ 1196.778745][T25173] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm [ 1196.809161][T25173] netdevsim netdevsim5 netdevsim0: Failed to get key data for SA table 17:24:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100013070000000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000000dff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000018000000000000000000000000000000000000096b8000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32], 0x144}}, 0x0) [ 1197.083681][T25181] [ 1197.089673][T25181] ============================= [ 1197.102106][T25181] WARNING: suspicious RCU usage [ 1197.113939][T25181] 5.9.0-rc3-syzkaller #0 Not tainted [ 1197.129626][T25181] ----------------------------- [ 1197.147655][T25181] drivers/net/bonding/bond_main.c:395 suspicious rcu_dereference_check() usage! [ 1197.180318][T25181] [ 1197.180318][T25181] other info that might help us debug this: [ 1197.180318][T25181] [ 1197.206419][T25126] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1197.227350][T25133] device bond283 entered promiscuous mode [ 1197.249149][T25181] [ 1197.249149][T25181] rcu_scheduler_active = 2, debug_locks = 1 [ 1197.269978][T25133] device bond283 left promiscuous mode [ 1197.278822][T25181] 1 lock held by syz-executor.5/25181: [ 1197.308187][T25181] #0: ffff88809ebfbba8 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{3:3}, at: xfrm_netlink_rcv+0x5c/0x90 [ 1197.363240][T25181] [ 1197.363240][T25181] stack backtrace: [ 1197.399023][T25181] CPU: 1 PID: 25181 Comm: syz-executor.5 Not tainted 5.9.0-rc3-syzkaller #0 [ 1197.407729][T25181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.418087][T25181] Call Trace: [ 1197.421399][T25181] dump_stack+0x198/0x1fd [ 1197.425844][T25181] bond_ipsec_add_sa+0x1dc/0x240 [ 1197.430837][T25181] xfrm_dev_state_add+0x2da/0x7b0 [ 1197.435884][T25181] xfrm_add_sa+0x2166/0x34f0 [ 1197.440503][T25181] ? xfrm_send_policy_notify+0x17a0/0x17a0 [ 1197.446319][T25181] ? bpf_lsm_capable+0x5/0x10 [ 1197.451026][T25181] ? security_capable+0x8f/0xc0 [ 1197.456015][T25181] ? __nla_parse+0x3d/0x4a [ 1197.460472][T25181] ? xfrm_send_policy_notify+0x17a0/0x17a0 [ 1197.466294][T25181] xfrm_user_rcv_msg+0x414/0x700 [ 1197.471273][T25181] ? xfrm_do_migrate+0x800/0x800 [ 1197.476223][T25181] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1197.482214][T25181] ? kfree_skbmem+0xef/0x1b0 [ 1197.487823][T25181] ? lock_is_held_type+0xbb/0xf0 [ 1197.492791][T25181] ? find_held_lock+0x2d/0x110 [ 1197.497614][T25181] ? __mutex_lock+0x626/0x10e0 [ 1197.502402][T25181] netlink_rcv_skb+0x15a/0x430 [ 1197.507188][T25181] ? xfrm_do_migrate+0x800/0x800 [ 1197.512144][T25181] ? netlink_ack+0xa10/0xa10 [ 1197.516773][T25181] xfrm_netlink_rcv+0x6b/0x90 [ 1197.521462][T25181] netlink_unicast+0x533/0x7d0 [ 1197.526246][T25181] ? netlink_attachskb+0x810/0x810 [ 1197.531371][T25181] ? __phys_addr_symbol+0x2c/0x70 [ 1197.536404][T25181] ? __check_object_size+0x171/0x3e4 [ 1197.541730][T25181] netlink_sendmsg+0x856/0xd90 [ 1197.543432][T25132] IPVS: ftp: loaded support on port[0] = 21 [ 1197.546532][T25181] ? netlink_unicast+0x7d0/0x7d0 [ 1197.546586][T25181] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1197.562661][T25181] ? netlink_unicast+0x7d0/0x7d0 [ 1197.567612][T25181] sock_sendmsg+0xcf/0x120 [ 1197.572044][T25181] ____sys_sendmsg+0x6e8/0x810 [ 1197.577079][T25181] ? kernel_sendmsg+0x50/0x50 [ 1197.581784][T25181] ? do_recvmmsg+0x6d0/0x6d0 [ 1197.586387][T25181] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1197.592377][T25181] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1197.598370][T25181] ___sys_sendmsg+0xf3/0x170 [ 1197.602970][T25181] ? sendmsg_copy_msghdr+0x160/0x160 [ 1197.608286][T25181] ? __fget_files+0x272/0x400 [ 1197.612976][T25181] ? lock_downgrade+0x830/0x830 [ 1197.617830][T25181] ? find_held_lock+0x2d/0x110 [ 1197.622613][T25181] ? __fget_files+0x294/0x400 [ 1197.627328][T25181] ? __fget_light+0xea/0x280 [ 1197.631937][T25181] __sys_sendmsg+0xe5/0x1b0 [ 1197.636448][T25181] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1197.641487][T25181] ? syscall_enter_from_user_mode+0x20/0x290 [ 1197.647480][T25181] ? lockdep_hardirqs_on+0x53/0x100 [ 1197.652690][T25181] do_syscall_64+0x2d/0x70 [ 1197.657114][T25181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1197.663008][T25181] RIP: 0033:0x45d5f9 [ 1197.667017][T25181] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1197.686737][T25181] RSP: 002b:00007fc0aeafac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.695162][T25181] RAX: ffffffffffffffda RBX: 000000000002cf80 RCX: 000000000045d5f9 [ 1197.703146][T25181] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1197.711151][T25181] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1197.719131][T25181] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1197.727109][T25181] R13: 00007ffe0f01218f R14: 00007fc0aeafb9c0 R15: 000000000118cf4c [ 1197.770681][T25181] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1197.782420][T25181] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1197.790856][T25181] CPU: 1 PID: 25181 Comm: syz-executor.5 Not tainted 5.9.0-rc3-syzkaller #0 [ 1197.799521][T25181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.809596][T25181] RIP: 0010:bond_ipsec_add_sa+0x9e/0x240 [ 1197.815256][T25181] Code: 03 31 ff 89 c3 89 c6 e8 b0 04 bd fc 85 db 0f 85 f6 00 00 00 e8 23 08 bd fc 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 5f 01 00 00 48 8d bd d0 02 00 00 49 8b 5d 00 48 [ 1197.834861][T25181] RSP: 0018:ffffc9001758f4a8 EFLAGS: 00010246 [ 1197.840939][T25181] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90013581000 [ 1197.848908][T25181] RDX: 0000000000000000 RSI: ffffffff84b742dd RDI: 0000000000000212 [ 1197.856876][T25181] RBP: ffff888056f5e440 R08: 0000000000000001 R09: ffffffff8c5f4ad7 [ 1197.864851][T25181] R10: fffffbfff18be95a R11: 0000000000000001 R12: ffff88805ab14000 [ 1197.872840][T25181] R13: 0000000000000000 R14: ffff888056f5e720 R15: ffff888056f5e724 [ 1197.880842][T25181] FS: 00007fc0aeafb700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1197.889771][T25181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1197.896369][T25181] CR2: 00007fd716867000 CR3: 00000000957a9000 CR4: 00000000001506e0 [ 1197.904427][T25181] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1197.912428][T25181] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1197.920399][T25181] Call Trace: [ 1197.923695][T25181] xfrm_dev_state_add+0x2da/0x7b0 [ 1197.928731][T25181] xfrm_add_sa+0x2166/0x34f0 [ 1197.933331][T25181] ? xfrm_send_policy_notify+0x17a0/0x17a0 [ 1197.939183][T25181] ? bpf_lsm_capable+0x5/0x10 [ 1197.943865][T25181] ? security_capable+0x8f/0xc0 [ 1197.948732][T25181] ? __nla_parse+0x3d/0x4a [ 1197.953155][T25181] ? xfrm_send_policy_notify+0x17a0/0x17a0 [ 1197.958969][T25181] xfrm_user_rcv_msg+0x414/0x700 [ 1197.963917][T25181] ? xfrm_do_migrate+0x800/0x800 [ 1197.968867][T25181] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1197.974870][T25181] ? kfree_skbmem+0xef/0x1b0 [ 1197.979464][T25181] ? lock_is_held_type+0xbb/0xf0 [ 1197.984407][T25181] ? find_held_lock+0x2d/0x110 [ 1197.989722][T25181] ? __mutex_lock+0x626/0x10e0 [ 1197.994611][T25181] netlink_rcv_skb+0x15a/0x430 [ 1197.999568][T25181] ? xfrm_do_migrate+0x800/0x800 [ 1198.004521][T25181] ? netlink_ack+0xa10/0xa10 [ 1198.009129][T25181] xfrm_netlink_rcv+0x6b/0x90 [ 1198.013812][T25181] netlink_unicast+0x533/0x7d0 [ 1198.018582][T25181] ? netlink_attachskb+0x810/0x810 [ 1198.023702][T25181] ? __phys_addr_symbol+0x2c/0x70 [ 1198.028729][T25181] ? __check_object_size+0x171/0x3e4 [ 1198.034021][T25181] netlink_sendmsg+0x856/0xd90 [ 1198.038802][T25181] ? netlink_unicast+0x7d0/0x7d0 [ 1198.043767][T25181] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1198.049057][T25181] ? netlink_unicast+0x7d0/0x7d0 [ 1198.053997][T25181] sock_sendmsg+0xcf/0x120 [ 1198.058421][T25181] ____sys_sendmsg+0x6e8/0x810 [ 1198.063223][T25181] ? kernel_sendmsg+0x50/0x50 [ 1198.067926][T25181] ? do_recvmmsg+0x6d0/0x6d0 [ 1198.072529][T25181] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1198.078517][T25181] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1198.084509][T25181] ___sys_sendmsg+0xf3/0x170 [ 1198.089135][T25181] ? sendmsg_copy_msghdr+0x160/0x160 [ 1198.094449][T25181] ? __fget_files+0x272/0x400 [ 1198.099133][T25181] ? lock_downgrade+0x830/0x830 [ 1198.104521][T25181] ? find_held_lock+0x2d/0x110 [ 1198.109380][T25181] ? __fget_files+0x294/0x400 [ 1198.114065][T25181] ? __fget_light+0xea/0x280 [ 1198.118654][T25181] __sys_sendmsg+0xe5/0x1b0 [ 1198.123161][T25181] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1198.128192][T25181] ? syscall_enter_from_user_mode+0x20/0x290 [ 1198.134444][T25181] ? lockdep_hardirqs_on+0x53/0x100 [ 1198.139653][T25181] do_syscall_64+0x2d/0x70 [ 1198.144165][T25181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1198.150098][T25181] RIP: 0033:0x45d5f9 [ 1198.154954][T25181] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1198.174558][T25181] RSP: 002b:00007fc0aeafac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.182976][T25181] RAX: ffffffffffffffda RBX: 000000000002cf80 RCX: 000000000045d5f9 [ 1198.190974][T25181] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1198.198960][T25181] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1198.206937][T25181] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1198.214939][T25181] R13: 00007ffe0f01218f R14: 00007fc0aeafb9c0 R15: 000000000118cf4c [ 1198.222932][T25181] Modules linked in: [ 1198.422989][T25181] ---[ end trace e7123f2c0ad59430 ]--- [ 1198.428516][T25181] RIP: 0010:bond_ipsec_add_sa+0x9e/0x240 [ 1198.434373][T25181] Code: 03 31 ff 89 c3 89 c6 e8 b0 04 bd fc 85 db 0f 85 f6 00 00 00 e8 23 08 bd fc 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 5f 01 00 00 48 8d bd d0 02 00 00 49 8b 5d 00 48 [ 1198.481828][T25181] RSP: 0018:ffffc9001758f4a8 EFLAGS: 00010246 [ 1198.487921][T25181] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90013581000 [ 1198.511805][T25181] RDX: 0000000000000000 RSI: ffffffff84b742dd RDI: 0000000000000212 [ 1198.519809][T25181] RBP: ffff888056f5e440 R08: 0000000000000001 R09: ffffffff8c5f4ad7 [ 1198.551847][T25181] R10: fffffbfff18be95a R11: 0000000000000001 R12: ffff88805ab14000 [ 1198.559854][T25181] R13: 0000000000000000 R14: ffff888056f5e720 R15: ffff888056f5e724 [ 1198.597901][T25181] FS: 00007fc0aeafb700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1198.621954][T25181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1198.628564][T25181] CR2: 00007ffc49b46800 CR3: 00000000957a9000 CR4: 00000000001506e0 [ 1198.646222][T25181] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1198.661782][T25181] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1198.669780][T25181] Kernel panic - not syncing: Fatal exception [ 1198.676866][T25181] Kernel Offset: disabled [ 1198.681218][T25181] Rebooting in 86400 seconds..