65329][T18961] device veth479 entered promiscuous mode [ 696.375666][T18961] bond145: (slave veth479): Enslaving as an active interface with an up link [ 696.386939][T18964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:39 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='.\x00'}, 0x10) [ 696.436751][T18975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:39 executing program 2: syz_clone(0x9907b139167942e9, 0x0, 0x0, 0x0, 0x0, 0x0) 12:12:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1a0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x16a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0xc, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00\x00', @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) [ 696.501810][T18983] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x5421, 0x20000000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) 12:12:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 696.603980][T18983] device bond146 entered promiscuous mode [ 696.653237][T18996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:40 executing program 3: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 12:12:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0xc020660b, 0x0) [ 696.769987][T18986] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 696.810532][T18986] device veth481 entered promiscuous mode [ 696.825304][T18986] bond146: (slave veth481): Enslaving as an active interface with an up link 12:12:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x17b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0xf, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c61"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 696.857673][T19008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x73}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000586511000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00\x00', @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) 12:12:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x71}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)) 12:12:40 executing program 3: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 12:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 697.047633][T19025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x17b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0xf, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c61"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0xc0189436, 0x20000000) 12:12:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) close(r0) [ 697.223777][T19032] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001680)='syz0\x00', 0x1ff) close(r0) [ 697.323247][T19032] device bond147 entered promiscuous mode [ 697.348254][T19038] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000006811000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) 12:12:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x17b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0xf, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c61"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 697.396723][T19038] device veth483 entered promiscuous mode [ 697.428235][T19038] bond147: (slave veth483): Enslaving as an active interface with an up link 12:12:40 executing program 3: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 12:12:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x8000) 12:12:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x4b49, 0x0) [ 697.584753][T19057] device bond148 entered promiscuous mode 12:12:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) [ 697.686732][T19066] device veth485 entered promiscuous mode [ 697.702674][T19066] bond148: (slave veth485): Enslaving as an active interface with an up link 12:12:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000006c11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) 12:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7600}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x5}]}) 12:12:41 executing program 3: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 12:12:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b9, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x183, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 697.875918][T19084] validate_nla: 1 callbacks suppressed [ 697.875937][T19084] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 697.946186][T19084] device bond149 entered promiscuous mode 12:12:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x5421, 0x20000000) 12:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x541b, 0x20000000) [ 698.076290][T19091] device veth487 entered promiscuous mode [ 698.096529][T19091] bond149: (slave veth487): Enslaving as an active interface with an up link 12:12:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 12:12:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00'/18, @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) 12:12:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b9, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x183, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000c6c11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) 12:12:41 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:41 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 12:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, &(0x7f00000000c0)=@framed={{}, [@call]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x0}) 12:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x9}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x24}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 698.451341][T19122] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:41 executing program 2: socketpair(0x26, 0x5, 0x41, &(0x7f0000000000)) 12:12:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00'/18, @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) [ 698.507140][T19137] syz-executor.2[19137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.521045][T19122] device bond150 entered promiscuous mode 12:12:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b9, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x183, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x9}]}) 12:12:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000067111000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:42 executing program 0: syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x80, &(0x7f0000000100)='K', 0x1, 0x0, &(0x7f0000000200), 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) [ 698.643638][T19130] device veth489 entered promiscuous mode [ 698.662934][T19130] bond150: (slave veth489): Enslaving as an active interface with an up link 12:12:42 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x5460, 0x0) 12:12:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:42 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) 12:12:42 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') [ 698.821244][T19154] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bd, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x187, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b50"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:42 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x894c, 0x0) [ 698.932385][T19154] device bond151 entered promiscuous mode 12:12:42 executing program 3: syz_clone(0x61844180, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x0) [ 698.979253][T19158] device veth491 entered promiscuous mode [ 699.056484][T19158] bond151: (slave veth491): Enslaving as an active interface with an up link 12:12:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00'/18, @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) 12:12:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000007411000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 12:12:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bd, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x187, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b50"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 699.217726][T19182] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15}, 0x48) 12:12:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x400454d0, 0x0) [ 699.278807][T19182] device bond152 entered promiscuous mode 12:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:42 executing program 2: accept(0xffffffffffffff9c, &(0x7f0000001300)=@in, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x110) r1 = semget(0x1, 0x3, 0x688) semctl$GETPID(r1, 0x3, 0x4, &(0x7f00000000c0)=""/35) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x2, 0x6}, {0x2}}, 0x0) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x8, 0x8) semctl$GETVAL(r1, 0x2, 0x5, &(0x7f0000000140)=""/230) [ 699.413564][T19187] device veth493 entered promiscuous mode [ 699.451732][T19187] bond152: (slave veth493): Enslaving as an active interface with an up link 12:12:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00'/19, @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) 12:12:42 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @val, {@ipv6}}, 0x0) 12:12:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) getsockopt$sock_int(r2, 0xffff, 0x20, 0x0, 0x0) 12:12:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000007a11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bd, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x187, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b50"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:43 executing program 0: pipe(&(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 12:12:43 executing program 2: open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x7fffffff}, 0x0, 0x0) r0 = geteuid() fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x0) 12:12:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00'/19, @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) [ 699.703717][T19213] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:43 executing program 0: setitimer(0x0, &(0x7f0000000000), 0x0) clock_gettime(0x4, &(0x7f0000000140)) 12:12:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x0) 12:12:43 executing program 0: semget(0x1, 0x3, 0x688) [ 699.822632][T19213] device bond153 entered promiscuous mode 12:12:43 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000100)=0x7) 12:12:43 executing program 3: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)) 12:12:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bf, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x189, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:43 executing program 0: setitimer(0x2, &(0x7f0000000240)={{0x8}, {0x0, 0x1}}, 0x0) [ 699.973211][T19225] device veth495 entered promiscuous mode [ 699.992989][T19225] bond153: (slave veth495): Enslaving as an active interface with an up link 12:12:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000008111000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0, 0x2}], 0x1, 0x0) close(r1) 12:12:43 executing program 2: socket$unix(0x1, 0x2, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) socket(0x18, 0x2, 0x0) select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x7fffffff}, 0x0, 0x0) select(0x40, &(0x7f0000000440), &(0x7f0000000480)={0x3f}, 0x0, 0x0) 12:12:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00$\x009\r\x00'/19, @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000080002"], 0x3c}}, 0x0) 12:12:43 executing program 0: getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) clock_getres(0x2, &(0x7f00000000c0)) 12:12:43 executing program 2: ftruncate(0xffffffffffffff9c, 0x0) 12:12:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x8}) 12:12:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x92e9}, 0x8) [ 700.171933][T19253] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:43 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) 12:12:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bf, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x189, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:43 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind(r0, 0x0, 0x54) 12:12:43 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pwritev(r0, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0) [ 700.301983][T19253] device bond154 entered promiscuous mode [ 700.456484][T19261] device veth497 entered promiscuous mode 12:12:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000b8b11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1011, r1, 0x0) 12:12:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, &(0x7f0000000000)='|', 0x1, 0x407, &(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8) [ 700.500401][T19261] bond154: (slave veth497): Enslaving as an active interface with an up link 12:12:44 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 12:12:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)="332d7ae435aa2387219a941d25dbcb6fbd3abe777fbe6875660492112f71a2449895b1ef273c537acdb8b1d32e5e078afa922b99318753b4a70df88259f7c38e947771354ba97f26f5c11c9163b28db4a28a532cd2c8a445e0bd2ba76b5d58e110584baeed0acf5d0884760612a3a0e5ce78e3387547d7570f6f4b52e463120d20c64c8ea5dc7ed3b7d98679de15b06acebdcdbe9da61d09b1e72a0aedd2d13fa318780f2dad7fb88af8e8ebaa97aeec28456996", 0xb4}, {&(0x7f00000001c0)="87f1f15be7e5244a83ea53e4e468693570c2c38379c2e4e48be3398377cb198d137559ae45f318e8b65da8627faca68fab0d263b0a94a9bd416388a0b6989924802756050c8ab7cff60bcaffad232407a2094b17ce03401f653c4df600478278b8b03d6e539125b9ba177dff979508d9edb1ba5647cee6e7d2ed45d777e8cb0a88e3f4", 0x83}, {&(0x7f0000000280)="67cddf851c6404df872f0c395d588cd29da3bb5944171812c1b9093afbaff3757e3f53e747f43a26202e91e763b5bbca87b39a4bb5c727d937c2ac2b2211b54621d9a06791b7d1fd336c1cdea009e21f4eb25177431053c58f5027915292a29e74c1277aeb92299a48cf3fc832762b05d8ba8dac0bfbeb58966ee2359502385a5545d7f95a760d5ef85595630b609e9d21e0859e8c22d552357f5bf95cff09f7d72ac3b97459a9ddfc107889ca3f6b207b1835fbc9304add948b1b3a9b53ed34ff7005a72861593b3019df716465ed3f37877222c0485be36fe10e147d157bd7a746b99cf0cafd5127a86bfb334b8615aa4a07734a2d927729", 0xf9}, {&(0x7f0000000380)="70aae6f050d2993ad6b6b1ef1abd786034b6141f138377331f849d3f77af54c28ac80cbfff1787f104689f3aac", 0x2d}, {&(0x7f00000003c0)="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", 0x5a4}], 0x5}, 0x0) 12:12:44 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 12:12:44 executing program 5: semget(0x0, 0x3, 0x244) 12:12:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bf, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x189, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x0) close(r1) [ 700.631557][T19287] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:44 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x10202, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 12:12:44 executing program 0: accept(0xffffffffffffff9c, &(0x7f0000000200)=@un=@abs, &(0x7f0000000240)=0x8) 12:12:44 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r0, 0x80047462) [ 700.749398][T19287] device bond155 entered promiscuous mode 12:12:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200015cc11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:44 executing program 3: get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x3, &(0x7f0000ffa000/0x2000)=nil, 0x2) 12:12:44 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) 12:12:44 executing program 5: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080), 0xb1, 0x0) 12:12:44 executing program 2: getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) [ 700.927797][T19296] device veth499 entered promiscuous mode [ 700.941301][T19296] bond155: (slave veth499): Enslaving as an active interface with an up link 12:12:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 12:12:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c02"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:44 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000140)=[{&(0x7f0000000080)="644321bbedeb4b8a8e14f0a8bbe2ce7ce56e21b81db7b207d713a0b34f167edd3aa961a3b9d64e785a8da787c5fa9dcf068e02c6dda6e0518269dd4218ad73", 0x3f}, {&(0x7f00000000c0)="9d0af55cb7f48d6fba28dbe995aa6a3f14c46da395d8d5ba2d4efab7366ae2c05e54c96d6b494aaaf6fddeb6bf201abb38d4e76d308800f0fc47ed7a7f5888047c3e8a1c9f3b9367a433a4dad5ddc3bfba1e", 0x52}], 0x2, &(0x7f0000000340)=[@rights], 0x10}, 0x405) 12:12:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 12:12:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 12:12:44 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000008e00), 0x0, 0x0) read$FUSE(r0, &(0x7f00000012c0)={0x2020}, 0xfffffffffffffe4c) [ 701.068229][T19320] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:44 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000008e00), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000002240), 0x0, 0x0, 0x0, &(0x7f0000002300)='{') [ 701.167798][T19320] device bond156 entered promiscuous mode [ 701.243118][T19331] __nla_validate_parse: 27 callbacks suppressed [ 701.243139][T19331] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000f011000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:12:44 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) 12:12:44 executing program 2: epoll_create(0x7) syz_clone(0x0, &(0x7f0000002240), 0x0, 0x0, 0x0, 0x0) 12:12:44 executing program 5: r0 = epoll_create(0x7) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000008e00), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002180)) [ 701.289164][T19331] device veth501 entered promiscuous mode [ 701.303963][T19331] bond156: (slave veth501): Enslaving as an active interface with an up link 12:12:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c02"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:44 executing program 2: shmget(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 12:12:44 executing program 3: get_mempolicy(0x0, &(0x7f00000000c0), 0xa27b, &(0x7f0000ffd000/0x3000)=nil, 0x3) 12:12:44 executing program 0: syz_clone(0x0, 0x0, 0x10, 0x0, 0x0, 0x0) 12:12:44 executing program 5: r0 = epoll_create(0x7) write$FUSE_LK(r0, 0x0, 0x0) 12:12:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0xda) [ 701.482292][T19352] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:44 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) [ 701.636209][T19352] device bond157 entered promiscuous mode [ 701.666990][T19369] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000012800d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:45 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x4, 0x0, &(0x7f00000002c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="690e455fd05b"}, 0x14) 12:12:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004340)=[{{&(0x7f0000000f00)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 12:12:45 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) 12:12:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/228, 0x1a, 0xe4, 0x1}, 0x20) 12:12:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x10, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c02"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 701.754381][T19369] device veth503 entered promiscuous mode [ 701.767424][T19369] bond157: (slave veth503): Enslaving as an active interface with an up link 12:12:45 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x806, r2, 0x1, 0x0, 0x6, @random="690e455fd05b"}, 0x14) 12:12:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000100)) 12:12:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x32, &(0x7f0000000000)="5b08d10f", 0x4) [ 701.934445][T19389] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:45 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f00000002c0), 0x4) 12:12:45 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000c00)) 12:12:45 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000002c0)=""/217, 0x26, 0xd9, 0x1}, 0x20) [ 701.980459][T19389] device bond158 entered promiscuous mode [ 702.047861][T19389] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011e80d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x5}]}]}}, &(0x7f00000002c0)=""/217, 0x32, 0xd9, 0x1}, 0x20) 12:12:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x5, 0x1}]}]}}, &(0x7f00000002c0)=""/217, 0x32, 0xd9, 0x1}, 0x20) 12:12:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000ec0)=""/229, 0xe5}], 0x1) 12:12:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1000000}]}}, &(0x7f0000000180)=""/228, 0x2a, 0xe4, 0x1}, 0x20) [ 702.125919][T19389] device veth505 entered promiscuous mode [ 702.142366][T19389] bond158: (slave veth505): Enslaving as an active interface with an up link 12:12:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x114, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0xde, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:45 executing program 0: socketpair(0x11, 0x3, 0x0, &(0x7f0000000100)) 12:12:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xf, 0x4) 12:12:45 executing program 2: pipe(&(0x7f0000000200)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) [ 702.332888][T19411] device bond159 entered promiscuous mode [ 702.348614][T19419] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) 12:12:45 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x23, 0x4, 0x4, &(0x7f0000000c00)) 12:12:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x2}, {}]}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/216, 0x3f, 0xd8, 0x1}, 0x20) [ 702.404198][T19419] device veth507 entered promiscuous mode [ 702.427317][T19419] bond159: (slave veth507): Enslaving as an active interface with an up link 12:12:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000400000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x6}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/217, 0x37, 0xd9, 0x1}, 0x20) 12:12:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x114, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0xde, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 702.581195][T19431] device bond160 entered promiscuous mode [ 702.609843][T19436] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 702.771228][T19436] device veth509 entered promiscuous mode [ 702.822474][T19436] bond160: (slave veth509): Enslaving as an active interface with an up link 12:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x14, 0x1}, 0x24}}, 0x0) 12:12:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x13, 0x1}, 0x24}}, 0x0) 12:12:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001100)=@newtfilter={0x10, 0x14, 0x1}, 0x24}}, 0x0) 12:12:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000f000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x114, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0xde, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x198}}, 0x0) [ 703.160114][T19447] validate_nla: 2 callbacks suppressed [ 703.160134][T19447] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=@newtfilter={0x10, 0x2c, 0x1}, 0x24}}, 0x0) 12:12:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1600bd78, &(0x7f0000000000)='[', 0x1) 12:12:46 executing program 5: sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)) 12:12:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x7) 12:12:46 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000040)="75e928919c996b9a0239e0ac72cb9ee4", 0x10) 12:12:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x0, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x4305, r2, 0x1, 0x0, 0x6, @random="690e455fd05b"}, 0x14) [ 703.389906][T19447] device bond161 entered promiscuous mode [ 703.426168][T19454] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 12:12:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)="5b08d10fa7b8b80b0f73e06f8c222d1eaca8f91ce4f69f8c78b36a02056e0f0c632d45139fc209d510c76de367bc65202e56f57e7bf5ca69d9b92a2dbcc639e0ca0879ae55b4c4b2de134ceaea454f52999807e993dd88b13e06a8c738ba7166ce87318224295ecf19d1ed2b0daef993aa1122ee56a99d6ad4592b2204efb1e49cb332dbef636024b68b07692a27f99e", 0x20000090) [ 703.643060][T19454] device veth511 entered promiscuous mode [ 703.678458][T19454] bond161: (slave veth511): Enslaving as an active interface with an up link 12:12:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000211000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) 12:12:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={0x0}}, 0x0) 12:12:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4b, 0x0, "58ec001ced63b95bf896f1ccec4c2e458134bf94397f8457d38f57bcccb7470119f013d781f5e1ea1f3797c750cce2fb3a263616e04be2266c0e687afa323e9f2ba3b6f01747dbdf98a8c9c357c215a8"}, 0xd8) 12:12:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000007040)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 12:12:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x0, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000002940)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 12:12:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x6}]}]}}, &(0x7f00000002c0)=""/217, 0x32, 0xd9, 0x1}, 0x20) 12:12:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) [ 703.861862][T19494] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB='C'], 0x2c}}, 0x0) 12:12:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x4000}]}}, &(0x7f0000000180)=""/228, 0x2a, 0xe4, 0x1}, 0x20) 12:12:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) [ 704.047641][T19494] device bond162 entered promiscuous mode [ 704.078997][T19501] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 704.214183][T19501] device veth513 entered promiscuous mode [ 704.252702][T19501] bond162: (slave veth513): Enslaving as an active interface with an up link 12:12:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000311000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x13, 0x1, 0x0, 0x0, {0x7}}, 0x24}}, 0x0) 12:12:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 12:12:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x0, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:47 executing program 0: socketpair(0xa, 0x0, 0x0, &(0x7f0000002a80)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) 12:12:47 executing program 3: socketpair(0x1d, 0x2, 0x6, &(0x7f00000006c0)) 12:12:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0x8) 12:12:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) close(r1) 12:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x15, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 704.416674][T19533] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x0, 0x3f000000}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:47 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000003c0)=""/108) [ 704.557570][T19533] device bond163 entered promiscuous mode [ 704.574626][T19540] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 704.636711][T19540] device veth515 entered promiscuous mode [ 704.656277][T19540] bond163: (slave veth515): Enslaving as an active interface with an up link 12:12:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000411000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:48 executing program 2: r0 = msgget(0x1, 0x0) msgrcv(r0, &(0x7f0000000340)={0x0, ""/90}, 0x62, 0x0, 0x1000) 12:12:48 executing program 3: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x2000, 0x0, &(0x7f00000001c0)) 12:12:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x116, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0xe0, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x8) 12:12:48 executing program 5: r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:12:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:48 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) [ 704.820556][T19561] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 704.887574][T19561] device bond164 entered promiscuous mode [ 704.903322][T19566] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:48 executing program 5: r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) bind$packet(r0, 0x0, 0x0) 12:12:48 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) write$FUSE_IOCTL(r0, 0x0, 0x0) 12:12:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x116, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0xe0, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:48 executing program 0: r0 = epoll_create(0x1) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 705.053487][T19566] device veth517 entered promiscuous mode [ 705.072427][T19566] bond164: (slave veth517): Enslaving as an active interface with an up link 12:12:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000511000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:48 executing program 3: creat(&(0x7f0000000000)='./file1\x00', 0x0) setxattr(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 12:12:48 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x201c2, 0x0) 12:12:48 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x3800) 12:12:48 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 12:12:48 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 12:12:48 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) [ 705.255328][T19591] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:48 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 12:12:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x116, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0xe0, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f00000000c0)) 12:12:48 executing program 2: r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 705.355488][T19591] device bond165 entered promiscuous mode [ 705.394314][T19594] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 705.532534][T19594] device veth519 entered promiscuous mode [ 705.565974][T19594] bond165: (slave veth519): Enslaving as an active interface with an up link 12:12:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, 0x0) 12:12:49 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000004280), 0x100, 0x0) 12:12:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12:12:49 executing program 3: creat(&(0x7f00000005c0)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x0) 12:12:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000611000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x16c, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x136, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0xb, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:49 executing program 2: get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffc000/0x2000)=nil, 0x4) 12:12:49 executing program 5: r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$cgroup_pressure(r0, 0x0, 0x5f) 12:12:49 executing program 3: setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x9d5f1a26f6b809a9) [ 705.926734][T19615] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:49 executing program 0: creat(&(0x7f00000005c0)='./file0\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 706.015527][T19615] device bond166 entered promiscuous mode 12:12:49 executing program 3: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) 12:12:49 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 706.085474][T19623] device veth521 entered promiscuous mode [ 706.098874][T19623] bond166: (slave veth521): Enslaving as an active interface with an up link 12:12:49 executing program 0: shmget(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) 12:12:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000711000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:49 executing program 5: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x2000, 0x40, &(0x7f00000001c0)) 12:12:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x16c, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x136, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0xb, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:49 executing program 2: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0xee01, 0xee01, 0x1000) 12:12:49 executing program 3: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) 12:12:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x10001) [ 706.254115][T19640] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 706.308175][T19640] device bond167 entered promiscuous mode [ 706.314375][T19648] __nla_validate_parse: 1 callbacks suppressed [ 706.314392][T19648] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:49 executing program 5: creat(&(0x7f00000005c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1/file0\x00', 0x0) 12:12:49 executing program 0: shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 12:12:49 executing program 3: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) 12:12:49 executing program 5: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) fchmodat(r0, &(0x7f0000000340)='./file0\x00', 0x35) 12:12:49 executing program 2: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001c40)='syz1\x00', 0x1ff) 12:12:49 executing program 3: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) 12:12:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000811000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:50 executing program 0: creat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 12:12:50 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 12:12:50 executing program 2: r0 = msgget(0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/203) 12:12:50 executing program 3: r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) 12:12:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x16c, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x136, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0xb, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 706.601218][T19648] device veth523 entered promiscuous mode [ 706.624832][T19648] bond167: (slave veth523): Enslaving as an active interface with an up link 12:12:50 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) 12:12:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) 12:12:50 executing program 2: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000017c0)='cpu.pressure\x00', 0x2, 0x0) [ 706.681269][ T27] audit: type=1804 audit(1659528770.086:42): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2093054701/syzkaller.NxBjHq/858/file0" dev="sda1" ino=1178 res=1 errno=0 [ 706.695663][T19680] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:50 executing program 5: creat(&(0x7f00000005c0)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) 12:12:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0xdd) 12:12:50 executing program 5: r0 = msgget(0x1, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000bb4d63909875bdc78a3c4fa593e41348be44dbe1770f3e312371876d8277dd72f22f6b4058175ce3f90562fe389a0c2e46120aea2d449d91535b509850196e358a23bde0270465c98abe32"], 0x53, 0x0) msgget(0x3, 0x184) r1 = msgget(0x1, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/50}, 0x3a, 0x2, 0x0) [ 706.789975][T19680] device bond168 entered promiscuous mode [ 706.799132][T19680] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 706.826311][T19680] device veth525 entered promiscuous mode [ 706.872529][T19680] bond168: (slave veth525): Enslaving as an active interface with an up link 12:12:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000911000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:50 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 12:12:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x197, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x161, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x10, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:50 executing program 3: r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:12:50 executing program 5: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) statx(r0, &(0x7f00000014c0)='./file0\x00', 0x1000, 0x20, &(0x7f0000001500)) 12:12:50 executing program 3: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 12:12:50 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) read$watch_queue(r0, 0x0, 0x0) [ 707.054105][T19707] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 707.161985][T19707] device bond169 entered promiscuous mode [ 707.196746][T19715] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 707.234380][T19715] device veth527 entered promiscuous mode [ 707.263173][T19715] bond169: (slave veth527): Enslaving as an active interface with an up link 12:12:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x120, &(0x7f0000004440)={0x77359400}) 12:12:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 12:12:51 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x141a00, 0x0) 12:12:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x197, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x161, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x10, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:51 executing program 0: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) statx(r0, &(0x7f00000014c0)='./file0\x00', 0x4000, 0x0, &(0x7f0000001500)) 12:12:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000a11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:51 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCREATE(r1, 0x0, 0x0) 12:12:51 executing program 3: r0 = open(&(0x7f00000024c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x7ff, &(0x7f0000001500)) 12:12:51 executing program 2: creat(&(0x7f00000005c0)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xee00) [ 707.630141][T19723] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:51 executing program 0: timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r0) 12:12:51 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f00000006c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) [ 707.709234][T19723] device bond170 entered promiscuous mode [ 707.715283][T19732] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:51 executing program 2: creat(&(0x7f00000005c0)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2083, 0xc0) 12:12:51 executing program 5: r0 = msgget(0x1, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) 12:12:51 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) write$FUSE_BMAP(r0, 0x0, 0x0) [ 707.814961][T19732] device veth529 entered promiscuous mode [ 707.827177][T19732] bond170: (slave veth529): Enslaving as an active interface with an up link 12:12:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x197, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x161, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x10, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000c11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:51 executing program 0: creat(&(0x7f00000005c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x101200, 0x0) 12:12:51 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) [ 707.915232][ T27] audit: type=1804 audit(1659528771.316:43): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3336605736/syzkaller.o4EsYy/975/file1" dev="sda1" ino=1182 res=1 errno=0 12:12:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[]) 12:12:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x30}]}) 12:12:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {}]}) [ 708.015679][ T27] audit: type=1804 audit(1659528771.396:44): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2093054701/syzkaller.NxBjHq/863/file0" dev="sda1" ino=1165 res=1 errno=0 12:12:51 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) [ 708.080128][T19754] device bond171 entered promiscuous mode [ 708.116606][T19764] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:51 executing program 3: bpf$MAP_LOOKUP_ELEM(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0xea1c2a43ed25ce7c}, 0x20) [ 708.163842][T19764] device veth531 entered promiscuous mode [ 708.189428][T19764] bond171: (slave veth531): Enslaving as an active interface with an up link 12:12:51 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_da_release_space\x00'}, 0x10) 12:12:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000e11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1b) [ 708.345733][T19778] validate_nla: 1 callbacks suppressed [ 708.345751][T19778] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1ac, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x176, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x13, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:51 executing program 0: bpf$BPF_GET_PROG_INFO(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0x2, 0x0}, 0x10) 12:12:51 executing program 3: unlink(&(0x7f00000000c0)='./file0/file0\x00') 12:12:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x5}, {0x16}]}) [ 708.410675][T19778] device bond172 entered promiscuous mode [ 708.449299][T19782] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:51 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 12:12:51 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) [ 708.507015][T19782] device veth533 entered promiscuous mode [ 708.540553][T19782] bond172: (slave veth533): Enslaving as an active interface with an up link 12:12:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000030000006a0a00ff0000000025000000ffffff809503000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0xff5b, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0xffffffffffffffff}, 0x21) 12:12:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000001011000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) 12:12:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc000}]}) 12:12:52 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x167041, 0x0) 12:12:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1ac, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x176, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x13, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:52 executing program 2: bpf$MAP_LOOKUP_ELEM(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0xea1c2a43ed25ce7c}, 0x20) 12:12:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0x7ff}]}) [ 708.700906][T19803] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:52 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=0x1, 0xffffffffffffffff, 0x5}, 0x10) [ 708.837429][T19803] device bond173 entered promiscuous mode 12:12:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@restrict]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/41, 0xfffffffffffffce0, 0x29}, 0x20) [ 708.887789][T19812] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d}]}) 12:12:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[], &(0x7f00000005c0)=""/173, 0x26, 0xad, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0}, 0x20) 12:12:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1ac, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x176, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x13, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 709.013437][T19812] device veth535 entered promiscuous mode [ 709.042589][T19812] bond173: (slave veth535): Enslaving as an active interface with an up link 12:12:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000002411000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0xa013}) 12:12:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) 12:12:52 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0x10) 12:12:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) close(r0) 12:12:52 executing program 3: syz_clone(0x10002200, 0x0, 0x0, 0x0, 0x0, 0x0) 12:12:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) ioctl$TUNGETFILTER(r0, 0x400454ce, 0x0) 12:12:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg(r0, 0x0, 0x0) [ 709.236792][T19842] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="e61a50fba70c39ee0eba24d42d7e127fd5a10ad35ffddc9ad640a9613fbb1fa579f5336d164cca2391bf44535c0aacb279a670365696676c975d8f98e4ac0a841e8b1b90ee19210bb6ee7ecc2692a199d90a8857eed70f286bd8d36708d00ed4c9ccc684", 0x64}, {&(0x7f0000000100)="4950c00001cee7c689e8731408a90f89ebf2c786957d68f24c8cb353db44bdeafb98065963eaf61fc729db16154722db95895e1b2c1d92bd7eb2752b761151b2a734421c0767f0e15eb5ee2ffad8f66f49a31cb0bc7fea454884db87df29820af278ae33ced83c24142247c7249dcda246c4c27528ae80613bce5479f45cd552d2a94465ff7a10ca9bf5a02e30cacbea80691e09b5eeb4a44b2c2dc09c813bfee385e372a8a7df4af939c37e83e3778609000c5a752a412005e02f9dee8847506a9a1fb16f0094d597de342b8c3691c8dbc5a541865d3de5e7e937f86a8192c32b752f8120457ae4c92eaec4bc9597988d605e313e238a7bb98357", 0xfffffea8}, {&(0x7f0000000200)="412805152979604804837e1515e3d4480211ce0d422f3a2946b62ffd26f288399ea86cbc508e82917fb40104000000000000cf0a49b544b33d01bb72b9334f5a3d0aa646b38218c175b6ef6e17ce0f72cc1d2f15a07f7e26cc4a7cc99c69ba600ac9a9ee3c95c946bc75a9ad4a", 0x6d}, {&(0x7f0000000280)="1e9141655008ca52466b6323907dfed683a69be37970f1de861a1f3564818dacaa37425feb56de9f445f084f11a1d71e7e8a98d760902d58a9b9de4e8b1e297d1a5af05521ec", 0x46}], 0x4, &(0x7f00000008c0)=[{0xd0, 0x0, 0x0, "41f9604d1f22a6732ca74502eda29100adc35f737edde81653ec4f0298444c6dd5ff5cb0e1930a16a19fc96f80762657c539bef288e2decbe37eaa6bc9ce86a64784325fbc350a515a8e2bf21e49dbff46bf8bb90267aafd744883fa211325a38d52958b45d6f930d56d5c481ea00b40ca4ce8732e9c04d382a14cf051391bbebe8815dcd754d6dac5fa1022266a66767f191a8ae9d0497fbb359c57b06e156eef15a24d65ed5532f0dea513cae9f5bb7175d113313809025d00262eab301a"}, {0x50, 0x0, 0x0, "3aa5c420b2192ffafea68e839b04cc9560da93de5f526b847bf2bdce80a215f77e0c79cd8dc72eb4871d10189ef13db9d56b48ac870dd39e88efc402b6b9"}, {0x98, 0x0, 0x0, "b6210fcd805d74c8a69ca1d840753a4512c3d9834978deb7811c1ace82c4b68bdeb44b6485df3644623c4aab7f59ac3b37e266d2d2dc178e62018de350d786b3a2f95ca1dc3bea80f77cb4396eb4761ff82e8c4ed7ff88319fd5ba8beaeeeb49ced8f3c92bbde268ced8dddae2cb80704b6c2eed13653281465de188eac67b1cf0"}, {0x80, 0x0, 0x0, "7b9ff860638e6c4e5f949e09e55ac23c23b01f50cb931c1d5359e266deb17356b20b00f76292e62f8fbd5f393e3fb3002473fc036630c22d804e728a00022b585fe37c176804398a73e464704c5ffc8f670b04f9198919fc6cb160396c839637b66a495163cc8e489f88a4c2b1663d"}, {0xf0, 0x0, 0x0, "7a847c9199d735417cf2a8ff96e7a092d84a33494c0f82d4259bf1621de251c8ef58593b98581a9c161c0c0df41d642dc2628bb965056fafcd27fd730b999393ad06c5f8a6220f197f13ef187e47506892c5fa6a56ca6f613a7e6bad6936ee527480a26dfed757c3eba57fb987d3415e82313d5854013991ba2f3ef410cbde49b12bb227b00e910e004e50826e71a368e85e4b39c73e4fb53a2ab162cb3869c2a817982bf98065c97546aa96a18c4cf2c0b62b857ebc2f25fff47326ff96b9b23009508a775a71beac88d8dabb079cf37a5f94b16a68a2d879fe0700395564646d93a05162e510f8d272d314b15f528bb36b74"}, {0x80, 0x0, 0x0, "7e7dae515f06df4cec4a567403567952a82c3b5c829cd690a59fafd36ee180671032d69a13b31803581720499d43b206304023812b9a9bb435f3b2dd11a99f7a07501858c0e2bff84847fcd127c96086cf23332c24ace65b1e032daa374173d80e37bdeb002ac4839a11"}, {0xb0, 0x0, 0x0, "dcbc190e2f67d2aacb05b474fd57eef6e214a5d4919b70efc28ee3a2a0f0e33f660985c0be7ce9d8adae74c89c9510c7ece26dacb3b99578879444b0f9abf15faa5c2460651284a87bb46ead69b6ff3acac19b627dd12415e76baf984d3974c15e6fb4c0989306674a3c236c6b22603964c93bf98debd8753ed68eae72c03f2dc962cf4b96ddf701d9e341d0d961966c87ad4de4b26617e3f7"}, {0xc8, 0x0, 0x0, "342577ad2b5ea8239eef69cb654e05d9ed1221e2a4da0c353dcad5e09952cba1204bc99c11eaac578c8565250e989a63ff3d0e3807860b4a31e2d9df2ba9a9806855bd0016f1197497f9b3f586e3c2c6de11750ae6fcb58afff66e44a1fd1f8df8b4cdc746a18477a0baa4396f94644179b4e22da02b50655f75d147aa04fd2ecc33c90a5fa5ffaeade501a394cce84c78e1ee485d7b9bc60fa0aa5a80907471ab5fb888a014589f122939b012eeea5ad0"}], 0x520}, 0x8010) 12:12:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000003c0)='GPL\x00', 0x2, 0xa8, &(0x7f0000000400)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b7, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x181, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x14, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:52 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c80)=@bpf_lsm={0x1d, 0x3, &(0x7f00000026c0)=@framed, &(0x7f0000002740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 709.411000][T19842] device bond174 entered promiscuous mode [ 709.430766][T19851] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 709.457514][T19851] device veth537 entered promiscuous mode [ 709.471068][T19851] bond174: (slave veth537): Enslaving as an active interface with an up link 12:12:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x2041) 12:12:52 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) 12:12:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000004811000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc01047d0, &(0x7f00000003c0)={'ip6tnl0\x00'}) 12:12:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x4801) 12:12:52 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000440)="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", 0xd01}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 12:12:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00'}) 12:12:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x1}) [ 709.593870][T19877] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b7, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x181, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x14, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 709.681507][T19877] device bond175 entered promiscuous mode 12:12:53 executing program 3: socketpair$nbd(0x1, 0x1, 0x2, &(0x7f0000000000)) 12:12:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x0, 0x0, 0x200}, 0x48) [ 709.723253][T19883] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:53 executing program 3: stat(0x0, 0x0) socket$unix(0x1, 0x0, 0x0) epoll_create1(0x0) 12:12:53 executing program 3: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='.^\'-\\-\x00', 0xffffffffffffffff) 12:12:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)) [ 709.929785][T19883] device veth539 entered promiscuous mode [ 709.940401][T19883] bond175: (slave veth539): Enslaving as an active interface with an up link 12:12:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) 12:12:53 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$usbfs(r0, &(0x7f0000000bc0)=""/42, 0x2a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000007500000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) link(&(0x7f0000000c00)='./bus\x00', &(0x7f0000000c40)='./bus\x00') 12:12:53 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:12:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000004c11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b7, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x181, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x14, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:53 executing program 5: add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', 0x0) 12:12:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002c00)={'dvmrp0\x00', 0x2}) ioctl$TUNSETNOCSUM(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) 12:12:53 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 12:12:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x540c, 0x0) [ 710.146571][T19913] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001080)={0xa, {"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", 0x1000}}, 0x1006) 12:12:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:12:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @remote, 0x1}, 0x10) 12:12:53 executing program 0: sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[], 0xfffffecc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="61fdb792909957c8241fc7e18bdb110c92c3c5ff206af4261bb568ca25079590133b5dadee36a582d437107d76f1917ce9b74c8892c7fb0d24588d05a8c31e2e", 0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0xa0341) [ 710.277487][T19913] device bond176 entered promiscuous mode [ 710.296921][T19924] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8910, &(0x7f0000000800)={'syztnl1\x00', 0x0}) 12:12:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008001300", @ANYRES8, @ANYRES64=r2], 0x3c}}, 0x0) 12:12:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000006011000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 710.352615][T19924] device veth541 entered promiscuous mode [ 710.372894][T19924] bond176: (slave veth541): Enslaving as an active interface with an up link [ 710.373048][T19932] dvmrp0: tun_chr_ioctl cmd 1074025677 [ 710.373240][T19932] dvmrp0: linktype set to 6 12:12:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bc, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x186, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b3"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000000640)="200000008e00000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f00", 0x1e, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xf02, 0x2000}, {&(0x7f0000000080)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f00000003c0)={[{@metacopy_off}, {@index_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@default_permissions}], [{@fsmagic={'fsmagic', 0x3d, 0xff}}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0xb}}]}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000000c0)) 12:12:53 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x5}) [ 710.494952][T19939] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 710.547565][T19939] device bond177 entered promiscuous mode 12:12:54 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001100)={&(0x7f0000004c80)=@can, 0x80, 0x0}, 0x0) 12:12:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) [ 710.603641][T19954] loop2: detected capacity change from 0 to 4096 [ 710.618054][T19954] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26926!=0) [ 710.618311][T19954] EXT4-fs (loop2): group descriptors corrupted! [ 710.625407][T19949] device veth543 entered promiscuous mode [ 710.640269][T19949] bond177: (slave veth543): Enslaving as an active interface with an up link 12:12:54 executing program 5: futex(&(0x7f0000000080)=0x2, 0x3, 0x2, 0x0, &(0x7f0000000100), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x64) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0xa0341) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000240)={{{0x2}}, 0x0, 0x0, 0x0}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8000000000000001, 0xffffffffffffffff, 0x0, 0x3, 0xd) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) userfaultfd(0x0) 12:12:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000006811000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bc, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x186, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b3"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 710.912374][T19968] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 710.954101][T19968] device bond178 entered promiscuous mode [ 711.008263][T19972] device veth545 entered promiscuous mode [ 711.013539][T19972] bond178: (slave veth545): Enslaving as an active interface with an up link 12:12:54 executing program 0: sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[], 0xfffffecc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="61fdb792909957c8241fc7e18bdb110c92c3c5ff206af4261bb568ca25079590133b5dadee36a582d437107d76f1917ce9b74c8892c7fb0d24588d05a8c31e2e", 0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0xa0341) 12:12:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002c00)={'dvmrp0\x00', 0x2}) ioctl$TUNSETNOCSUM(r0, 0x400454c9, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d1, 0x20000000) 12:12:54 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) 12:12:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000006c11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bc, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x186, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b3"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001080)={0xa, {"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", 0xf800}}, 0x1006) [ 711.294090][T19978] dvmrp0: tun_chr_ioctl cmd 1074025681 [ 711.333955][T19980] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000080)={@empty, @local={0xac, 0x14, 0x0}}, 0x8) [ 711.387692][T19980] device bond179 entered promiscuous mode [ 711.387875][T19987] __nla_validate_parse: 3 callbacks suppressed [ 711.388996][T19987] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 711.444048][T19987] device veth547 entered promiscuous mode [ 711.447039][T19987] bond179: (slave veth547): Enslaving as an active interface with an up link 12:12:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)="93", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000001d00)="c9", 0x1, 0x100, &(0x7f0000001d40)={0x10, 0x2}, 0x10) 12:12:54 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 12:12:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000007411000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bf, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x189, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0c"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:54 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 711.647387][T19999] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 711.803335][T19999] device bond180 entered promiscuous mode [ 711.803512][T20010] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 711.921054][T20010] device veth549 entered promiscuous mode [ 711.951610][T20010] bond180: (slave veth549): Enslaving as an active interface with an up link 12:12:55 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0x2c8}, 0x0) 12:12:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000007a11000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000840)=[{0x10}, {0x10}], 0x20}, 0x0) 12:12:55 executing program 2: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) 12:12:55 executing program 0: sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[], 0xfffffecc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="61fdb792909957c8241fc7e18bdb110c92c3c5ff206af4261bb568ca25079590133b5dadee36a582d437107d76f1917ce9b74c8892c7fb0d24588d05a8c31e2e", 0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0xa0341) 12:12:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bf, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x189, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0c"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:55 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001540)=@un=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f00000016c0)}, 0x0) 12:12:55 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0xf0}, 0x0) [ 712.233166][T20018] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:55 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0x2c8}, 0x40104) 12:12:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="f54575dd1c33b9295bb82877412fce4a25c505a6c30e3b9e31baa887fee8a2bba2404a16562364d1586068823548f44680e1e7912e2358880ba3407d0e7edcd234fd914d3ed2f82fb1f170a8949dbaf240e65362", 0x54) [ 712.430463][T20018] device bond181 entered promiscuous mode 12:12:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) [ 712.430688][T20029] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000002300)=[{&(0x7f0000000040)="0fae2d9ea786e3ff7f821188c59240e06200bc3661fbb4c3ddf77e2214a307a19b44311590f286a488d623731e5b309872e33d376010c9ad8707784c6aeb16b195f19d0d53925939aab91a296b4c39c4c668fec1a169958989b7b5a6adc8cd0a650f423ceb6d636f25320502a1a5f29419975959ba289db1ad37265fb74d56cd199d95291f8ff2cce2bb5a7b4e0f42a71a5c5725016396485c2965090401d511fac450c2aa03ac17fc12db85833cd5ffa2349e3f7e9883db7fae305cb451a1c10cfd87ff3e632ad8037cbff615ae7f22ad30ab6ffc257af46b98b218ca86", 0xde}, {&(0x7f0000000140)="e58e9fa68f26075dff44589df255f9616b01051e33369e62b85066e7138ca3f737d97b17938a2cadb084f613acf3092a2b77083e3c00c34693e2c2350c8f26c28f8157531753cf4975e7968a9e51333a995bf13394c9c3b4e1fbf03b373eed7ca377b1502341bfc2", 0x68}, {&(0x7f00000001c0)="dde24823b28a2b8ed1e7019be500a90060dfde55279c1c7252a44c27e14f8fc5752c79bf5cf55a7cf6cca139896cd401d89bd2917e87e69f16d3ba20c6a65c539a35aabbc9dc5ba5fffcbd7cbda24e744880098f7763df946f99409d8944154d65568939039db0f682a9d5e4ae1ff1d8aa8956b8920bd53b1967c7c3577a61f8a5bea1ad585f87e0c651ca440a3dcd9b58f964c2d2a9214adef880c6f545a5294306e6ea5cb82737e289b2a1459aa1bb42fb782f6578206fd891c7e57e63005855ab71035168ab9ee8195da73cf959c9809c823b69cc553a21fc761df5add691a5ce1c319c122d5d4d6ede87c8a5610c9a2d", 0xf2}, {&(0x7f00000002c0)="f53349f3e36d71d9c16a815589b688de308b014ba9", 0x15}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="5d4ae719de39e4a4d7ba43b82ad70bcf818a6772685526f8d17dbfb73fcc12363009fafb3b8df3fef9f5a3d0531e5c63349bdd3622038113e0501fdbe84ff86213af320ca22f73d4890c095e74c6c8e938e15f8126d00ae866cef04c151b4988f2ecd22cb2347ca4631c9a864016881468c29b738e612842de1cbdd8c041cc50073fad6d7e7dbbe276e91a315bbec57e653682437591ef7112f202c00778a566d2c3d5e1f5cf4760c3af1c752550cd96a47951eedf368931a9fe49ee2a0b8c9b45b63abc27404c5e36182434e6ac48c9426b7d882e6c7dcd762cb402977ddf7adb553194566bfb32163ef466d416fb774263ed4ebd84efdabf32cccbe62b2ab2217c259b360bfbbef9248cd320ffd37e7777af3f97e82311b135e8553aa3ede1d80ed1756472910794db3c4b53174d0d1fa1cf4c49e74eb944e875adeba8875ff682ded03e931a4a8b27599f9f582ece58a4a57c0ed23a4be1a40fe4f3cda3bbb45e3f0cb8631e13a8dccabbfcbc368c5cff2b96d605c178ca99593913f8fbf5a1c1851a8f6ab35ff17e81550f4c11d26db2d5965e26985200fac637669f68a81eaeddf74b68e0becd6724a5d3f00e607a26eb4e0ecb8899be7b4b44c7e29c8d760f2b8beb881c0eaab5401bdc8e95b64daf353ece2b44bcbe904cf927bbfc9218a7b5fd3eee9a499d745004b0fcbb2dafe91984f0a66c97d9a03827e2dddd3ce8f0b644c75351605db138f389b279a54b88115847b1b479b5e7f7189932c929247b606316b82389bb34c0edfa99ea95447b7f473260ebc6871781a60144f25f9d0695c23d1d2d706dfb149bdc62f1cc73b8b67a475ccf7e1ffa11b84fccf68b183fbe84b5f3761206245d39bbff9d25451cd1a761de5cef91689409870ff2679556fa6724c903ba6d6e6aad576f5b2f907ff8a81e117d93b0105a69a408af24829fbe78c6d2fb215e0a593bfe2f88a1897e2f04c75550478cbdb33ac01d78014c4c529d838b6febb658028b5a4ff6054f1182b9ed14cbfb2b678e015da8de9cf5fa1cb4bb8a0dbaa5d8c2a8b7ed3961c99beb2b8f2e5fad3ba035587c55628ef084ca0f5337073046f6155d77af7381b539de957b5084fb5fa69f62ff154dbe5c854439999410ea92d91bdec5e2fb0c94a1038ecf948599b66f37576ada14c5ea760fd5b32d9202047b7d56bdfdbb34c28a5453462df7eca23ac6fbc6071513499853ec85431ac9a3accd31b8234a6d03c87f566cd9042847ef7a97dda9e076331791351af3e6f1cbcdb4e821d51d110965a2434f728348a3e21b5556decf51b26f4f373b385b08bb0ab0f9c2d2d707c9281ccc4b011edcc66dee4c08a2ea3dffc98ae867e568f9235679b0f6f7a9d40078e329a244033a8510921584554598c7d52c1223a174bc7aacbc9d4e6e7b4c4ecb917bdb53dc0eb46c10284820955810a79236936fec2d15604508488ab5dcb5dcd3d9dadcd1c5ac923add40143cea90e0c5ca1e985f2fb19fc27cf094cb9b6e92c31364dd50ce7bded24399c17413b44a9f427c6add230d0674e7532607c3ae04faff7c1fc46ca23da360339a39a32479cf1ba6988d559eda2e50ad40ac609b5af19a9e39bdcfb09ac46663824c6fe8632b960f8f63c05c07dc7531c73e25f1b25ec39605b96d084d74b62c1334ba189f28e0617de3f144b87df8b848ab420968e997930bb77b02ccc3ffc5b85df04688add2bfc213240124a7a94ba6c73059d071ebc6c3d5fa62b86001c0e85e3f2afbe007f3a6ff70a8efbde985e084d617bf7d4a24a13525cdd41661a6fd93feeb0c43574ed6743b180da70e58d1c11fd640ab5a8ce4b678ebc89b0626c08c0129087a57644ac8881eae1e942c361a8cfb1399b2dee9938a973fa11f24cf30c1958b467e9e7197f5a63d878930d2233eaea0752f70dc1819c4425ef03cb5b5f84878134d37834f0b62b89b1b0fa71ceedd030f4a6c2b94edfc3d3d2d65fbff08e5e0938a2eae244fa9cc7889485f8fe111ecf1fb2a9528192f945e464f458d299b008811", 0x5a4}], 0x6}, 0x100) 12:12:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bf, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x189, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0c"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 712.557111][T20029] device veth551 entered promiscuous mode [ 712.568558][T20029] bond181: (slave veth551): Enslaving as an active interface with an up link 12:12:56 executing program 0: sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[], 0xfffffecc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="61fdb792909957c8241fc7e18bdb110c92c3c5ff206af4261bb568ca25079590133b5dadee36a582d437107d76f1917ce9b74c8892c7fb0d24588d05a8c31e2e", 0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0xa0341) 12:12:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000080)={0x1, [0x0]}, 0x6) 12:12:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000140)={0x0, 0x20}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) 12:12:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000e811000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:56 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 12:12:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:56 executing program 5: mkdirat(0xffffffffffffffff, &(0x7f0000003dc0)='./file0\x00', 0x0) 12:12:56 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 12:12:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x200, 0x0, 0x3}, 0x10) [ 713.303102][T20057] device bond182 entered promiscuous mode [ 713.303283][T20070] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 713.334235][T20070] device veth553 entered promiscuous mode [ 713.344799][T20070] bond182: (slave veth553): Enslaving as an active interface with an up link 12:12:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000008012000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000001c0)=0x1) [ 713.559620][T20089] validate_nla: 1 callbacks suppressed [ 713.559641][T20089] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 713.615588][T20089] device bond183 entered promiscuous mode [ 713.616208][T20092] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 713.629211][T20092] device veth555 entered promiscuous mode [ 713.633298][T20092] bond183: (slave veth555): Enslaving as an active interface with an up link 12:12:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x100) 12:12:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 12:12:57 executing program 3: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 12:12:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000019000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x8, 0x1}, 0x8) 12:12:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x6, 0x0, 0x0) 12:12:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000200)="b5", 0x1, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) [ 714.129896][T20104] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:57 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x49) 12:12:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) pipe2(&(0x7f0000000080), 0x0) 12:12:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, 0x0, 0x0) 12:12:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001240)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001280)=""/200, 0xc8}, 0x0) 12:12:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b9, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x183, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)='5', 0x1}, {0x0}], 0x3}, 0x0) [ 714.286031][T20104] device bond184 entered promiscuous mode 12:12:57 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d0001, 0x0) 12:12:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000200)="b5", 0x1, 0x85, &(0x7f0000000100)={0x10, 0x2}, 0x10) [ 714.362953][T20112] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000020000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) 12:12:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1011, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:12:58 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 12:12:58 executing program 0: r0 = epoll_create(0x7) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 714.542431][T20112] device veth557 entered promiscuous mode [ 714.573473][T20112] bond184: (slave veth557): Enslaving as an active interface with an up link 12:12:58 executing program 2: lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 12:12:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000040), 0x14) 12:12:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b9, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x183, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 714.711606][T20150] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:58 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 12:12:58 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) [ 714.805230][T20150] device bond185 entered promiscuous mode [ 714.852230][T20156] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0xfffffe01, 0x0}, 0x0) 12:12:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0xf0}, 0x0) [ 714.936619][T20156] device veth559 entered promiscuous mode [ 714.951801][T20156] bond185: (slave veth559): Enslaving as an active interface with an up link 12:12:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000021000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b9, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x183, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 715.056597][T20181] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r0, 0x0, &(0x7f0000001480)=0xffffff6b) 12:12:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt(r0, 0x0, 0x5, 0x0, &(0x7f0000000b40)) [ 715.170975][T20181] device bond186 entered promiscuous mode [ 715.178285][T20187] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 715.216398][T20187] device veth561 entered promiscuous mode [ 715.226263][T20187] bond186: (slave veth561): Enslaving as an active interface with an up link 12:12:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1011, 0x0, &(0x7f0000000040)) 12:12:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 12:12:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x31}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) 12:12:58 executing program 3: getresuid(0x0, 0x0, &(0x7f0000000100)) 12:12:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000025000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bb, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x185, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:58 executing program 5: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) 12:12:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48}, 0x10) 12:12:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000280), 0x8) [ 715.496061][T20198] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 12:12:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000002300)=[{&(0x7f0000000040)="0fae2d9ea786e3ff7f821188c59240e06200bc3661fbb4c3ddf77e2214a307a19b44311590f286a488d623731e5b309872e33d376010c9ad8707784c6aeb16b195f19d0d53925939aab91a296b4c39c4c668fec1a169958989b7b5a6adc8cd0a650f423ceb6d636f25320502a1a5f29419975959ba289db1ad37265fb74d56cd199d95291f8ff2cce2bb5a7b4e0f42a71a5c5725016396485c2965090401d511fac450c2aa03ac17fc12db85833cd5ffa2349e3f7e9883db7fae305cb451a1c10cfd87ff3e632ad8037cbff615ae7f22ad30ab6ffc257af46b98b218ca86", 0xde}, {&(0x7f0000000140)="e58e9fa68f26075dff44589df255f9616b01051e33369e62b85066e7138ca3f737d97b17938a2cadb084f613acf3092a2b77083e3c00c34693e2c2350c8f26c28f8157531753cf4975e7968a9e51333a995bf13394c9c3b4e1fbf03b373eed7ca377b1502341bfc2", 0x68}, {&(0x7f00000001c0)="dde24823b28a2b8ed1e7019be500a90060dfde55279c1c7252a44c27e14f8fc5752c79bf5cf55a7cf6cca139896cd401d89bd2917e87e69f16d3ba20c6a65c539a35aabbc9dc5ba5fffcbd7cbda24e744880098f7763df946f99409d8944154d65568939039db0f682a9d5e4ae1ff1d8aa8956b8920bd53b1967c7c3577a61f8a5bea1ad585f87e0c651ca440a3dcd9b58f964c2d2a9214adef880c6f545a5294306e6ea5cb82737e289b2a1459aa1bb42fb782f6578206fd891c7e57e63005855ab71035168ab9ee8195da73cf959c9809c823b69cc553a21fc761df5add691a5ce1c319c122d5d4d6ede87c8a5610c9a", 0xf1}, {&(0x7f00000002c0)="f53349f3e36d71d9c16a815589b688de308b014ba9", 0x15}, {&(0x7f0000001300)="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", 0x599}], 0x5}, 0x0) 12:12:59 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 12:12:59 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) 12:12:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bb, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x185, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7f}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) 12:12:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000140)={0x7f, 0x20, 0x4, 0x3f, 0x1, 0x40, 0x5, 0x9c, 0x0, 0x0, 0x7f}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) [ 715.675051][T20198] device bond187 entered promiscuous mode [ 715.702681][T20211] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 715.867472][T20211] device veth563 entered promiscuous mode 12:12:59 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f00000020c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1040"], 0x10}, 0x101) 12:12:59 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000000c0)="f4", 0x1}], 0x1}, 0x0) 12:12:59 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0x1c, 0x1c}, 0x1c) 12:12:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000040000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) [ 715.912989][T20211] bond187: (slave veth563): Enslaving as an active interface with an up link 12:12:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0xa}, 0xa) 12:12:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000140)={0x7f, 0x0, 0x4}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0xb) 12:12:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1bb, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x185, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 716.064199][T20251] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:12:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), 0x88) 12:12:59 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000001740)='./file0\x00', 0x2, 0x0) 12:12:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1014, 0x0, 0x0) 12:12:59 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[{0x10}], 0x10}, 0x0) 12:12:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 12:12:59 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x0, 0xfffffff7) [ 716.224891][T20251] device bond188 entered promiscuous mode [ 716.251366][T20255] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 716.294629][T20255] device veth565 entered promiscuous mode [ 716.308742][T20255] bond188: (slave veth565): Enslaving as an active interface with an up link 12:12:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f0000000040)=0x60, 0x4) 12:12:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000007b000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:12:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000040), 0x4) 12:12:59 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 12:12:59 executing program 2: keyctl$negate(0x1d, 0x0, 0x0, 0x0) 12:12:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1be, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x0, "ff12ef"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:12:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x80) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xb500, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:12:59 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=@in={0x10, 0x2}, 0x10) 12:12:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/105, 0x69}], 0x1}, 0x82) 12:13:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, &(0x7f0000000240)="a6", 0x1, 0x0, &(0x7f00000002c0)=@in={0x10, 0x2}, 0x10) [ 716.549157][T20285] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}, 0x300}, 0x0) [ 716.640068][T20285] device bond189 entered promiscuous mode [ 716.659302][T20294] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0127bd7000fbdbdf25090000000800010001000000050007"], 0x24}}, 0x0) 12:13:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)) [ 716.724811][T20294] device veth567 entered promiscuous mode [ 716.756202][T20294] bond189: (slave veth567): Enslaving as an active interface with an up link 12:13:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000f000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:00 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="71aceb62d6df"}, 0x10) 12:13:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004340)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @private2, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) 12:13:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1be, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x0, "ff12ef"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/pid\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x28}}, 0x0) 12:13:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x80) 12:13:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454dc, 0x20000000) [ 716.921313][T20312] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 717.003464][T20312] device bond190 entered promiscuous mode [ 717.010057][T20323] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 717.060663][T20323] device veth569 entered promiscuous mode [ 717.072605][T20323] bond190: (slave veth569): Enslaving as an active interface with an up link 12:13:00 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 12:13:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x6ca, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x228, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}, {{@ipv6={@empty, @private1, [], [], 'geneve1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 12:13:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) accept4(r1, 0x0, 0x0, 0x0) 12:13:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000019000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c000000000000000002000000090001007379fa3000000000080002400000000288bb227673797a310000000014000000110001"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c000000000000000002000000090001007379fa3000000000080002400000000209000100"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003740)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) 12:13:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1be, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x0, "ff12ef"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:00 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="99cd5aab91497babcabadd7d87773749d69e67ccde1548ca932f6d4c155a90254012bbc4eec6844554da269d3c51b96764ccc6bfa743e4e69f2ad1805304031ce258595113a3ef27eb223383a3172d37a0e0d36a98b58f9b39d8f59a9e8735b44c1d5b26fb8dd2e7cd257ecb6679c477d37d", 0x72}, {&(0x7f0000000740)="435d9bb6800dfc0910c12920dd2560d31939f480045d204945d40a26871116782d6948adf4043fe3022c134dfc0505bd758a5f629f2aceb4af68abf383c41421222a59e40d60cf9bd70fa6d48a0e7a15f9f66ac7785ea341f95c28663e622f26dbc53d40bbb685ef757a24b5c3e7085af1416df456cf6848009a1b7aee60a2fd1193d239b1e2fdf0781a5ce7b8906af0d78fa89cbb26a187e390477f093ed988433cd6a666822a6ba2e16517de471a57ef6951fdc1a69c72da1909ae1bcc46b97429a8f7b6c7b38305a253310501ae9831a7e714aac3aca0b3282e29d7785d21b4514b15f53af393d5f4350e738f81015fdf38d3edc078b33ed42f24d888af908cbc37d933fb9dc2bfe8f59f55b4ef1e374d57b7cdc8d9dde63be849225e7e18b396315c1cfccf99a5170949fee12e42925ea6b7867352a7853f8f8fc241537a750a788fdfb2c81379c950747929a49ee887151a5ba418119c1d00272704529fc2f416f141f4d750fb1f7fbbb644b81aab30dca3697bd4414c9a2590c9c1424b1144b469f9358888329b9331bbb37e5faa1e348af480c03d3b673426f189dcd76a4a392aef1c96f4fcc8b2451c92d8a1b6ea4480c13b09846460cd3b7497de733ad5b46b031cf5ad2521f049d78622169e329a8fb96630ebceeef3aef95e8cde9dd94f29c2f6f398b325c2fb848309a69d5f1c06f272c26bca1fcbd376406e974a2a7267403ad6d343631541df9d777515d1101200d137ef7c264cc166155b33031dec81884d1bdee1031e40a273722108db815390a09fe6c7dcb8e91d6879e3d12e987fac2012d9dc398badeae83ce14c5cd79e0dab1941d8f19dcde4c86be8fc833e962858ad28d3c53ddd4d88d76bd9b7751b4f623e1c24054606cccdbce584f4ddd0a7a95ed76d60e82296ce7eb7d571a75394c8e938f1de8f17f5d0d5a08a030342eac41b984de13cbe346c9fd6cdd412b188925e9050252ff0a74bb8b466f42b0036462a7ffe891691227df1cfb5a7c90a3a6c65f547409bdea97a8333aa706c4c71b756a8052ad5ac3e644e636d46750b50637ed728fba5cc3a5e0b4ce3730583891cde654c2f36aa1b91975e009b27340dddacb0ed4c11300e2656eb9fbdc9c6d9b3553d91d05851c314ad8cdaeb32964534edcf06102df6b8ff95267354f0778e843375dbfceb2c799f6ad9c20a02854025d450ae0c5d64359978c89d84350b99ab6dd829cd91f282d3e7a235543a0b5e02369464bb0f5f3ccba08b010a1491171efce3342e4f45e8fb104f442bab6443fa50e316fdefaa63ea48f4c24e0187065cdb630142530941996ebd289f1e5ee702d5b8b54d0963c3860b62cbe4c653a55fe35ab0cfe0e635606664e44397947b0b887719241adf5264c903146911c33fc3f59791db71579127d92e51dffb61cc32f592103950c7351b3bb9aea6706528e6587b9fdb41c15e12ffc23727f4c7be92a043c6196bab41f904d133b5072b51028ad1d1dd95e9b7303df51e3a4d832d099e232c857e52af4ff24b662a14f48d39cca1f4c90bb179c1a63286905ae3e950effe94a7cf616ce737b503357142bf16f917b3c34e3d01ad0e8e9aad9635ddd19aeafe768ef708dd06eac022d6c2597ae0189882fbb2d3aeeda966835ea432b605c4c0ec176dad61dfe17edcaa588455d42c1da2abda92a0cb955099ec0e321f9db4559e1037d2ac816b41673647b7952ba87ef32b56eb9bf2e41940ff16b6e47c0760f7d6adb3f145eb58c2133f3dd9e2f6d80146b1aed01c9e75bbbda58b29fbe67621f2672766c864325521e525e8cb42744cf88533d5f1098ec058f9f88677a8a0cfcbe90d17c766b662272b0ee9129fccdcab8d2833c8ba78fcbf4297b6f7d1126cbb3e633b64e8668a86bf3a84b2a34e0131bdb7feb36092dc3564580c10f49d9995450f850e89a68c13e3ffc8b63b2dcb51eaf3034638502b697e1f6cc6e664c5f45c645898ae4c64746fe9320f2cba57c7510cb56ae1d5f2b91cf74749e728c578b3b268d561fd57faed28652ce1c0ab19910d183ba1ec8061ea7e58a683397b06e1730b69681986a586baa0f8c781e691920ab94fb7bf7b729549ed2990638d5367218c26f3ef2ed21634b3c7b036b03cbea9c34189160326573a8ebcf8f4c8acaa9bf7c4deed7643c401678cfd29c92a33019524f10450b408e8faa0808f7db0bb0c3f37bdee5514fe59dbe1277881b50049737baca94ef7a23796612cc4e7bcfdf2f137dd2389c0fe058c4e88ac84c34d663d69b6c761ec53f12f16c2dd9fc966d9f2b7610703415d4bb088b0cfde5bf4580f4745b19b53d276a00b7c55997693e4f7d579ed5856ba81a93e97c4f9aeab8da14db7e899e7a17987563bb139a977a1ff01d10beae74755c3e83eb03376f274589b5bf1583ae43d1863c188900c857944cd3ed75dc321007770594687b8088e82990315afbc8358548af73d0fdd9a7011a30fd9963ecb0f2905c1125e4026160f358d774ed204cd3977879d4d1de92088a5c065c05babad0ebbd99b9fa33e4a668c1578da8475e49f1be19c3900fce0830165583a976b9d14a31e74bbd39c56fe2451fded6bcae2d6e3411e4f2f69f28e5fd36ebc8e357b198c3a2d0b986acd0e90ac99e12f4b270173c4a99febeab42ea19b0be947113bbc728b0fd524fc3bcafc45215ffc39e4c359297f9bc7680b1f75fea8d8c661bb8840d85800269fc7adb14d76ac9aee71787b50037f3812e6f18ab3426e5822252b2ba53de2f76075545f93ad414f3f5366b885d84679867883e242e7053b3aadf353918cda7b0089bf7d1e6941dbe38ec65ed41e3ae31d602730e668891fa6b56881454e0561ea50dbf2790292b2351259112d878b12f28feb7033e5713bfb6afa1b3833b6de2b025b2a9140c7abd9045391f454a180164ab3cea69c1e613f15dc669cc72ecb0bb52f3ac1e1cbcfe159c7a406acc723f5287df2137fd0049f7ea98619f25a0dd82c341775d79414c8c338128003d9b5336192ec7e22dca530b3b4ff9c8dd4d2ed80d91fa5ecbff12f0cdc3d0208bf90303b7388ea9a355d5615c5ead2aa359c10dc86cb1e4da07bfef81cb404c014fd1891fe8ad5d736aba07bbf0127d4c7cd9e4f4fa751142ec14a513cee09440649d0532db66796ef9e9bf0dc168863333ad195bfc893de3ad7b2dbb870a82a036e5ff75e396a77c0fc5d8dcc5e22cecde671bfadde187f4f2b982d0ca4337ef77d02e951acfe63ead907f9fb98c261fe7e874b2b46618b20567913cdbca3c8403c5870d09a01ee04e9ac5174add87b0daa0f98e4b7e35659a1b993a0d3a4aca5c83c1c593f13572096df0b5e88b765ecee39055e0a696252d4d2d9f531246710442e60d2f47d36323fc1d67f12ad20a6180099eea86558a75289cfce969bd68dd0b370823f78df842b8e44affab2bddc5be72f5fc485d805003f2cf8070921da9e8f9e3b5a3adbdbd6f7178456e20f587fcb2721aa23b60682d3a2ef83abc7c0b281cdf0ebb23a5c40fd06c4c7fdde6903859b4f73d7c69329835e490596232b9c46f10bbe716ba59c933b1c91c8a951a2350ca9acaf1612ae6dd5081d61a206dfcc6249612087d87150c459b1e1167658f35749e5593fb22a2d6eb2817008da84f60a2d6e2e67c75b036d675f487e4340c517edef0443cae77772af49cb135f2b0a36c9ca1f6d76ff572215e521aa0e9018170fd242a60956a9381c8c0f4377df7e257591f0db9d4e3ecdf42e64db463b478a8b643544e20c44156873674fa1bc63b367954483b9e66865366b5ec9a19986e2ab432143af658455e9b6a779e0d2846421734456dda57ee9b211f9632fb2cbc3b6b131ceefa39a2f2a0559bcc58ce15d139fcdff5c373687a18c117f99ad335aed96d7722c8b4dda44c6d0bd6f9a3ff9233a0e0d24e93e49491cb0cbc03b78cdbd290b12e7a394afef2151dda6693334967e83e6c2b32a2dd730f1296fa52e1c0a9b764f4922c38cb362f6e85f46ab200db07c48de4e1a09853ae4a443ab1ab5d3c14c683e7936bcdd0f894ceca33723505766c43f287544d1d21798f9d0eab814e1496f980f2d63c64864192711796ac30e362c7f1150a5d0dfed0ec1fe2ba96cd71c103217610c8998f6a4179eab17248d52392d8e5eb9c240ee75f9b055476a4bec9e24737a0839db180391deb6df22bf9a41da8e71e3dea01b93681ad7e36f8bd5962ab07e741ad77809a85d139db733e8640eb17a1942d82600d5c525d00679f87452e507041d3c629f504d1eb59a65765b9dbbd0fdd4f684ac1957c99ebea913130e64153650523d8a6a4fdab427f705e7e8deba1906d231aa5d719055deba358a69955519b182f7b2dbf1731f07bdd6d28f46298854b1415fece5e1fb94e5770f7261ac640f1b5e10418a9d2574452df105d1b4534ea6b9daef22afe1cf006e7973adfe7d6132741e77c6333419356821e1e9d38615a85eda711b68c34f1d4ee956ad7f022641e7c792b70959189a3ee36b3585c96bd2163ae4dcb5980729d01d21a5010d028e544da004e61e118ab9629d7b968fee5a852694aaf5c5b26465a49883c68d6feee49373e63f4c74606673e5697d73a27fb2be44efe79f01ed78ca7152c6e38caa28c7bc38798d654bfcb25aba4b3d707b060438d62fc9f9bba925c12211b9b37c70657f9dbceb1202fff1b98d4ec8484ab66c3d3512916658c6f58a820ee51e608ef6363ecfa4f5abba91c29f1cf7a5c202915f0f4c60b5de30025edd206d4e246eb0fa2bdf0436a2f29cf8b0abf580bfe71e4bba575a4f805714949981a4749f835f442257466053e6302c9ddad5ae535ce4c4a6e23dcf8f84b144a57686e90c90be201d3c7574cc662c3770b6043c0ae62b73ad6ddc1a64027d5da2f262d9f51e03dd1cff05ef6dee104596e9d2df1a264d1e8bbcfb005bf95271cadf5cd75374ad380e15b8d4e890e5b5e828976c5cfca5919e90ab249170988b4776070b9923c95df0070c2c5426a558cf0b89247b1f2177127fe3d952e92025d4c28419887f98e2eeb6518893fc83b33205ef5ace0fd97f57802b76e89929a13802699fc1545eca51d3cac54ebcd4a6059b50bd446064bc5b0ed61ded200c77c9a43a34076252de7dc4e6c62b3acebe2edaf564d3d18708c3ca9dad", 0xe4e}, {&(0x7f0000000200)=',', 0x1}], 0x3}, 0x0) [ 717.476332][T20336] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 717.492391][T20338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 717.506237][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 717.545756][T20346] hub 9-0:1.0: USB hub found [ 717.558539][T20336] device bond191 entered promiscuous mode [ 717.578806][T20346] hub 9-0:1.0: 8 ports detected [ 717.588495][T20343] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000180), 0x2, 0x0) 12:13:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x0, 0x2, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 12:13:01 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4f, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 717.633628][T20343] device veth571 entered promiscuous mode 12:13:01 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x4d206180, &(0x7f0000000200)="8cf11d", 0x3, 0x0, &(0x7f0000000080), 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000019600)="4729090db804cde61b095e6588731d0af060d9b263cf41bc9186642b121f101b08d8df60334835626f209e6fa417033238e3775d6d7518a0d961162fff430f70532cba43d91a7aa13a066fa1ebeccb38a27554a1c6a75bf552c0ff864731db6ccc7b84bfcb81835d10b545dd0b78694345720b3b41aaa83683c89334081bcd8dbf0d2fee087046e70fe01b23c82f6b8a1bfacf6b763e59f51c10a941af83ad9433548dad7589459a8714ed", &(0x7f0000000600)=""/102400}, 0x20) 12:13:01 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 12:13:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000021000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 717.696461][T20343] bond191: (slave veth571): Enslaving as an active interface with an up link 12:13:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x0, "ff12ef04ff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:01 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) unlink(&(0x7f0000000000)='./file0\x00') 12:13:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x0, 0x2, 0x40, 0x0, 0x1}, 0x48) 12:13:01 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240), 0x4) [ 717.850942][T20365] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:01 executing program 3: syz_clone(0x4d206180, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000002c0)="1a8623b7e7bf51939196a124323a3dc644e5dd6b656dc9a42ef77bb2b559aaf18d26a19f6e64a6acbe225b8c5ffeb84752a82ca8fc05b98ac4607c1c65e56af922c51cfea269eddf61b2") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x800, &(0x7f0000000200)="8cf11d1506f42c4744b40fba83453915c746db0b3a4065e706f1433f80dd53298508dc5004c15fcaf2c596ff13f8071dc922", 0x32, &(0x7f0000000000), &(0x7f0000000280), &(0x7f00000002c0)="b63c6ff0872d1aca6909679db887263bee74a174b2d69583b8c873261409d7d7fb6d1e5a9ccb4f8e5d538464b6f11dff46ebdd8d14ba98d320834e9cf0ab414cacc90f93e711d68f236c8e879eadbf3678f9623e31de6b3ae95c91c9d0c278a4778088a8dd312f97fbc003d904ed19b78d4d6c1e60eb85688651f11fe34381dd0687e30000c23ee3de0258e863ef586eaec71c28987fcf346377719d514615f46459eb637036ed6143aa04ff9ce8125d04561b245a466534322979af644146b1a6777c") bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) 12:13:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x3513, 0x22a, 0xa6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800000}, 0x48) 12:13:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1, 0xc6a1}]}]}}, &(0x7f0000001880)=""/130, 0x32, 0x82, 0x1}, 0x20) 12:13:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@alu, @btf_id, @jmp]}, &(0x7f0000001a00)='GPL\x00', 0x5, 0xa3, &(0x7f0000001a40)=""/163, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 717.997441][T20365] device bond192 entered promiscuous mode 12:13:01 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x4d206180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 718.047709][T20376] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 718.153280][T20376] device veth573 entered promiscuous mode [ 718.165477][T20376] bond192: (slave veth573): Enslaving as an active interface with an up link 12:13:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) 12:13:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x0, "ff12ef04ff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:01 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='\x00'}, 0x10) 12:13:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000025000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:01 executing program 0: syz_clone(0x4d206180, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)="b63c6ff0872d1aca80000000b887263bee74a174b2") bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_clone(0x0, &(0x7f0000000100)="5767d5c8b5e6a8f09ca04b63f8d02e2cb49097f3630d25898198c1a0a92ed91812d902c525b11b1f9406de1f76206c4c57fef73ffb4f03fd3f1b168c1dc6bdcf64333ebbf4bc4cf71c7fe6af18640e811a3a5afcb9effa87366c4a05b5a76e576ebe6c43587624bbfec801e666ef99aeec3321a4cb5012287f3cf3efd87302ff76c375f3f7658ed3a1bc8e1f4c549e39865384ed6eb8c936aff3ce92cfac816ceb789dc1d352c5d9ea8b05958dd6", 0xae, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), &(0x7f00000002c0)="b63c6ff0872d1aca6909679db887263bee74a174b2d69583b8c873261409d7d7fb6d1e5a9ccb4f8e5d538464b6f11dff46ebdd8d14ba98d320834e9cf0ab414cacc90f93e711d68f236c8e879eadbf3678f9623e31de6b3ae95c91c9d0c278a4778088a8dd312f97fbc003d904ed19b78d4d6c1e60eb85688651f11fe34381dd0687e30000c23ee3de0258e863ef586eaec71c28987fcf346377719d514615f46459eb637036ed6143aa04ff9ce8125d04561b245a466534322979af644146b1a6777c") bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 12:13:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 718.404715][T20395] device bond193 entered promiscuous mode 12:13:01 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="99cd5aab91497babcabadd7d87773749d69e67ccde1548ca932f6d4c155a90254012bbc4eec6844554da269d3c51b96764ccc6bfa743e4e69f2ad1805304031ce258595113a3ef27eb223383a3172d37a0e0d36a98b58f9b39d8f59a9e8735b44c1d5b26fb8dd2e7cd257ecb6679c477d37d", 0x72}, {&(0x7f0000000740)}], 0x2, &(0x7f00000005c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5ed}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010100}}}], 0x80}, 0x840) [ 718.513918][T20404] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 718.630519][T20404] device veth575 entered promiscuous mode [ 718.651410][T20404] bond193: (slave veth575): Enslaving as an active interface with an up link 12:13:02 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="99cd5aab91497babcabadd7d87773749d69e67ccde1548ca932f6d4c155a90254012bbc4eec6844554da269d3c51b96764ccc6bfa743e4e69f2ad1805304031ce258595113a3ef27eb223383a3172d37a0e0d36a98b58f9b39d8f59a9e8735b44c1d5b26fb8dd2e7cd257ecb6679c477d37d", 0x72}, {&(0x7f0000000740)="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", 0xe4e}, {&(0x7f0000000200)=',', 0x1}], 0x3, &(0x7f00000005c0)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x30}, 0x840) 12:13:02 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000680)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 12:13:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x0, "ff12ef04ff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:02 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x4d206180, &(0x7f0000000200)="8cf11d", 0x3, &(0x7f0000000000), &(0x7f0000000080), 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 12:13:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000007b000d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x3, &(0x7f00000019c0)=@framed, &(0x7f0000001a00)='GPL\x00', 0x5, 0xa3, &(0x7f0000001a40)=""/163, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 718.802852][T20425] validate_nla: 1 callbacks suppressed [ 718.802871][T20425] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x7, 0x0, 0x40, 0x0, 0x1}, 0x48) 12:13:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfcbb, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 12:13:02 executing program 0: syz_clone(0x30002000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:13:02 executing program 2: syz_clone(0x10021080, 0x0, 0x0, 0x0, 0x0, 0x0) 12:13:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x183, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x14d, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x7, 0x9aa}, 0x6e) [ 718.997304][T20425] device bond194 entered promiscuous mode 12:13:02 executing program 3: syz_clone(0x10021080, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 12:13:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x40049409, 0x0) [ 719.067810][T20435] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x7, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1000, 0x56485ee7b31fe39f, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)={@map=r2}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000002c0), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000280)='syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) [ 719.146010][T20435] device veth577 entered promiscuous mode [ 719.196680][T20435] bond194: (slave veth577): Enslaving as an active interface with an up link 12:13:02 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu={0x7}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xae, &(0x7f00000002c0)=""/174, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x7, 0x9aa, 0x220}, 0x6e) 12:13:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000066c0)={0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000080)="f043f4cfb0d75267d5412f9d36918bb0881a57a2ad7ac220542f13dd86d0e3c27c1e28db0f4ef44f16db5a508cf6f531e23d80b31a5d38434b00dde41fdf4ceb1cf91159f1b1c8f3d112554cb8a17eced9242a4ad577c621667a41410c0f420475e7eb8c031f94669a86dc31ceba54d05e816fff0b04fdebc776415b72d73ba156046de878eeb943a750d68230182e3d1adc38c119247a3fc5ed259d6ae7c932d20563a1c77467740afe9627dcaec9f6fc8a75", 0xb3}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000001200)="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", 0xe0e}], 0x3}, 0x0) 12:13:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x4, &(0x7f0000000f80)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000fc0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000012800d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:02 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x18bd, &(0x7f0000000240)=@raw=[@ldst], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xb6, &(0x7f00000002c0)=""/182, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:02 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x10, 0x2}, 0x10) 12:13:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x184, &(0x7f0000000140)={0x10, 0x2}, 0x10) 12:13:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x183, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x14d, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 719.432259][T20466] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:02 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg(r2, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[{0xc}, {0xc}], 0x18}, 0x0) 12:13:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x10, 0x2}, 0x10) 12:13:02 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000280)=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000002900)=[@rights], 0xc}, 0x0) 12:13:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@dstaddrv4={0x10, 0x84, 0x9, @loopback}, @sndinfo={0x1c}], 0x2c}, 0x0) [ 719.546297][T20466] device bond195 entered promiscuous mode [ 719.643258][T20473] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:03 executing program 5: nanosleep(&(0x7f00000000c0)={0x6}, 0x0) 12:13:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001680)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0x10}, 0x0) 12:13:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x49, 0x0, 0x0) 12:13:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011e80d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x183, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x14d, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 719.754870][T20473] device veth579 entered promiscuous mode [ 719.782897][T20473] bond195: (slave veth579): Enslaving as an active interface with an up link 12:13:03 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x1}, 0x1c) 12:13:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 12:13:03 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x181, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) [ 719.915467][T20505] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:03 executing program 3: setrlimit(0x0, &(0x7f00000010c0)) [ 720.010162][T20505] device bond196 entered promiscuous mode 12:13:03 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000240)=""/148, &(0x7f0000000100)=0x94) 12:13:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) [ 720.064042][T20513] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x185, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x14f, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 720.205586][T20513] device veth581 entered promiscuous mode [ 720.260182][T20513] bond196: (slave veth581): Enslaving as an active interface with an up link 12:13:04 executing program 5: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 12:13:04 executing program 0: accept$inet6(0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)=0x1c) 12:13:04 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmdt(0x0) 12:13:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110400040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001680)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000840000000a0000000000000000eb"], 0x1c}, 0x0) 12:13:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x185, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x14f, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:04 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) msgget(0x3, 0x68f) r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)={0x9, 0x2, '\x00', [@generic={0x9, 0x11, "41e5532c3bfe2c67eaefc26d447e5b1694"}, @pad1]}, 0x20) 12:13:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r0, 0xffff, 0x1011, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 720.650343][T20544] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000100)="054009868b122977922ad14812043e4101cc1ae2cd635afb02255e2367dee319723cef6d99884e5e1305e4b0876fb2f349cddd7fa5a574b3c27eecec69d94c5cec0c46b4e985b9b97f4de88ff0d6d9ec6a8ac4cdf03d00000000d7ccf59400395123648633d1b6c25caf3aad356b51deb3389cd69221966200acc2800187a0e481ea5687b48000000000155bc980389894fc45f4f8ab60296cb6da414659db845bb407ca394a3e15b9ff782b7bbfe19de9ffae0f36f900000000fb642eccd4fc98b25e99c649cc029939d32193691496e89b073643516d24884e5291a16dc29b8dfc35423fe92748e9af29ab", 0xec, 0x108, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 720.741470][T20544] device bond197 entered promiscuous mode 12:13:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000100)={@multicast2, @broadcast}, 0xc) 12:13:04 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000180)) [ 720.817657][T20549] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@init={0x14}], 0x14}, 0x0) 12:13:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), 0x8) 12:13:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x185, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x14f, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:04 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 721.023268][T20549] device veth583 entered promiscuous mode [ 721.053429][T20549] bond197: (slave veth583): Enslaving as an active interface with an up link 12:13:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011020d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = dup(r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000080)={0x5997, 0x0, 0x0, 0x0, r3}, 0x10) 12:13:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f0000000140)={@multicast1, @multicast1}, 0xc) 12:13:04 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x1}, 0x1c) 12:13:04 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000002fc0)={&(0x7f0000002d40), 0xa, 0x0, 0x0, &(0x7f0000002f40)=[@rights], 0x10}, 0x0) 12:13:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1a3, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x16d, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x4, "a78ce540b259808000000000000023493b87aafaffffffffffffff237324"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="baa8938f75b7836a198387049e8788ef1c9300a7e06146703d8f1004b477661be1f2e9726115b2b0d6ec43b90e72d7ecfecd2e5602ff5f525de50ee854656bb2ffd373443721bf1a1871385ea504cf49d4c0e4162effdcfc278aa6b752a192b1d134a97c117e0b7db38befdbe523c3158e1706c6ce8ee18f34675055a43748f88e9703d70441d3aa1396e5eb1225f6f2", 0x90}, {&(0x7f0000000180)='_', 0x1}, {0x0}], 0x3, 0x0, 0x5c}, 0x0) 12:13:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0xffff, 0x4, &(0x7f0000000c40)="f0f40ea8", 0x4) 12:13:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001680)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000840000000a000000000000000000000000000000cb"], 0x1c}, 0x0) [ 721.269104][T20590] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 12:13:04 executing program 5: setrlimit(0x0, &(0x7f0000000040)) getrusage(0x0, &(0x7f0000000080)) 12:13:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000084000000040000005a000043f8ffffff07000000", @ANYRES32=r2, @ANYBLOB="1c0000008400000024000000050000060300000000010000", @ANYRES32, @ANYBLOB="1c"], 0x54}, 0x0) [ 721.507149][T20590] device bond198 entered promiscuous mode 12:13:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011030d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1a3, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x16d, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x4, "a78ce540b259808000000000000023493b87aafaffffffffffffff237324"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) 12:13:05 executing program 2: semget(0x0, 0x3, 0x32c) 12:13:05 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000), 0x8) sendto$inet6(r0, &(0x7f0000000180)="66b884be8ef4b3c4764afd7cf28e2170f5f343ab19884d5a5de8b71659b4163044ef4e84ad7fb274dd2de186cbfb44f15f9ecbdfba56d4bdc206fc05d110a712f62da4e33fb6fd62973f2685fed06de3ee12903814635f27a874999fb0848d9ba5c65193305a6734836ca7813094e3e8ee83f1faffa953c5411805cd76aba4ecca290d67cdc0b6762d52d696649680f4efe2cd4b89704155a3bbfdd426a54b5986", 0xa1, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x1}, 0x1c) 12:13:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000780), &(0x7f00000007c0)=0x8) [ 721.616596][T20598] device veth585 entered promiscuous mode [ 721.646399][T20598] bond198: (slave veth585): Enslaving as an active interface with an up link 12:13:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) 12:13:05 executing program 2: setrlimit(0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000040)=""/33, 0x21, 0x0, 0x0, 0xffffffffffffff1c) 12:13:05 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) [ 721.760449][T20623] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:05 executing program 3: socketpair(0x1c, 0x0, 0x4, 0x0) 12:13:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000100)="483c95b8ff3c0528bc4dd20100000000000000253879f872e279cb3713c63480ec34d6519734c9ddb91f7eb6787b55677abaecb4a13df25c13290d4d59436822ad1502c815808f1d2174c5af95b25e8cfef173e32b6da58c63253f5d38890ad78924b142a6a7678ed13fbfbb40bd9c1c22f8caa4a799454c538d8f26cd03880d94810df09676e26afdb8a8954dc2924af4e2a68a37b8ddbbf7261a3110e9376937f29e64ebc59c7a2ed61342df4e1cbd65098cc0c24a55104f2fa0714101ded96345efc797846861c3e162389614b42231f3d1d036bd8b8f1bf249a3bc265a9eb1", 0xe1) 12:13:05 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ff7000/0x7000)=nil, 0x3000) [ 721.909132][T20623] device bond199 entered promiscuous mode [ 721.915457][T20630] __nla_validate_parse: 1 callbacks suppressed [ 721.915475][T20630] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011040d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3c}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x10) 12:13:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1a3, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x16d, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x4, "a78ce540b259808000000000000023493b87aafaffffffffffffff237324"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:05 executing program 0: socketpair(0x1c, 0x0, 0x0, 0x0) 12:13:05 executing program 5: socket$inet6_udplite(0x1c, 0x2, 0x88) munlockall() 12:13:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x52, 0x0, 0x0) [ 722.082633][T20630] device veth587 entered promiscuous mode [ 722.102342][T20630] bond199: (slave veth587): Enslaving as an active interface with an up link 12:13:05 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x60000000) 12:13:05 executing program 0: fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x2000) 12:13:05 executing program 2: setgroups(0x5, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) 12:13:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast2}], 0x2c}, 0x0) 12:13:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$inet(r0, &(0x7f0000001500), &(0x7f0000001540)=0x10, 0x0) [ 722.249099][T20657] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:05 executing program 2: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x10, 0x2}, 0x10) [ 722.384329][T20657] device bond200 entered promiscuous mode [ 722.394164][T20668] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 722.480570][T20668] device veth589 entered promiscuous mode [ 722.495545][T20668] bond200: (slave veth589): Enslaving as an active interface with an up link 12:13:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011050d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:05 executing program 2: accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) 12:13:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b2, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x17c, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, &(0x7f0000001200)=[@dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}, @sndrcv={0x2c}], 0x3c}, 0x0) 12:13:05 executing program 0: lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 12:13:05 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 12:13:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000100)="05", 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 12:13:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)='H', 0x1) 12:13:06 executing program 3: setrlimit(0x0, &(0x7f0000000040)) getrusage(0x1, &(0x7f0000000080)) 12:13:06 executing program 5: setrlimit(0x409e2ce3bb4de10e, &(0x7f0000000000)) 12:13:06 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x5c}, 0x0) 12:13:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) [ 722.709064][T20690] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 722.796134][T20690] device bond201 entered promiscuous mode [ 722.862148][T20697] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 722.963379][T20697] device veth591 entered promiscuous mode 12:13:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011060d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:06 executing program 5: ioctl$KDSETMODE(0xffffffffffffff9c, 0x20044b0a, 0x0) 12:13:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r0, &(0x7f0000000140)=@in6, &(0x7f0000000180)=0x1c) 12:13:06 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) accept(r0, &(0x7f0000000540)=@in6, &(0x7f0000000580)=0x1c) 12:13:06 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000013c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast2}], 0x10}, 0x0) 12:13:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b2, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x17c, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 723.004932][T20697] bond201: (slave veth591): Enslaving as an active interface with an up link 12:13:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)='_', 0x1}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ffff000001000000", @ANYRES32=0xffffffffffffff9c, @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYBLOB="20000000ffff000005000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYRES32, @ANYRES32, @ANYBLOB='$'], 0x5c}, 0x0) 12:13:06 executing program 3: select(0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)) 12:13:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000180)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2ce}}, {@journal_checksum}]}) [ 723.192438][T20719] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:06 executing program 5: syz_mount_image$ext4(&(0x7f0000001380)='ext2\x00', &(0x7f00000013c0)='./file0\x00', 0x0, 0x4c00, &(0x7f0000001700), 0x0, &(0x7f0000001780)={[{@nobh}, {@abort}]}) 12:13:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000140)={0xb}) 12:13:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d40)="4810aad36e095c73523682590ac3e533d5473cba93ff54bc", 0x18}, {&(0x7f0000000e40)="3d4f7d27b5f4dc31c10d0d183fa873f98286787c5182", 0x16}, {&(0x7f0000000740)}, {&(0x7f0000000f00)}, {0x0}, {&(0x7f0000001040)="5efff8c7b2e9fe7b4e6fb98e9f5d01e6f5efc794092b2f4184ce16b20f86230a9d56774497e68d9b3aab4f32b92c4ca4d8abc57d6e1122a5931bb4a43e8e4efb3dc7684c12a099ac53777f1f0873ace1", 0x50}, {&(0x7f00000010c0)="eac16fd6b788", 0x6}], 0x7, &(0x7f0000001340)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000005900000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48040}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4000c001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 723.300190][T20719] device bond202 entered promiscuous mode [ 723.311661][T20726] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 723.445766][T20726] device veth593 entered promiscuous mode [ 723.456103][T20728] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 723.530619][T20726] bond202: (slave veth593): Enslaving as an active interface with an up link 12:13:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011070d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1b2, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x17c, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:07 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="a8000000000000000100000001"], 0xa8}, 0x0) 12:13:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) setpriority(0x0, 0x0, 0x4) getpgid(0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$vsock(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12:13:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000340)={0x10, 0x2}, 0x10) dup2(r1, r2) 12:13:07 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x12300, 0x0) 12:13:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setscheduler(0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x9bc34bbb38999d1f, &(0x7f0000000180)={&(0x7f0000000080)=""/244, 0xf4}) setpriority(0x0, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x5}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000e40)}, {&(0x7f0000000740)="8a", 0x1}, {0x0}, {&(0x7f0000000f40)="86340c0f7dbd0d750e451333cdeffc3cd1242bc5c7a2cddb3071f462da54b8322424928746a16e20ea2eae808aeee0db057ff35d6e3668bb38b1d82ceb01e999236379ba133aae300640a9c6f568b07a695b9de2bdfb4f1fc121cf199fa6880c0a2c3d2da83fc9a2a02a403666a5445ac6291eef428a16a9c19b7d480c6e64e9004090363c7191367c3f29c8ae24223ded6af7c80112b159c1321f556a3c67ce8528", 0xa2}, {&(0x7f0000001040)="5efff8c7b2e9fe7b4e6fb98e9f5d01e6f5efc794092b2f4184ce16b20f86230a9d56774497e68d9b3aab4f32b92c4ca4d8abc57d6e1122a5931bb4a43e8e4efb3dc7684c12a099ac53777f1f0873ace14371", 0x52}, {&(0x7f00000010c0)}], 0x6, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000590000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4080}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003a40)}, {&(0x7f0000003ac0)="f1f1e4cf1e2bec28d33d5440afadbbe5a0c767b6f3b5d42884a0a287de81ab6b883e1014b0656342dd08e79b78e633c3e622d106e75f72fb496318a9d334322115a7e32a460be288e7001eda86d1984c054a7fb15baf3c765e0e989a3356b239d5b8288f95c01dfacae6b37b01451d334f2726afe73afbb6d267398d31c4e93d1d97923ed430fb0ab72a77ca8a13499f3e1a29b0a7d6fd619040bbed91fa6c7ce8058558e83ee435ae63f4", 0xab}, {0x0}], 0x3, &(0x7f0000003e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x4, 0x4000c001) getpgid(0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000007c0)) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 723.717730][T20747] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 12:13:07 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) [ 723.948547][T20734] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 723.982070][T20747] device bond203 entered promiscuous mode 12:13:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0xc, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x228, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}, {{@ipv6={@empty, @private1, [], [], 'geneve1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 12:13:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1ba, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x184, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000011c0)={0x2, @win={{}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) [ 724.003122][T20751] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 724.215617][T20751] device veth595 entered promiscuous mode [ 724.241976][T20751] bond203: (slave veth595): Enslaving as an active interface with an up link 12:13:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011080d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) 12:13:07 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000005440), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {}, {0x0, 0x92}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0xdae0, 0x0, 0x0, 0x0, 0x2}) 12:13:07 executing program 0: socketpair(0x25, 0x1, 0x0, &(0x7f0000002a40)) 12:13:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1ba, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x184, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) [ 724.383998][T20773] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 724.485152][T20775] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 724.605746][T20775] device bond204 entered promiscuous mode 12:13:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setscheduler(0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x9bc34bbb38999d1f, &(0x7f0000000180)={&(0x7f0000000080)=""/244, 0xf4}) setpriority(0x0, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x5}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000e40)}, {&(0x7f0000000740)="8a", 0x1}, {0x0}, {&(0x7f0000000f40)="86340c0f7dbd0d750e451333cdeffc3cd1242bc5c7a2cddb3071f462da54b8322424928746a16e20ea2eae808aeee0db057ff35d6e3668bb38b1d82ceb01e999236379ba133aae300640a9c6f568b07a695b9de2bdfb4f1fc121cf199fa6880c0a2c3d2da83fc9a2a02a403666a5445ac6291eef428a16a9c19b7d480c6e64e9004090363c7191367c3f29c8ae24223ded6af7c80112b159c1321f556a3c67ce8528", 0xa2}, {&(0x7f0000001040)="5efff8c7b2e9fe7b4e6fb98e9f5d01e6f5efc794092b2f4184ce16b20f86230a9d56774497e68d9b3aab4f32b92c4ca4d8abc57d6e1122a5931bb4a43e8e4efb3dc7684c12a099ac53777f1f0873ace14371", 0x52}, {&(0x7f00000010c0)}], 0x6, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000590000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4080}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003a40)}, {&(0x7f0000003ac0)="f1f1e4cf1e2bec28d33d5440afadbbe5a0c767b6f3b5d42884a0a287de81ab6b883e1014b0656342dd08e79b78e633c3e622d106e75f72fb496318a9d334322115a7e32a460be288e7001eda86d1984c054a7fb15baf3c765e0e989a3356b239d5b8288f95c01dfacae6b37b01451d334f2726afe73afbb6d267398d31c4e93d1d97923ed430fb0ab72a77ca8a13499f3e1a29b0a7d6fd619040bbed91fa6c7ce8058558e83ee435ae63f4", 0xab}, {0x0}], 0x3, &(0x7f0000003e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x4, 0x4000c001) getpgid(0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000007c0)) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12:13:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_getnexthop={0x20, 0x10, 0xc0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x38}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 12:13:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000005440), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {}, {0x0, 0x92}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0xdae0, 0x0, 0x0, 0x0, 0x2}) 12:13:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="5079e401dadcdc6cd7fb249558b0d1e13d06dc20d26a29e5a10716b2c0427b6f2074f18779098cd068852b83a09c9dda2612482da266d1d20c157fb5fda5bd23e5a48118396b8e842824cf4afb7a925c3e1b3dc8c9a9706e92b4dadfbb2f4674869ee3ab63291d9bb0c71ccdaacc083d59b5de6a2644a3479221f8979c0ee9725d05e2236d524a9e2dfa8db1a18a245683d2acf588770a943be2da1a885e05358b2dd8b8cc3006e660f379745f03bbefca9f40b394fcf584cdc935", 0xbb}, {&(0x7f0000000340)="ec474c7630f28cb79fd8d8de159fb1a728c0cf0b939b892d6c35f2", 0x1b}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98, 0x5}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b00)="ca07ec9b336dd171c492619d1c24929104be8335d9413828bbaac0298e5b64a9e9b3809ad2dc26c50003a558fd5606d2ce13868b4259ba0ecd4911be86ba2b0509420bc37a31fc34dd57b5d969b95454b1242ee21ef1e960446b598d95ffb598943fa238f356fb1f5ec06e7dfb73a97b0a5805461656fc11e6e81e47ebb6c2ab2c7c9a9cbae8c656b94d6692b0709b13a5ba9933", 0x94}, {&(0x7f0000000bc0)="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", 0xfe}], 0x2, &(0x7f0000000d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d40)="4810aad36e095c73523682590ac3e533d5473cba93ff54bcb9", 0x19}, {&(0x7f0000000e40)="3d4f7d27b5f4dc31c10d0d183fa873f98286787c5182", 0x16}, {&(0x7f0000000740)}, {&(0x7f0000000f00)}, {0x0}, {&(0x7f0000001040)="5efff8c7b2e9fe7b4e6fb98e9f5d01e6f5efc794092b2f4184ce16b20f86230a9d56774497e68d9b3aab4f32b92c4ca4d8abc57d6e1122a5931bb4a43e8e4efb3dc7684c12a099ac53777f1f0873ace143713553b9e3dbbb505266c6893eb2b3742b06bc32ffc99252d2", 0x6a}, {&(0x7f00000010c0)="eac16fd6b788", 0x6}], 0x7, &(0x7f0000001340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000005900000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48040}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4000c001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12:13:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1ba, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x184, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 724.695257][T20782] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:08 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/71, 0x47}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000000)={0xc}, 0x4) [ 724.806678][T20782] device veth597 entered promiscuous mode [ 724.911828][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 724.924014][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 724.931797][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 724.945642][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.020575][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.034930][T20782] bond204: (slave veth597): Enslaving as an active interface with an up link [ 725.076958][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.109246][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 12:13:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011090d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 725.154020][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.217480][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.258224][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.292495][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.329055][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.374001][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.420328][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.463226][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.511609][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.558994][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 12:13:09 executing program 0: syz_mount_image$ext4(&(0x7f0000001380)='ext2\x00', &(0x7f00000013c0)='./file0\x00', 0x300, 0x0, &(0x7f0000001700), 0x0, &(0x7f0000001780)) [ 725.615052][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.655205][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 12:13:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4a, &(0x7f0000000140)) [ 725.678517][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.687067][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.695238][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.710730][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.741389][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.770763][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 12:13:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setscheduler(0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x9bc34bbb38999d1f, 0x0) setpriority(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="5079e401dadcdc6cd7fb249558b0d1e13d06dc20d26a29e5a10716b2c0427b6f2074f18779098cd068852b83a09c9dda2612482da266d1d20c157fb5fda5bd23e5a48118396b8e842824cf4afb7a925c3e1b3dc8c9a9706e92b4dadfbb2f4674869ee3ab63291d9bb0c71ccdaacc083d59b5de6a2644a3479221f8979c0ee9725d05e2236d524a9e2dfa8db1a18a245683d2acf588770a943be2da1a885e05358b2dd8b8cc3006e660f379745f03bbefca9f40b394fc", 0xb6}, {0x0}], 0x2, 0x0, 0x0, 0x5}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b00)="ca07ec9b336dd171c492619d1c24929104be8335d9413828bbaac0298e5b64a9e9b3809ad2dc26c50003a558fd5606d2ce13868b4259ba0ecd4911be86ba2b0509420bc37a31fc34dd57b5d969b95454b1242ee21ef1e960446b598d95ffb598943fa238f356fb1f5ec06e7dfb73a97b0a5805461656fc11e6e81e47ebb6c2ab2c7c9a9cbae8c656b94d6692b0709b13a5ba9933", 0x94}], 0x1, &(0x7f0000000d00)}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d40)="4810aad36e095c73523682590ac3e533d5473cba93ff54bcb9", 0x19}, {&(0x7f0000000e40)="3d4f7d27b5f4dc31c10d0d183fa873f98286787c5182", 0x16}, {&(0x7f0000000740)}, {&(0x7f0000000f00)}, {0x0}, {&(0x7f0000001040)="5efff8c7b2e9fe7b4e6fb98e9f5d01e6f5efc794092b2f4184ce16b20f86230a9d56774497e68d9b3aab4f32b92c4ca4d8abc57d6e1122a5931bb4a43e8e4efb3dc7684c12a099ac53777f1f0873ace143713553b9e3dbbb505266c6893eb2b3742b06bc32ffc99252d2", 0x6a}, {&(0x7f00000010c0)="eac16fd6b788", 0x6}], 0x7, &(0x7f0000001340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000590000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4080}}, {{&(0x7f0000001400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001740)}, {&(0x7f0000002740)="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", 0xff8}], 0x2, &(0x7f0000003840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0xc0, 0x48040}}, {{&(0x7f0000003940)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003cc0)=[{0x0}, {&(0x7f0000003a40)="cf21fdfe40a6131ce6cbe2de147737e23e8f6d018eda584992b918fd8f9b45392f3c1fffab24f858136b74e479b50c1ef604a52ff0bd2c99a45c654a43b16d77ee7cba98d2b749cefa72d2916c0f24592fb15fe97232a9f0b3291fca58a5344c10f213bc2ceb0980262a1b51506429487d34a3d1e018be9984", 0x79}, {&(0x7f0000003ac0)="f1f1e4cf1e2bec28d33d5440afadbbe5a0c767b6f3b5d42884a0a287de81ab6b883e1014b0656342dd08e79b78e633c3e622d106e75f72fb496318a9d334322115a7e32a460be288e7001eda86d1984c054a7fb15baf3c765e0e989a3356b239d5b8288f95c01dfacae6b37b01451d334f2726afe73afbb6d267398d31c4e93d1d97923ed430fb0ab72a77ca8a13499f3e1a29b0a7d6fd619040bbed91fa6c7ce8058558e83ee435ae63f4038c06dcb30ad1fb97d687ea4a0d03988095b6926ddcef3e9a732cab570b0324e4218d3ff7563b5da7f9ee7f42db95c3fe0867c5abdb32a3d63bd05009f85660ec33a585b8eb", 0xf1}, {&(0x7f0000000500)="6cd209498022300b1cb86136e216eade0432206925fdd25744cab5ad62dcf6248f58f258414be408f6dab49d0cc187eae1d00ded6d3c936b84a6a7188a41e2bd570f20a49109e2202b6f69eb17405963d33295b24fffd0cb", 0x58}, {0x0}], 0x5, &(0x7f0000003e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xf8, 0x4004}}], 0x5, 0x4000c001) getpgid(0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000007c0)=0x7fff) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 725.796257][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.826339][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.836053][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.845231][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.854063][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.861880][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.870232][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.877757][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.886250][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.894665][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.902953][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.920982][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.933156][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.942409][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.950912][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.960094][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.967788][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 725.978035][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 12:13:09 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x30, 0xffffffffffffffff, 0x10000000) [ 725.998236][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.014464][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 12:13:09 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e105550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 726.065978][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.086071][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.096618][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.110516][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.123210][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.134694][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.167654][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.188508][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.196614][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.228268][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.244584][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.252347][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.260141][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.267617][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.275453][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.283278][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.291085][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.300214][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.307640][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.315610][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.323763][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.331648][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.344876][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.371537][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.388361][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.396126][ T3681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 726.452240][ T3681] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 12:13:09 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x4207, r0) tkill(0x0, 0x0) 12:13:09 executing program 5: r0 = syz_io_uring_setup(0x69d2, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x10000000) [ 726.506551][T20804] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1be, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 726.597544][T20805] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ptrace$getregset(0x4204, 0x0, 0x9bc34bbb38999d1f, 0x0) setpriority(0x0, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="5079e401dadcdc6cd7fb249558b0d1e13d06dc20d26a29e5a10716b2c0427b6f2074f18779098cd068852b83a09c9dda2612482da266d1d20c157fb5fda5bd23e5a48118396b8e842824cf4afb7a925c3e1b3dc8c9a9706e92b4dadfbb2f4674869ee3ab63291d9bb0c71ccdaacc083d59b5de6a2644a3479221f8979c0ee9725d05e2236d524a9e2dfa8db1a18a245683d2acf588770a943be2da1a885e05358b2dd8b8cc3006e660f379745f03bbefca9f40b394fcf584cdc935", 0xbb}, {0x0}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b00)="ca07ec9b336dd171c492619d1c24929104be8335d9413828bbaac0298e5b64a9e9b3809ad2dc26c50003a558fd5606d2ce13868b4259ba0ecd4911be86ba2b0509420bc37a31fc34dd57b5d969b95454b1242ee21ef1e960446b598d95ffb598943fa238f356fb1f5ec06e7dfb73a97b0a5805461656fc11e6e81e47ebb6c2ab2c7c9a9cbae8c656b94d6692b0709b13a5ba", 0x92}, {&(0x7f0000000bc0)}], 0x2, &(0x7f0000000d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000e40)}, {&(0x7f0000000740)}, {0x0}, {&(0x7f0000000f40)="86340c0f7dbd0d750e451333cdeffc3cd1242bc5c7a2cddb3071f462da54b8322424928746a16e20ea2eae808aeee0db057ff35d6e3668bb38b1d82ceb01e999236379ba133aae300640a9c6f568b07a695b9de2bdfb4f1fc121cf199fa6880c0a2c3d2da83fc9a2a02a403666a5445ac6291eef428a16a9c19b7d480c6e64e9004090363c7191367c3f29c8ae24223ded6af7c80112b159c1321f556a3c67ce8528", 0xa2}, {&(0x7f0000001040)="5efff8c7b2e9fe7b4e6fb98e9f5d01e6f5efc794092b2f4184ce16b20f86230a9d56774497e68d9b3aab4f32b92c4ca4d8abc57d6e1122a5931bb4a43e8e4efb3dc7684c12a099ac53777f1f0873ace14371", 0x52}, {&(0x7f00000010c0)}], 0x6, &(0x7f0000001340)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4080}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003a40)}, {&(0x7f0000003ac0)="f1f1e4cf1e2bec28d33d5440afadbbe5a0c767b6f3b5d42884a0a287de81ab6b883e1014b0656342dd08e79b78e633c3e622d106e75f72fb496318a9d334322115a7e32a460be288e7001eda86d1984c054a7f", 0x53}, {0x0}], 0x3}}], 0x4, 0x4000c001) getpgid(0x0) dup(r0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12:13:10 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) [ 726.697979][ T6023] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 726.707699][T20805] device veth599 entered promiscuous mode [ 726.958348][ T6023] usb 4-1: Using ep0 maxpacket: 16 12:13:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 12:13:10 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000240)=@in={0x2, 0x4e22, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14}}], 0x18}, 0x0) 12:13:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110a0d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 727.078791][ T6023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 12:13:10 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 12:13:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 12:13:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1be, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 727.258493][ T6023] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 727.268099][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.281330][T20846] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 727.324552][ T6023] usb 4-1: Product: syz [ 727.344042][ T6023] usb 4-1: Manufacturer: syz [ 727.387164][T20846] device bond205 entered promiscuous mode [ 727.394041][ T6023] usb 4-1: SerialNumber: syz [ 727.438818][T20851] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 727.449508][ T6023] usb 4-1: config 0 descriptor?? [ 727.523201][ T6023] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input83 [ 727.587187][T20851] device veth599 entered promiscuous mode [ 727.604134][T20851] bond205: (slave veth599): Enslaving as an active interface with an up link [ 727.818098][ T6023] rc_core: IR keymap rc-imon-pad not found [ 727.824220][ T6023] Registered IR keymap rc-empty [ 727.840792][ T6023] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 727.855276][ T6023] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 727.959887][ T6023] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 727.994413][ T6023] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input84 [ 728.056624][ T6023] imon 4-1:0.0: iMON device (15c2:0040, intf0) on usb<4:9> initialized [ 728.157167][ T14] usb 4-1: USB disconnect, device number 9 [ 728.157963][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 12:13:12 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e105550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 12:13:12 executing program 2: select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x6}, &(0x7f0000000340)) 12:13:12 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'}) 12:13:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1be, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110c0d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{}, {}]}) 12:13:12 executing program 2: mbind(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x0, &(0x7f00000001c0)=0xfffffffffffffffe, 0x9, 0x0) [ 728.735179][T20865] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 12:13:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000200)) [ 728.837620][T20865] device bond206 entered promiscuous mode [ 728.867803][T20874] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000400)={[{@resgid}, {@test_dummy_encryption}]}) 12:13:12 executing program 0: io_setup(0x8001, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0xffffff5c) 12:13:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 728.995736][T20874] device veth601 entered promiscuous mode [ 729.035593][T20874] bond206: (slave veth601): Enslaving as an active interface with an up link [ 729.048386][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 729.257801][T20884] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 729.308264][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 729.438079][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 729.628180][ T14] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 729.642037][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.657988][ T14] usb 4-1: Product: syz [ 729.662555][ T14] usb 4-1: Manufacturer: syz [ 729.667446][ T14] usb 4-1: SerialNumber: syz [ 729.689683][ T14] usb 4-1: config 0 descriptor?? [ 729.755508][ T14] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input85 [ 730.048231][ T14] rc_core: IR keymap rc-imon-pad not found [ 730.054156][ T14] Registered IR keymap rc-empty [ 730.064283][ T14] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 730.075180][ T14] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 730.202041][ T14] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 730.225900][ T14] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input86 [ 730.242737][ T14] imon 4-1:0.0: iMON device (15c2:0040, intf0) on usb<4:10> initialized [ 730.396711][ T14] usb 4-1: USB disconnect, device number 10 12:13:14 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000300)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@local}, 0x0, 0x2}) 12:13:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110e0d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:14 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) 12:13:14 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0), 0x802, 0x0) readv(r0, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1) 12:13:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:14 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000300)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7b1, &(0x7f0000000080)={{@local}, 0x1}) 12:13:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @private}}) [ 730.945840][T20902] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:14 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @none={0x4}}, 0x14, &(0x7f0000000140)={0x0}}, 0x0) 12:13:14 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1263, &(0x7f0000000000)) 12:13:14 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000001140)={0x64, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x47, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x64}}, 0x0) [ 731.052393][T20902] device bond207 entered promiscuous mode [ 731.066401][T20914] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:14 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20013, r0, 0x0) 12:13:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002080)={0x0, @sliced}) 12:13:14 executing program 5: add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "ef0e728fe7f7eba9376cdcd398f6b510bdac25593a73619856ee262b6639a364891d9390a3dd7f3e9e217da5047be6cd07d6368bfb0f08ef6b013db83a65fb4d"}, 0x48, 0x0) [ 731.154933][T20914] device veth603 entered promiscuous mode [ 731.179482][T20914] bond207: (slave veth603): Enslaving as an active interface with an up link 12:13:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011100d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 731.258240][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 731.338688][T20933] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 731.379258][T20933] device bond208 entered promiscuous mode [ 731.389322][T20933] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 731.419039][T20933] device veth605 entered promiscuous mode [ 731.431385][T20933] bond208: (slave veth605): Enslaving as an active interface with an up link [ 731.518324][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 731.658936][ T14] usb 1-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 731.668355][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.948097][ T14] Bluetooth: Can't get state to change to load ram patch err [ 731.955856][ T14] Bluetooth: Loading patch file failed [ 731.961749][ T14] ath3k: probe of 1-1:7.0 failed with error -71 [ 731.970744][ T14] usb 1-1: USB disconnect, device number 6 12:13:15 executing program 0: r0 = request_key(0x0, 0x0, &(0x7f0000000540)='$]!2)]++\x00\xb7\xfe\x8a\x04\xba\xf3\xf7\x8d\x04\xe0p\xe5w\xc9\xb8\x13z\x80\xbd\x00)]\xc4G\xc2\xe2_\xcf\xfb\x8ck\nei+\xe8\xe3~\x1c*\xd8\x9f\xf5\xee6&\x13\xb2]\xd6l\x8e]P\a\x17\xb8|\x98\xad^w\x9a\xa39\xf1\xaa\x82\xb4Sx\xfeyVF6\x10\xd8\xb6\xcblTvO\xd05\xad4\xca\xf9\xbd\xa6k\\\xaa\xf1*\xcdHeq\xa0\x15I!j\x96^\xed\xff8\xa6]\\2\xbcY\x82~j+\xc9?\x03%7\xdb\xca\xb1\xeb\xda\x95\xc2\xdb\xa0\xce\xb5/!J\xbekI\x1e\xaf\x1d\xa8\"nIf\x88j\xa8\xc7,o\xf1\xd8\xae\xb5\x1e\b\xea\xaf\x9eL\x10\x84\x7fY\xab\xb2\x16\xca\x18w\xb6n\x19\x1e\x9d\xce\xf9\x95\xd4\xdc\xa7Y\x01\xd2\xcea\x02\xd5)&\xa6S\xc4q\xd3T&\xcd\x86\t\x98w\x1cH,\x19G\x82Z\x140^\xd4qZy\xa6\x91\x150\xc6', 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f0000000200)="c3c645098cf48346edd25750eb99776ab99be06f4a23037128bfb27d53306ab9ec7ec40632a865c9717a2d49c2931f16f96c55ebf91445db96", 0x39, 0x0) syz_clone(0x4a100000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f00000002c0)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfeffffff, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x0, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(r1, 0x0, 0xc) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffc, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000140)=0x99) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) 12:13:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c0, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:15 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1263, 0x0) 12:13:15 executing program 3: io_setup(0x5, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 12:13:15 executing program 2: r0 = socket(0x2b, 0x80001, 0x0) getsockopt$inet_pktinfo(r0, 0x600, 0x8, 0x0, 0x0) 12:13:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011240d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:15 executing program 2: syz_io_uring_setup(0x8d6, &(0x7f0000000080), &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 12:13:15 executing program 5: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) [ 732.495562][T20942] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 12:13:16 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 732.592415][T20942] device bond209 entered promiscuous mode [ 732.611216][T20952] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:16 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:13:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 732.683710][T20952] device veth607 entered promiscuous mode [ 732.714736][T20952] bond209: (slave veth607): Enslaving as an active interface with an up link 12:13:16 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:16 executing program 3: r0 = socket(0x2b, 0x80001, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x17, 0x0, &(0x7f0000000080)) 12:13:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011480d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:16 executing program 2: sigaltstack(0x0, &(0x7f0000000240)={0x0}) 12:13:16 executing program 0: r0 = request_key(0x0, 0x0, &(0x7f0000000540)='$]!2)]++\x00\xb7\xfe\x8a\x04\xba\xf3\xf7\x8d\x04\xe0p\xe5w\xc9\xb8\x13z\x80\xbd\x00)]\xc4G\xc2\xe2_\xcf\xfb\x8ck\nei+\xe8\xe3~\x1c*\xd8\x9f\xf5\xee6&\x13\xb2]\xd6l\x8e]P\a\x17\xb8|\x98\xad^w\x9a\xa39\xf1\xaa\x82\xb4Sx\xfeyVF6\x10\xd8\xb6\xcblTvO\xd05\xad4\xca\xf9\xbd\xa6k\\\xaa\xf1*\xcdHeq\xa0\x15I!j\x96^\xed\xff8\xa6]\\2\xbcY\x82~j+\xc9?\x03%7\xdb\xca\xb1\xeb\xda\x95\xc2\xdb\xa0\xce\xb5/!J\xbekI\x1e\xaf\x1d\xa8\"nIf\x88j\xa8\xc7,o\xf1\xd8\xae\xb5\x1e\b\xea\xaf\x9eL\x10\x84\x7fY\xab\xb2\x16\xca\x18w\xb6n\x19\x1e\x9d\xce\xf9\x95\xd4\xdc\xa7Y\x01\xd2\xcea\x02\xd5)&\xa6S\xc4q\xd3T&\xcd\x86\t\x98w\x1cH,\x19G\x82Z\x140^\xd4qZy\xa6\x91\x150\xc6', 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f0000000200)="c3c645098cf48346edd25750eb99776ab99be06f4a23037128bfb27d53306ab9ec7ec40632a865c9717a2d49c2931f16f96c55ebf91445db96", 0x39, 0x0) syz_clone(0x4a100000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f00000002c0)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfeffffff, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x0, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(r1, 0x0, 0xc) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffc, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000140)=0x99) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) 12:13:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0xb, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x1, 0x8, 0x0, "f4"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x58}}, 0x0) 12:13:16 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) [ 733.080363][T20982] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:16 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8906, 0x0) 12:13:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 12:13:16 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 733.220481][T20982] device bond210 entered promiscuous mode [ 733.245891][T20989] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:16 executing program 3: r0 = socket(0x1e, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, 0x0) 12:13:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 733.371771][T20989] device veth609 entered promiscuous mode [ 733.437349][T20989] bond210: (slave veth609): Enslaving as an active interface with an up link 12:13:16 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000114c0d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:16 executing program 3: r0 = socket(0x2b, 0x80001, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) [ 733.610279][ T6023] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 733.633119][T21017] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:17 executing program 0: syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x0) socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 12:13:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:17 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 12:13:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@fd={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fa271d70"}}) 12:13:17 executing program 3: r0 = socket(0x2b, 0x80001, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x12, 0x0, &(0x7f0000000080)) [ 733.765096][T21017] device bond211 entered promiscuous mode [ 733.786013][T21019] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 733.868624][ T6023] usb 3-1: Using ep0 maxpacket: 16 [ 733.868861][T21019] device veth611 entered promiscuous mode [ 733.895782][T21019] bond211: (slave veth611): Enslaving as an active interface with an up link [ 733.988476][ T6023] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 734.003111][ T6023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.013312][ T6023] usb 3-1: config 0 descriptor?? [ 734.288716][ T6023] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 736.118446][ T6023] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 736.138151][ T6023] usb 3-1: USB disconnect, device number 12 12:13:19 executing program 2: r0 = socket(0x2b, 0x80001, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) 12:13:19 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 12:13:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, r0) 12:13:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x18, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:13:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011600d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:19 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 12:13:19 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) [ 736.424024][T21039] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 736.500097][T21039] device bond212 entered promiscuous mode [ 736.530568][T21048] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x80081272, &(0x7f0000000000)) 12:13:20 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:20 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) [ 736.710472][T21048] device veth613 entered promiscuous mode [ 736.744863][T21048] bond212: (slave veth613): Enslaving as an active interface with an up link 12:13:20 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 736.752719][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd 12:13:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x20, 0x6a, 0xef860bcef72729e9, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 12:13:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011680d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 736.818276][ T3678] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 736.902587][T21072] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 737.042409][T21072] device bond213 entered promiscuous mode [ 737.053735][T21073] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 737.057996][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 737.078608][ T3678] usb 1-1: Using ep0 maxpacket: 16 [ 737.091085][T21073] device veth615 entered promiscuous mode [ 737.101224][T21073] bond213: (slave veth615): Enslaving as an active interface with an up link [ 737.198362][ T3678] usb 1-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 737.202542][ T14] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 737.207428][ T3678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.223622][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.234848][ T14] usb 4-1: config 0 descriptor?? [ 737.246395][ T3678] usb 1-1: config 0 descriptor?? [ 737.498362][ T14] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 737.508224][ T3678] usb 1-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 738.638930][ T14] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 738.649010][ T14] usb 4-1: USB disconnect, device number 11 12:13:22 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x1a, 0x0, 0x1, [{0x2, &(0x7f0000000100)=@string={0x2}}]}) 12:13:22 executing program 2: sigaltstack(&(0x7f00000001c0)={0x0}, 0x0) 12:13:22 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 739.368593][ T3678] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 739.385103][ T3678] usb 1-1: USB disconnect, device number 7 [ 739.398106][ T5642] usb 4-1: new high-speed USB device number 12 using dummy_hcd 12:13:23 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x80047437, 0x0) 12:13:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000116c0d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:23 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'ipvlan0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "b4b094b03a1e6be26cb2c1392f10c2776cafab3755360b641b6db911a858"}}}, {{@ipv6={@private0, @remote, [], [], 'wg2\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 12:13:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:23 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) [ 739.695944][T21091] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 739.767176][T21091] device bond214 entered promiscuous mode [ 739.776551][ T5642] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 12:13:23 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 739.808591][T21099] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 739.858473][ T5642] usb 4-1: language id specifier not provided by device, defaulting to English [ 739.887129][T21099] device veth617 entered promiscuous mode [ 739.905405][T21099] bond214: (slave veth617): Enslaving as an active interface with an up link [ 739.998534][ T5642] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 740.012775][ T5642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.021709][ T5642] usb 4-1: Product: syz [ 740.025956][ T5642] usb 4-1: Manufacturer: syz [ 740.031654][ T5642] usb 4-1: SerialNumber: syz [ 740.058835][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 740.286048][ T143] usb 4-1: USB disconnect, device number 12 [ 740.468331][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 740.478449][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 740.685014][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 740.696106][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.705500][ T14] usb 1-1: Product: syz [ 740.709993][ T14] usb 1-1: Manufacturer: syz [ 740.714616][ T14] usb 1-1: SerialNumber: syz 12:13:24 executing program 3: syz_io_uring_setup(0x5678, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) syz_io_uring_setup(0x70db, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:13:24 executing program 2: ustat(0x2, &(0x7f0000000000)) 12:13:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011740d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:24 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:24 executing program 2: clock_gettime(0x7, &(0x7f0000000800)) [ 740.823545][T21112] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:24 executing program 3: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0xfffff, 0xfffffffffffffffa) 12:13:24 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:24 executing program 2: r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) recvmmsg$unix(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0) [ 740.902471][T21112] device bond215 entered promiscuous mode [ 740.909030][T21119] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x19, 0x0, &(0x7f0000000080)) [ 740.988862][ T143] usb 1-1: USB disconnect, device number 8 [ 741.031774][T21119] device veth619 entered promiscuous mode [ 741.077833][T21119] bond215: (slave veth619): Enslaving as an active interface with an up link 12:13:24 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/cgroup\x00') 12:13:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:24 executing program 3: bpf$LINK_GET_FD_BY_ID(0xf, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) r1 = syz_clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}) 12:13:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000117a0d040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:24 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:24 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 741.548037][T21134] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:25 executing program 3: open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) renameat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 12:13:25 executing program 0: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8000000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f31000800000000000000000000000000000000000000000000000000000000000000000000004b4000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac00000000000000000000000000000000000000000000553b000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="8f02", 0x2}], 0x1}}], 0x400019d, 0x4000c800) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) [ 741.687060][T21150] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 741.725929][T21134] device bond216 entered promiscuous mode 12:13:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 741.743621][T21146] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'geneve1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) close(r0) [ 741.810143][T21146] device veth621 entered promiscuous mode [ 741.876921][T21146] bond216: (slave veth621): Enslaving as an active interface with an up link 12:13:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xd85d, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close(r0) 12:13:26 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 12:13:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:26 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000022c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) 12:13:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110012040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:26 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @val, {@ipv6}}, 0x0) [ 743.513797][T21170] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:26 executing program 2: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x1}, 0x0, 0x0, &(0x7f0000000240)={0x0}) 12:13:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x45, 0x0, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 743.596308][T21170] device bond217 entered promiscuous mode [ 743.608818][T21178] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x1c}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003480)={&(0x7f0000000000)=@id, 0x10, &(0x7f0000003340)=[{&(0x7f0000000080)="663984586eb082d9bc2bb98191295e569295de62cfeea543282c2d25b8cc0d5da4961b10c082901ae321bfaa6bec1fb0b18d9b47f2aa17ab65b209f4f4c89383117a8c9f303a4f3a213bd04f1df38ee1ea78dab88e", 0x7ffff000}, {&(0x7f0000000240)="aac77645dba6e8b857fc87201275ec31c049429b6c8f54905ab7ffb108be8b05cea8ee90468cb0d107255ee96c76af60ec1467b777173f9c29275bbd176b7c2cea0742937a67aef3e705185a761963112290c78ddbc67f2b8a54e45bc126e870cd99e4e19bb3c23c5bb50f6787ce1d78747ffa8b44e96ebc8ebb5e607133f5ba12a6da740dba1d0968bbecf3845754049e675611d7c2fbdfabcaa03bfd20cb1346b7c11a3e05bdd878197d233956439c160ea07aed95746421499358c3acd6eee665c950ed8de7a391fa6832b9d62d3680d68090554fd0b87eb76736ef2c9d31963cdb65b5c680b5f6b9e335e1d6b14fc6a20480fd66639e82b095a31b3554b7da6f8a65042778bf999d8a555e88ed6e297346fc267912264694099f7ac8cad506dabe0e3c9f450ca575e9cd57269317f04d28c26918ad56429b6ae4fffc86fcf2331c670b2890d9108ec0f06dd11f05eee58eb2aa7f64906fd64c99826811eeb436ab5b5956b19109aff4219230078f7016e402c82c28c4dc84d16a182b640469a5e9f2b4f45064155b335010460c3d670ba72318f88b154aed504b1523903bddf8c653b343c967637f7b872c015f5c8bd212688ebbd9b19e3e24ef10029bda9bdd50b9a2aca38bf22028e17739cb45bf217af46c64229ab7235aafeb25ac3c8a4a27a676f96d977f828576081582c0d909f641f5c88e6fc0ed12a35d0a68d8545fa983e051bbcad7060803539d0f11e393f11c8f637e0a5578005a4403cb159a5798fec833d6b6bd62a4c9210ae3adf7c6852afa5b4ff79a41bcdb786fd2f9caf9411d8afd9bbfd0cf3b9b1f4f36a738c382395a99097b52eb474e3b29c1cacc642a6a599338bb8cf6f65e0e6f99d238f7d118ebade60b480860fce01e35d6385ea62b8e78fd2fe93b6d3ee1c78b5019d05d6009f3907a8b71184abb8d73f745aa9e228bc6eb721a6248c7657935b2cba486a21a326f54bb48db3dae14722df570b4ae1b51f83466ada5acbd2d7a105a966995a310683146508099146df4deeb9a9588ae8a6d8b55a316de07402a4aa4e05cff6871d9196120be8297d328c9789b233546b3a106883d104bfaa0a77ee7f4da971954b6dd146a5ecbaf2a8cf676ace4dfa977060f05beaab930713a4bec1be7ee4e98eb556e249993f6bf3b7aead22b3bf17a1145b17d769eb22abe989bce793f83ee9b1d6f657356d074061117c2298761d259a219dd40a5d62897eb3d136150e36cba7f4f96967027d844a0adf7060db731b98c8131d5b82374362623612110433bcf40cb53206c3a68c47e83353868899acda1084b61861cdb9262dcd35c49a1ef575a4967fcca2f7767eae87700dff8cbc47803b0696d6db6a4e243da727cda4315d5b83718bdd82132e3b543881d89f4747d8c7aa191e021aa5be992bdad803a9fb878a6ef2b02977b07426b340f4231d93c98dda7ea83f72fb49b8a04b2f01f644044ad2d214d957b425c38ae7c43bce0a9fe3d4bd6057b6f4b17f1a15143cc11be325f6d95dfddaec49614c15de7bc306bd8f39ba1a979801583e11321037fead132c320d4a91b0212f8455259903fb973247769c6f4e085e9a509deb9eadfddaf1b193784a9a23e3242d6122a83ba2277e2f45fb87b0a863c6632210069062854cd3e0d4e27f56d001f657eac0edffa9f0f06ee3fbc7010fc41056f920293161f8c509a9dafdda55fc6063eb6dcd9abe3513fc50b39c949a0e2b98feb8cdfd70c8064ad498ca38cdd40ea0500f5d773fe102675fa8563714bb412a492101a6e00eea5c45d1f5418ef0688b548746badba1bc16e54a5374a47abc90d4e42b1859584731a56fff62525244f381f03e954cbeeea5aea4fc8a6d6d8c5cd518cacee27fa7ed76043f95a5ae5ac7950dbb1576762493d75d6092752a5f2132acfc1d6918b96753275d142f8b0a7165ad4a586730f430e1a755099ea07d2dd6cae461ccede824219f080d6fb9689e88830f1efe26dc5d368f6e3ed2b4d2ac461c26f0f909b7b875677b685710e916d137b7a4bdad144dcc078e68e08cf98a4029baafd6a05835dbfb3c28227bf6a8cd0645c362ffdcdf571c646c9e373285721229658fb7ae7b0ede47e69f697e8c7471c466b583e561dd0bdc2c9af3f62fb493cc4183f523093b06249e1f580ec7b2d2cddbb774c502be138b2b6f5c362d15638cbc6f621178b9ecb0c2232beaca8061a06298945eee1880ca4d868ff97cc136319be0d0206a8330c81ac5b1a61e25645012a7ba19b10b881ee5544eda25af98a7b69d00e51753f0d51106abed902565ca8fd6e6f3381f929a485de83b45a077a38e5ca213c645cb0f192f622b64f21288ef01b0b295948945fcbeded37da2c5441b02241db5bb245a4a7833f0f87ac1ef3dbe884371d31cff7cc085322b37192654c7e9df21885db7bf9874e22f23441541d21e16e4951a039ac27319d2477b0420b514935529f1304780bb98552dbdb450d3aefd9a02bf76bbacf29b9e8314e459a39964ca444c62ac3e914be0e09283764284541704f21724522fbef7f7ec043fd48c7e6eddabfde117dfc0219ad30e4ae1835e722c56714ad04ec4e9735e5f213aaeef2376e2c988219530598c1ebd717cf3378012d967ecc606ebff3f370b301182066f92f0c9ade5bcca2ebce65373584917ca51a775799bc33cb284408e23e82e2898980ef4ec9aa2ebcd45ef0ce04d3b57c26b42456c76bbcef07dbcd16b5ea99e28a9d41efbab09a6687b6ddaba9126b7f5031bb6cf74d765339576df485677efa69920211f07db0697c871618d95bc1ac0d8dd57565015a2b8ea07b5e22fba424873ad1763542b1192654689f2479161c9d49820130c6367ee7154bebd6a9b6773017e17cdcc96196cc64ac991f6c7d730c1d2b55339281b9c0a9b326a169aba3012412a39a048d87c0e4daf673fb15bd58b32088c184a553233c4389df2800e5d40643d00b44ecb396b47c514a52000bc2f530f648c17b4f4ed48503166a00c628637777734c4de9ed20d02c2a4d694b4732e1c390a2be9ef924992b2e579c1c1a7127998a5769dbd2434b316b8371c4119625c8b7c941facf3877afdc06da5daf3335d0b2e2cd9e464dddf7915786aa9a0c8b9733a753f4601232477cb764e1be5e83ccd7b52678aa95006b63f49afff3933788ef74320a71f6c0fbe3fb972609be7e686b87b7a94cb62f6b792e25fd6c1c9a9d64227a8c457a9618c2665571cee3ee2a8470d5be2a050826d35ae0d3a8ff0fad852feb14085fcaf818bd5f95f9e89824dc81b474ee02fed14783d7f5f4a15dbecacba2b1ff7026e647bc30685c6bb899947b0af72fff8151c3cf02a011cc72fea034fdd5e5e4fa178ae19ea450891ff3df5d7f8a58770cea2b5cab701549d6bc9a6e3ccc67ae63ce75f23456260610f3408ca4d84b29084844633ebee28285d49e76a60011b8355fdb5a75a8323e2ea7e10bced9bcba0f8f7f107fdb8a45b1023120a1c091b701de10b2bd7fdaa7a769f3004a3fc3c64a67cb0d330afc36b51c890a814fbdb2783eee457d2480e3e100321e31066962c5c4cf9877beda2d1546d42777be851acde5561311b09aae0b554efe89024223263f2b2de5a6a28a4fe577fbc40f1597f98d8d52544a65ab11002b3699689c1e77a353d96a6c22cf5dfd2536ad42146a6121cdeba75f30c61892017ce5c90667104b605ed9cdb1de6ce85fcaf9f20c7aea57fa7a4633b8f2494ec801cbca3a917e1a830755abc17cde5386611640330c9dae53d6ffac9427ed70c128f6fcb042a4d7ca8aaf8c0a478fd278e6e0c7148fb2e771444913c5265391198b2a3cb58d0980b1dc66389e623477695d5a1dae42be25f97fd6a83f01bd244f7e0a8ee162e32b2c79fd04b1bb6a370cb29e43635df278bf682a4e7b24d04073f2e6549209e4e4c15f098fbaa5ab99ca7318013ee011a1cbaaf527f210fec728a1c6bd0b62115f3cdcbeabbc26463ffca1f3e915746aa2f68f0fa4042557279b9e736ea516025c82285248dd9c3301755d410a5f5c1a5b9eeb00732ba037c985dce0faf943d6db4ff3e9137bca637cb47c082b449c80d2b1b5cfa8b09f09f159358823f715a0beb2db4def32c7a0cf7eb316d329048996d7e39c4e935aa0bad53ad5054332dde5312bccf44ef1e6b83b64daf56dd728ec93faf30bf8c2e0244d83de0fc696e076b774e45ae03724f3c517600f20b0a494624f81b6c1be5613d5e8e7b294ba2ce982a5efecf115be58938b4b723c4531581e61d0240bc2afabc3b08ae96c6ba536dcfd270cd001f86eb61af3f70cc868c03e37083ccde94d8da4984dd4bc4e7090b14a85806ca3122fe8ca6258740d412111f95b98536390393f47e0b7af5fdc36b02a990cdaba42e1311dee31201d54f1a2004cd22bbf9d651fa663aa6c2421eaf416aadba140e60bf1fc9b6514c6282cef60a384c28720b17b3d7e4b4e6adbac00965b7233008581ec1d449ebbf1a32e100725b39a44c8cb05171cb2f1a1a8dd704250bf1ef158c6f1827dea6fa553abd0d88afcba6683e834202de05d7d22894b6dc8a4ea65ab3fef4775ea89b1eddbf0fda79c4d2986ecf590e19aa19eca289cb8fa42339f11dc74ec291bbf32697fc081528314df857f808987fcb4e11cfbe3cdeeda6b9b942791a4779f791f53177a2611ec32239212f9e156a9851549199ca470a69f0261b6eafeb5fb167a746a1088f3c5822ac762aef25843bb57396e9b0efe0d53be9b9cecdd8a4314a1d79b9eda791530aafab6d31871813a04011650ac900778d75867d938a8a28a7ec6ec94ea3d9ceb9f070fadb8b9a7c725256508ad0c60ab08c61c536e2793bfb90dd23b103a60988a27211f608beab4be4e2556624f0250cd453e2946227b0e0cfc46c970b57b6055badea3d17c762e4580a29ebaec06c71ee337643c4c717cdd50d33e1a157943f3560575786a6d002a6fa0b63decda64eef805a00b630a9f2a35a20b38068e9dd35ae61749f16c4d9c179aaa8c76a175fa97c1e45b7ef5d3ddceb0f6d6d8e69d4bbfe2aa6fb33e3559950a8b5e80f124571757295af177592aaaab691d5b3264f515369fd2b04ab64264f60fff74e5da40825bedf9649589edb057cf6b3209cf02695f4c76c7f7afb9d7b499c6e749162819b0d0c7107d49a3c4404e59e85df0c565fc00260c64f0fa0f78371a6baa40fecfefd90f112db40947365e63455fc43b4205643426d7f39cf0bdfcd51c151ada6c593f0e91ab0709aff025a3357bc1ed3365e48cf08f9f30f6f15d744b56bb4661acda3e37903d57717003423eae8ee7d05e75e3879adc588951699a8c487ac9744322b916255ea35980a7dcf1871e2dbafe1dbdbd55ac4708a5e45cf8247ff59a4b6894346011a048e87335893007f8e3cbe2113cdc73f566191dbe7ac24b498bae291f5a3df02334850832face1aab430ce80bf592162452466364608ed275d28922c8ed707d1fc22578628389c460c003e475f61977a5e99324be469da5642afa03c415401602d052daabb2196da83b13922770959393bc60e4beff8760527c50fab62223df65641f002adfedd408607de23253cc85ed77e3455c71991e5fd82ee3ee783a79cb388f9876ea4cc014903f71b08fccb0091fff9db5aaad531a550d9d8d2f7b0d661d8adc9a1037f6c3560e6494e6ffb662bc7a1d10a2e9b6540423cd9c764754e92ac561a4fa24d3a2ea94a3ada3cbe3acc8afe2f6de4155646be3443f38cc61a98ed11599d7587a3ad33d1de5", 0x1000}, {&(0x7f0000000100)="9243e7a25f3c504eea3047072e83b8bac3c9a5343337beb5a24e0026948c5a6860c3ebc3f50d5fbd13b0e4174c1694bd4bc65e7f6af2fd622c5cead313353a0d95ba6db1ee03f8845b21a45e636ac9f74656df6afca5e3e96447d46ab7034b99ac0d5cb05b9cd7708400656e849ecabf3e3f267e40f1647d75881b22ab01d866435b741e750fba2d57634e7746c7dcb93645474e7866409c87be25a5aae527f4517fd2557fbf", 0xa6}, {&(0x7f0000001240)="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", 0xca6}], 0x4}, 0x0) 12:13:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000750000002a00000095", @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x32, 0x10, 0x0}, 0x80) 12:13:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 743.765377][T21178] device veth623 entered promiscuous mode [ 743.832508][T21178] bond217: (slave veth623): Enslaving as an active interface with an up link 12:13:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110019040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x47, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4e}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="3c0e0000000000005d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:27 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x45, 0x84}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:27 executing program 0: syz_clone(0x201400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 743.995919][T21207] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x62}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:27 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003480)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x0, 0x3}}, 0x10, 0x0}, 0x0) 12:13:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 744.203244][T21207] device bond218 entered promiscuous mode [ 744.270505][T21213] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 744.312610][T21213] device veth625 entered promiscuous mode [ 744.323697][T21213] bond218: (slave veth625): Enslaving as an active interface with an up link [ 744.353709][T21217] bond218 (unregistering): (slave veth625): Releasing backup interface [ 744.374487][T21217] bond218 (unregistering): Released all slaves 12:13:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011001f040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1a, 0x0, 0x0, 0x0, 0xa84, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 12:13:27 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x27, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000340), 0x2, 0x0) 12:13:27 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xca}, @map_idx, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0xff, 0x2, 0x6, 0x7f, 0x1}], &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x2, 0x7fff}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map, r1, 0x1e, 0x6}, 0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r1}, 0x10) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={r1, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000001480)=[0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001500)=[{}, {}], 0x10, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x18, 0x6, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x400}, [@generic={0x6, 0x2, 0x6, 0x5, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x34}]}, &(0x7f0000001780)='syzkaller\x00', 0x101, 0xd6, &(0x7f00000017c0)=""/214, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0x4, 0x2eb, 0x3}, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x16, 0x2, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x8e5d, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f00000013c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x7, 0x1, 0x8000}, 0x10, r3, r4}, 0x80) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 12:13:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1000}]}) 12:13:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:27 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x2f}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 744.543347][T21240] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xc, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) [ 744.613105][T21240] device bond218 entered promiscuous mode [ 744.651590][T21253] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 744.742134][T21253] device veth627 entered promiscuous mode [ 744.765623][T21253] bond218: (slave veth627): Enslaving as an active interface with an up link [ 744.802740][T21240] bond218 (unregistering): (slave veth627): Releasing backup interface [ 744.825374][T21240] bond218 (unregistering): Released all slaves 12:13:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110020040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:28 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:28 executing program 3: socketpair(0xa, 0x1, 0x0, &(0x7f0000000840)) 12:13:28 executing program 0: syz_clone(0x10031200, 0x0, 0x0, 0x0, 0x0, 0x0) 12:13:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) 12:13:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)=[{0x24}], 0x10}, 0x0) 12:13:28 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_clone(0x41002000, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) 12:13:28 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:28 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000d00)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) [ 745.073784][T21274] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1c, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:28 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003480)={&(0x7f0000000000)=@id={0x1e, 0xe}, 0x10, 0x0}, 0x0) [ 745.170392][T21274] device bond218 entered promiscuous mode [ 745.190424][T21282] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 745.291968][T21282] device veth629 entered promiscuous mode [ 745.306036][T21282] bond218: (slave veth629): Enslaving as an active interface with an up link 12:13:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110021040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x25, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5c, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:28 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) 12:13:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x45, 0xc0}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:28 executing program 2: syz_clone(0x92000000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:13:28 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3e, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 745.464840][T21300] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:28 executing program 0: socketpair(0x25, 0x5, 0x0, &(0x7f0000000100)) 12:13:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x16}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 745.586320][T21300] device bond219 entered promiscuous mode [ 745.628239][T21313] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 745.755763][T21313] device veth631 entered promiscuous mode [ 745.781269][T21313] bond219: (slave veth631): Enslaving as an active interface with an up link [ 745.843172][T21300] bond219 (unregistering): (slave veth631): Releasing backup interface [ 745.860924][T21300] bond219 (unregistering): Released all slaves 12:13:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110024040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x84, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5a, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:13:29 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x61}]}) 12:13:29 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}}, &(0x7f0000001240)=""/203, 0x26, 0xcb, 0x1}, 0x20) 12:13:29 executing program 3: socketpair(0x10, 0x2, 0x3, &(0x7f0000001940)) 12:13:29 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 746.068102][T21334] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:29 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:29 executing program 2: syz_clone(0x83000200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 746.211615][T21334] device bond219 entered promiscuous mode [ 746.271002][T21338] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110025040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000750000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x48) 12:13:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 12:13:29 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 746.322692][T21338] device veth633 entered promiscuous mode [ 746.334875][T21338] bond219: (slave veth633): Enslaving as an active interface with an up link 12:13:29 executing program 3: syz_clone(0x122a9480, 0x0, 0xbe00, 0x0, 0x0, 0x0) 12:13:29 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 12:13:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:29 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003480)={&(0x7f0000000000)=@id, 0x10, &(0x7f0000003340)=[{&(0x7f0000000080)="663984586eb082d9bc2bb98191295e569295de62cfeea543282c2d25b8cc0d5da4961b10c082901ae321bfaa6bec1fb0b18d9b47f2aa17ab65b209f4f4c89383117a8c9f303a4f3a213bd04f1df38ee1ea78dab88e", 0x55}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000100)="9243e7a25f3c504eea3047072e83b8bac3c9a5343337beb5a24e0026948c5a6860c3ebc3f50d5fbd13b0e4174c1694bd4bc65e7f6af2fd622c5cead313353a0d95ba6db1ee03f8845b21a45e636ac9f74656df6afca5e3e96447d46ab7034b99ac0d5cb05b9cd7708400656e849ecabf3e3f267e40f1647d75881b22ab01d866435b741e750fba2d57634e7746c7dcb93645474e7866409c87be25a5aae527f4517fd2557fbf", 0xa6}, {&(0x7f0000001240)="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", 0xca6}], 0x4}, 0x0) 12:13:29 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 12:13:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'veth0_macvtap\x00', 0x2020}) 12:13:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r0}, 0x10) 12:13:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 746.692731][T21368] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 746.723645][T21368] device bond220 entered promiscuous mode [ 746.729936][T21376] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 746.828336][T21376] device veth635 entered promiscuous mode [ 746.839472][T21376] bond220: (slave veth635): Enslaving as an active interface with an up link [ 746.853852][T21378] bond220 (unregistering): (slave veth635): Releasing backup interface [ 746.870418][T21378] bond220 (unregistering): Released all slaves 12:13:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110040040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:30 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 12:13:30 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @alu={0x6, 0x0, 0xb}, @initr0, @exit={0x95, 0x0, 0xed}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1a, 0x0, 0x0, 0x0, 0xa84, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 12:13:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x1c1, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18b, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "ff12ef04ffff"}, {0x19, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 746.999620][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.005978][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 12:13:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7b, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:30 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 12:13:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000200)={'rose0\x00', 0x112}) 12:13:30 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x1, 0x1}, {0x10}], 0x20}, 0x0) 12:13:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000200)={'rose0\x00'}) [ 747.187023][T21403] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 747.294252][T21403] device bond220 entered promiscuous mode [ 747.353943][T21410] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 747.499196][T21410] device veth637 entered promiscuous mode [ 747.534681][T21410] bond220: (slave veth637): Enslaving as an active interface with an up link 12:13:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110010040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:31 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 12:13:31 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)=[{0x10}, {0x18, 0x1, 0x1, "15b8"}], 0x28}, 0x0) 12:13:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x59, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x55, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:31 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x45, 0xa}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:31 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 12:13:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000750000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='j'}, 0x48) 12:13:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x0, 0x0, 0x80}, 0x48) 12:13:31 executing program 2: socketpair(0x2, 0x2, 0x1, &(0x7f0000000840)) [ 747.721471][T21425] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 747.854854][T21425] device bond221 entered promiscuous mode [ 747.863107][T21431] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 747.945088][T21431] device veth639 entered promiscuous mode [ 747.985976][T21431] bond221: (slave veth639): Enslaving as an active interface with an up link 12:13:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110012040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:31 executing program 1: socketpair(0x2, 0x1, 0x0, &(0x7f0000000840)) 12:13:31 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 12:13:31 executing program 3: socketpair(0x11, 0x2, 0x0, &(0x7f00000001c0)) 12:13:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000750000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001680)=""/4096, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12:13:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x57, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x67}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:31 executing program 2: socketpair(0xa, 0x2, 0x11, &(0x7f0000000840)) 12:13:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000080)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:13:31 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) [ 748.173405][T21454] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x59, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 748.332310][T21454] device bond222 entered promiscuous mode [ 748.364411][T21463] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110019040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x0, 0x0, 0x200, 0x0, 0x1}, 0x48) 12:13:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc6}}], 0x38}, 0x0) 12:13:31 executing program 1: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000380)) 12:13:31 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 12:13:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 748.442782][T21463] device veth641 entered promiscuous mode [ 748.453803][T21463] bond222: (slave veth641): Enslaving as an active interface with an up link 12:13:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x74}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0xfffffdef) 12:13:31 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x28}]}) 12:13:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x89, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 748.616690][T21482] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:32 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xa, 0x1, 0x7fff, 0xe7}, 0x48) [ 748.715980][T21482] device bond223 entered promiscuous mode [ 748.862148][T21492] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 748.966933][T21492] device veth643 entered promiscuous mode [ 748.988958][T21492] bond223: (slave veth643): Enslaving as an active interface with an up link [ 749.043387][T21494] bond223 (unregistering): (slave veth643): Releasing backup interface [ 749.145952][T21494] bond223 (unregistering): Released all slaves 12:13:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110021040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:32 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:32 executing program 3: syz_clone(0x122a9480, 0x0, 0x2fc, 0x0, 0x0, 0x0) 12:13:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0b, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0b, 0x1700) 12:13:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8a, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x46, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:32 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x45, 0x6c}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:32 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f00000005c0)) 12:13:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0x0) [ 749.481736][T21506] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:32 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 749.660505][T21506] device bond223 entered promiscuous mode [ 749.705273][T21512] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 749.783912][T21512] device veth645 entered promiscuous mode [ 749.804864][T21512] bond223: (slave veth645): Enslaving as an active interface with an up link [ 749.826578][T21518] bond223 (unregistering): (slave veth645): Releasing backup interface [ 749.856192][T21518] bond223 (unregistering): Released all slaves 12:13:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110024040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}, [@call={0x2d}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:33 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6b, 0x5d}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 12:13:33 executing program 2: syz_clone(0x2022000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:13:33 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:33 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:33 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12:13:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 12:13:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 12:13:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @val, {@ipv6}}, 0x0) [ 750.079464][T21537] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) flock(r0, 0x0) [ 750.190207][T21537] device bond223 entered promiscuous mode [ 750.198890][T21546] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110025040000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fcntl$dupfd(r0, 0xa, r0) 12:13:33 executing program 3: pipe2(0x0, 0x17311198ae815ae6) 12:13:33 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fcntl$lock(r0, 0x9, 0x0) 12:13:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 12:13:33 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 750.281443][T21546] device veth647 entered promiscuous mode [ 750.292079][T21546] bond223: (slave veth647): Enslaving as an active interface with an up link 12:13:33 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, 0x0) 12:13:33 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0x0, 0x0) 12:13:33 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000000c0)) 12:13:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @val, {@ipv6}}, 0x0) 12:13:33 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) [ 750.437793][T21565] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000080)=""/219, 0xdb) [ 750.552145][T21565] device bond224 entered promiscuous mode [ 750.558765][T21573] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 750.585302][T21573] device veth649 entered promiscuous mode [ 750.595268][T21573] bond224: (slave veth649): Enslaving as an active interface with an up link [ 750.662830][T21579] bond224 (unregistering): (slave veth649): Releasing backup interface [ 750.714721][T21579] bond224 (unregistering): Released all slaves 12:13:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 12:13:34 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 12:13:34 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @val, {@ipv4}}, 0x0) 12:13:34 executing program 2: r0 = socket(0x1e, 0x3, 0x0) socket(0x1e, 0x3, 0x0) r1 = socket(0x1e, 0x3, 0x0) dup2(r1, r0) 12:13:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:34 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, @void}}]}, 0x88}}, 0x0) 12:13:34 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 12:13:34 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 12:13:34 executing program 2: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3}, 0xc) 12:13:34 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 750.848061][T21592] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:34 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x40}, {r0}], 0x2, 0x0) 12:13:34 executing program 2: socketpair(0x20, 0x0, 0x1f, 0x0) 12:13:34 executing program 1: semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180)=""/51) 12:13:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) [ 750.994589][T21592] device bond224 entered promiscuous mode 12:13:34 executing program 2: poll(0x0, 0x0, 0xb71) 12:13:34 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @remote, @val, {@ipv6}}, 0x0) [ 751.053156][T21596] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 751.217707][T21596] device veth651 entered promiscuous mode [ 751.255619][T21596] bond224: (slave veth651): Enslaving as an active interface with an up link 12:13:34 executing program 3: readv(0xffffffffffffff9c, 0x0, 0x1c) 12:13:34 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8105afd4674c639e, 0x0) 12:13:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r0) accept$inet6(r0, 0x0, 0x0) 12:13:34 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:13:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:34 executing program 0: msgget(0x0, 0x2e1) 12:13:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000), 0xc) 12:13:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = dup(r0) read(r1, 0x0, 0x0) 12:13:34 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 751.380155][T21627] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="ff5f440b03421ae6a5d5622874fb07378d368c1e", 0x14) [ 751.537502][T21627] device bond225 entered promiscuous mode [ 751.562203][T21631] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 751.616662][T21631] device veth653 entered promiscuous mode [ 751.643790][T21631] bond225: (slave veth653): Enslaving as an active interface with an up link 12:13:35 executing program 2: open$dir(&(0x7f0000000140)='./file0\x00', 0x30a00, 0x0) 12:13:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001300)={0x2, 0x2}, 0xc) 12:13:35 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x3838a, 0x0) 12:13:35 executing program 0: faccessat(0xffffffffffffffff, 0x0, 0x80) 12:13:35 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x88}}, 0x0) 12:13:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d050000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:35 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@in6={0x18}, 0xffffffffffffff92) 12:13:35 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 12:13:35 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x88}}, 0x0) 12:13:35 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) [ 751.966780][T21653] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, 0x0) close(r0) 12:13:35 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) fcntl$lock(r0, 0x1, 0x0) 12:13:35 executing program 1: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1) 12:13:35 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 752.145987][T21653] device bond226 entered promiscuous mode 12:13:35 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), 0xc) 12:13:35 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read(r0, 0x0, 0x4d) 12:13:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000300)='Y', 0x1, 0x0, 0x0, 0x0) [ 752.215343][T21658] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 752.364824][T21658] device veth655 entered promiscuous mode [ 752.389688][T21658] bond226: (slave veth655): Enslaving as an active interface with an up link [ 752.469131][T21667] bond226 (unregistering): (slave veth655): Releasing backup interface [ 752.543322][T21667] bond226 (unregistering): Released all slaves 12:13:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d060000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:36 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:13:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000640)="d4", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/77, 0x4d}], 0x1}, 0x140) 12:13:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001980)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000001800)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000140)='`', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 12:13:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000080)=""/199, 0xc7) write(r1, 0x0, 0x0) 12:13:36 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x1}, 0xc) 12:13:36 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x811, r0, 0x0) 12:13:36 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) close(r0) 12:13:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000640)="d4", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12:13:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000640)="d424df7c70dfcf62c0725950fa862de54267ead79f96b9235210", 0x1a}, {&(0x7f0000000680)="e4c9e8e8f643b57384ac84cf60bb35c7ceec69f9e7c4a4cd6e1fe6ae3ddeef25c7edc6f8b843f49d3fabca4b5e9d746263466371", 0x34}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000100)=""/83, 0x53}], 0x2}, 0x0) 12:13:36 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x300, &(0x7f0000001700)=[{&(0x7f0000000680)="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", 0xec1}], 0x300}, 0x0) [ 752.800094][T21697] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:36 executing program 1: socketpair(0x10, 0x0, 0x8001, &(0x7f0000000040)) [ 752.899222][T21697] device bond226 entered promiscuous mode [ 752.980598][T21701] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d070000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000640)="d424df7c70dfcf62c0725950fa862de54267ead79f96b9235210", 0x1a}, {&(0x7f0000000680)="e4c9e8e8f643b57384ac84cf60bb35c7ceec69f9e7c4a4cd6e1fe6ae3ddeef25c7edc6f8b843f49d3fabca4b5e9d746263466371", 0x34}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000100)=""/83, 0x53}], 0x2}, 0x0) 12:13:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[{0x28, 0x0, 0x0, "9a9af8aa8ac08d73145c11ec7476e281ad"}], 0x28}, 0x0) 12:13:36 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000001a00)={&(0x7f0000000280), 0x6e, &(0x7f0000001940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 753.129069][T21701] device veth657 entered promiscuous mode [ 753.156612][T21701] bond226: (slave veth657): Enslaving as an active interface with an up link [ 753.259751][T21718] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 753.299250][T21718] device bond227 entered promiscuous mode [ 753.307444][T21718] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 753.335495][T21718] device veth659 entered promiscuous mode [ 753.345836][T21718] bond227: (slave veth659): Enslaving as an active interface with an up link 12:13:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000004200a9fa"], 0x68}}, 0x0) 12:13:36 executing program 3: socket$unix(0x1, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000005c40), &(0x7f0000005c80)='./file0\x00', 0x0, 0x1, &(0x7f0000006000)=[{0x0}], 0x0, &(0x7f0000006480)=ANY=[]) syz_clone(0x0, &(0x7f0000006140), 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:13:36 executing program 5: io_setup(0x1ff, &(0x7f0000000000)) io_setup(0x8001, &(0x7f0000000300)) 12:13:36 executing program 1: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) 12:13:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000640)="d424df7c70dfcf62c0725950fa862de54267ead79f96b9235210", 0x1a}, {&(0x7f0000000680)="e4c9e8e8f643b57384ac84cf60bb35c7ceec69f9e7c4a4cd6e1fe6ae3ddeef25c7edc6f8b843f49d3fabca4b5e9d746263466371", 0x34}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000100)=""/83, 0x53}], 0x2}, 0x0) 12:13:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0f0000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000200)}) 12:13:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000640)="d424df7c70dfcf62c0725950fa862de54267ead79f96b9235210", 0x1a}, {&(0x7f0000000680)="e4c9e8e8f643b57384ac84cf60bb35c7ceec69f9e7c4a4cd6e1fe6ae3ddeef25c7edc6f8b843f49d3fabca4b5e9d746263466371", 0x34}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000100)=""/83, 0x53}], 0x2}, 0x0) [ 753.554843][T21727] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 753.598233][T21726] Can't find a SQUASHFS superblock on loop3 12:13:37 executing program 2: mkdir(&(0x7f0000000540)='./file0\x00', 0x0) rename(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0/../file0\x00') [ 753.653734][T21727] device bond228 entered promiscuous mode [ 753.664750][T21734] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:37 executing program 1: rename(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0/../file0\x00') 12:13:37 executing program 0: socket$inet(0x10, 0x2, 0x0) 12:13:37 executing program 1: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, r0+10000000}, 0x0) 12:13:37 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000b00)=""/227, 0x2a, 0xe3, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa83}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)}, 0x10) 12:13:37 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 12:13:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000480)={0x50, 0x2, 0x4}) [ 753.823730][T21734] device veth661 entered promiscuous mode [ 753.859092][T21734] bond228: (slave veth661): Enslaving as an active interface with an up link 12:13:37 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a012e2766"], 0xa) 12:13:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000180)=0xc) 12:13:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d100000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:37 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$lock(r0, 0x6, 0x0) 12:13:37 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r0, 0x5) 12:13:37 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}], 0x1, 0x0, 0x0) 12:13:37 executing program 0: linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) 12:13:37 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe(0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) 12:13:37 executing program 5: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) rename(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0/../file0\x00') 12:13:37 executing program 2: mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 754.039610][T21763] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:37 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) 12:13:37 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3}, 0xc) 12:13:37 executing program 3: bind$unix(0xffffffffffffff9c, &(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8) 12:13:37 executing program 5: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) [ 754.195098][T21763] device bond229 entered promiscuous mode [ 754.234469][T21769] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 754.327540][T21769] device veth663 entered promiscuous mode [ 754.346612][T21769] bond229: (slave veth663): Enslaving as an active interface with an up link 12:13:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d120000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:37 executing program 2: mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x2a0b3afefee80553, 0xffffffffffffffff, 0x0) 12:13:37 executing program 1: mknod(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 12:13:37 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 12:13:37 executing program 5: r0 = semget(0x1, 0x0, 0x0) semop(r0, 0x0, 0x0) 12:13:37 executing program 0: mknod(&(0x7f0000000000)='./file1\x00', 0x8000, 0x0) [ 754.373360][T21778] bond229 (unregistering): (slave veth663): Releasing backup interface [ 754.390014][T21778] bond229 (unregistering): Released all slaves 12:13:37 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mknod(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 12:13:37 executing program 5: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) 12:13:37 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 12:13:37 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) 12:13:37 executing program 1: r0 = socket$inet(0x2, 0x40000003, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) dup3(r1, r0, 0x0) 12:13:38 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x3f, 0xb9, 0xf3, 0x10, 0x403, 0xe889, 0x5aac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xc7, 0x52, 0xf0, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x208}}]}}]}}]}}, 0x0) [ 754.577230][T21800] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 754.676066][T21800] device bond229 entered promiscuous mode [ 754.686375][T21809] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d140000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:38 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc299, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000005700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 12:13:38 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x4, 0x0, 0x0, "b48c2eaa"}) 12:13:38 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x3f, 0xb9, 0xf3, 0x10, 0x403, 0xe889, 0x5aac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1e, 0x90, 0xaa, 0x0, [], [{{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 12:13:38 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 754.746580][T21809] device veth665 entered promiscuous mode [ 754.757270][T21809] bond229: (slave veth665): Enslaving as an active interface with an up link [ 754.830161][T21821] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 754.854186][T21821] device bond230 entered promiscuous mode [ 754.882735][T21821] device veth667 entered promiscuous mode [ 754.895489][T21821] bond230: (slave veth667): Enslaving as an active interface with an up link [ 754.913202][T21821] bond230 (unregistering): (slave veth667): Releasing backup interface [ 754.935405][T21821] bond230 (unregistering): Released all slaves [ 754.948423][ T3676] usb 4-1: new high-speed USB device number 13 using dummy_hcd 12:13:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d190000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 755.046299][T21824] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 755.058309][ T3678] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 755.068558][ T3681] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 755.091257][T21824] device bond230 entered promiscuous mode [ 755.098251][ T6023] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 755.098787][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 755.132071][T21826] device veth669 entered promiscuous mode [ 755.151022][T21826] bond230: (slave veth669): Enslaving as an active interface with an up link [ 755.164750][T21824] bond230 (unregistering): (slave veth669): Releasing backup interface [ 755.184621][T21824] bond230 (unregistering): Released all slaves 12:13:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d210000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 755.238507][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 755.284904][T21828] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 755.308541][ T3681] usb 3-1: Using ep0 maxpacket: 16 [ 755.316413][T21828] device bond230 entered promiscuous mode [ 755.325240][T21828] __nla_validate_parse: 2 callbacks suppressed [ 755.325259][T21828] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.353608][T21828] device veth671 entered promiscuous mode [ 755.369838][ T3676] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 755.389777][T21828] bond230: (slave veth671): Enslaving as an active interface with an up link [ 755.405321][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 755.414823][T21830] bond230 (unregistering): (slave veth671): Releasing backup interface [ 755.428246][ T3681] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 755.441988][ T3678] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 755.463630][T21830] bond230 (unregistering): Released all slaves 12:13:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d250000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 755.538655][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 755.543518][T21832] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 755.554382][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 755.584909][T21832] device bond230 entered promiscuous mode [ 755.593641][T21832] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.598234][ T3676] usb 4-1: New USB device found, idVendor=0403, idProduct=e889, bcdDevice=5a.ac [ 755.608182][ T3681] usb 3-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.40 [ 755.621661][ T3678] usb 1-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 0.40 [ 755.632475][ T6023] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 755.638180][ T3676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.645640][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.658638][ T3676] usb 4-1: Product: syz [ 755.659075][ T3678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.663042][ T3676] usb 4-1: Manufacturer: syz [ 755.678299][ T3681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.682233][ T3676] usb 4-1: SerialNumber: syz [ 755.696802][ T3676] usb 4-1: config 0 descriptor?? [ 755.710652][ T6023] usb 6-1: Product: syz [ 755.715047][ T3678] usb 1-1: Product: syz [ 755.726841][ T3681] usb 3-1: Product: syz [ 755.728690][T21810] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 755.731425][ T6023] usb 6-1: Manufacturer: syz [ 755.739175][ T14] usb 2-1: New USB device found, idVendor=0403, idProduct=e889, bcdDevice=5a.ac [ 755.743228][ T3678] usb 1-1: Manufacturer: syz [ 755.757584][ T3681] usb 3-1: Manufacturer: syz [ 755.761676][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.762667][ T3681] usb 3-1: SerialNumber: syz [ 755.772226][ T3676] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 755.775282][ T6023] usb 6-1: SerialNumber: syz [ 755.786775][ T3676] usb 4-1: Detected FT-X [ 755.793279][ T3678] usb 1-1: SerialNumber: syz [ 755.799975][ T14] usb 2-1: Product: syz [ 755.804440][ T14] usb 2-1: Manufacturer: syz [ 755.812557][ T14] usb 2-1: SerialNumber: syz [ 755.822349][T21832] device veth673 entered promiscuous mode [ 755.824030][ T14] usb 2-1: config 0 descriptor?? [ 755.841867][ T3678] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 755.843811][T21832] bond230: (slave veth673): Enslaving as an active interface with an up link [ 755.858741][ T3681] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 755.881317][ T14] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 755.904400][ T14] usb 2-1: Detected FT-X [ 755.909640][ T14] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 11 [ 755.910349][ T6023] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 755.917782][ T14] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 14 [ 755.934579][T21834] bond230 (unregistering): (slave veth673): Releasing backup interface [ 755.975728][T21834] bond230 (unregistering): Released all slaves 12:13:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d340000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 756.018487][ T3676] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 756.046842][ T3676] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 756.055091][T21814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.087807][ T143] usb 3-1: USB disconnect, device number 13 [ 756.094292][ T14] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 756.105458][ T3676] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 756.113217][T21814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.130728][ T3676] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 756.139538][ T14] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 756.158327][ T14] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 756.181224][ T3676] usb 4-1: USB disconnect, device number 13 [ 756.193796][ T14] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 756.222694][ T3676] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 756.240203][T21836] device bond230 entered promiscuous mode [ 756.246876][ T14] usb 2-1: USB disconnect, device number 8 [ 756.253637][T21838] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 756.265747][ T3676] ftdi_sio 4-1:0.0: device disconnected [ 756.278287][ T14] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 756.324108][ T14] ftdi_sio 2-1:0.0: device disconnected 12:13:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d380000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 756.365945][ T143] usb 1-1: USB disconnect, device number 9 [ 756.390946][T21838] device veth675 entered promiscuous mode [ 756.405610][T21838] bond230: (slave veth675): Enslaving as an active interface with an up link [ 756.465682][T21842] device bond231 entered promiscuous mode [ 756.475018][T21842] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 756.500973][T21842] device veth677 entered promiscuous mode 12:13:39 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x3f, 0xb9, 0xf3, 0x10, 0x403, 0xe889, 0x5aac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xc7, 0x52, 0xf0, 0x0, [], [{{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) [ 756.514173][T21842] bond231: (slave veth677): Enslaving as an active interface with an up link [ 756.528675][ T6023] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:13:40 executing program 2: syz_open_dev$hidraw(&(0x7f0000001040), 0x0, 0x101000) syz_open_dev$hidraw(&(0x7f0000003080), 0x0, 0x0) 12:13:40 executing program 1: syz_open_dev$hidraw(&(0x7f0000001040), 0x0, 0x101000) [ 756.567235][T21844] bond231 (unregistering): (slave veth677): Releasing backup interface [ 756.592049][T21844] bond231 (unregistering): Released all slaves 12:13:40 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc299, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000005700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) [ 756.848282][ T3676] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 756.935036][ T5642] usb 6-1: USB disconnect, device number 3 [ 757.017999][ T3678] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 757.128156][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 757.268294][ T3676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 757.378118][ T3678] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 12:13:40 executing program 1: syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6d}}}}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 12:13:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d500000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:40 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002740)={{0x12, 0x1, 0x0, 0xeb, 0x1d, 0x7, 0x0, 0xc45, 0x607c, 0x2dc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xcf, 0xb3}}]}}]}}, 0x0) 12:13:40 executing program 2: syz_usb_connect(0x0, 0x63, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x3f, 0xb9, 0xf3, 0x10, 0x403, 0xe889, 0x5aac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1e, 0x90, 0xaa, 0x0, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x4, 0xfa, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0) [ 757.453437][ T3676] usb 4-1: New USB device found, idVendor=0403, idProduct=e889, bcdDevice=5a.ac [ 757.475924][T21857] validate_nla: 2 callbacks suppressed [ 757.475943][T21857] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 757.493791][ T3676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.525482][ T3676] usb 4-1: Product: syz [ 757.531029][ T3676] usb 4-1: Manufacturer: syz [ 757.536006][ T3676] usb 4-1: SerialNumber: syz [ 757.543633][ T3676] usb 4-1: config 0 descriptor?? [ 757.551804][ T3678] usb 1-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 0.40 [ 757.561477][ T3678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.570092][ T3678] usb 1-1: Product: syz [ 757.574406][ T3678] usb 1-1: Manufacturer: syz [ 757.580050][ T3678] usb 1-1: SerialNumber: syz [ 757.585509][T21857] device bond231 entered promiscuous mode [ 757.595875][ T3676] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 757.597504][T21862] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 757.605965][ T3676] usb 4-1: Detected FT-X [ 757.617593][ T3676] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 11 [ 757.629698][ T3678] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 757.638537][ T6023] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 757.646806][ T6023] ath9k_htc: Failed to initialize the device [ 757.662093][ T5642] usb 6-1: ath9k_htc: USB layer deinitialized [ 757.696931][T21862] device veth679 entered promiscuous mode [ 757.711785][T21862] bond231: (slave veth679): Enslaving as an active interface with an up link [ 757.725019][T21863] bond231 (unregistering): (slave veth679): Releasing backup interface [ 757.738211][ T3681] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 757.762772][T21863] bond231 (unregistering): Released all slaves [ 757.800141][ T3676] ftdi_sio ttyUSB0: Unable to read latency timer: -71 12:13:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d540000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 757.828260][ T3676] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 757.835319][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 757.868507][ T3676] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 757.874823][T21852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.891860][T21865] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 757.892472][ T3676] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 757.900750][T21852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.903835][ T922] usb 1-1: USB disconnect, device number 10 [ 757.924720][ T3676] usb 4-1: USB disconnect, device number 14 [ 757.967810][ T3676] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 757.978161][ T3681] usb 3-1: Using ep0 maxpacket: 16 [ 757.979401][ T3676] ftdi_sio 4-1:0.0: device disconnected [ 758.012921][T21865] device bond231 entered promiscuous mode [ 758.019086][T21867] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 758.038422][ T5642] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 758.048992][T21867] device veth681 entered promiscuous mode [ 758.061714][T21867] bond231: (slave veth681): Enslaving as an active interface with an up link [ 758.076679][T21868] bond231 (unregistering): (slave veth681): Releasing backup interface [ 758.091915][T21868] bond231 (unregistering): Released all slaves [ 758.098880][ T3681] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping 12:13:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d6c0000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 758.109465][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 758.113596][ T3681] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 758.125712][ T3681] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 758.136834][ T3681] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 758.148647][ T3681] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 758.204608][T21870] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 758.229873][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 758.244202][T21870] device bond231 entered promiscuous mode [ 758.251410][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.265727][T21872] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 758.291846][ T5642] usb 6-1: Using ep0 maxpacket: 16 [ 758.301041][T21872] device veth683 entered promiscuous mode [ 758.313385][T21872] bond231: (slave veth683): Enslaving as an active interface with an up link [ 758.321822][ T3681] usb 3-1: New USB device found, idVendor=0403, idProduct=e889, bcdDevice=5a.ac [ 758.335236][ T3681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:13:41 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x38, &(0x7f0000000100)={0x5, 0xf, 0x38, 0x5, [@generic={0xb, 0x10, 0x1, "5e60ba712a9c87c4"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "de3e0daeebde74918764fb6a45ce83dd"}]}, 0x1, [{0x0, 0x0}]}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002680)=""/64) [ 758.356168][ T3681] usb 3-1: Product: syz [ 758.394783][ T3681] usb 3-1: Manufacturer: syz [ 758.410414][ T3681] usb 3-1: SerialNumber: syz [ 758.420634][ T5642] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:13:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x0) [ 758.438309][ T14] usb 2-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.40 [ 758.444195][ T3681] usb 3-1: config 0 descriptor?? [ 758.454149][ T5642] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.454393][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.466311][ T5642] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.473129][ T14] usb 2-1: Product: syz [ 758.490667][ T14] usb 2-1: Manufacturer: syz [ 758.499781][ T3681] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 758.505691][ T14] usb 2-1: SerialNumber: syz [ 758.518846][ T3681] usb 3-1: Detected FT-X 12:13:41 executing program 0: syz_mount_image$cramfs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x1, &(0x7f00000019c0)=[{&(0x7f00000009c0)="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", 0xffb, 0x5}], 0x0, &(0x7f0000001a00)) 12:13:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001200), 0x4, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0x0) [ 758.542633][T21870] bond231 (unregistering): (slave veth683): Releasing backup interface [ 758.570690][T21870] bond231 (unregistering): Released all slaves 12:13:42 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 12:13:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d700000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 758.677960][ T3676] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 758.693839][ T5642] usb 6-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.40 [ 758.709166][ T3681] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 758.710318][T21885] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 758.722470][ T5642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.738454][ T3681] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 758.750562][T21885] device bond231 entered promiscuous mode [ 758.760140][T21887] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 758.769772][ T3681] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 758.788057][ T5642] usb 6-1: Product: syz [ 758.792325][ T5642] usb 6-1: Manufacturer: syz [ 758.796915][ T5642] usb 6-1: SerialNumber: syz [ 758.808349][ T14] usbhid 2-1:1.0: can't add hid device: -22 [ 758.808390][ T3681] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 758.820413][ T14] usbhid: probe of 2-1:1.0 failed with error -22 [ 758.838274][ T14] usb 2-1: USB disconnect, device number 9 [ 758.865638][ T3681] usb 3-1: USB disconnect, device number 14 [ 758.908706][ T3681] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 758.919324][ T3681] ftdi_sio 3-1:0.0: device disconnected [ 758.946646][T21887] device veth685 entered promiscuous mode [ 758.958676][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 758.969564][T21887] bond231: (slave veth685): Enslaving as an active interface with an up link [ 758.982854][T21885] bond231 (unregistering): (slave veth685): Releasing backup interface [ 759.003888][T21885] bond231 (unregistering): Released all slaves [ 759.083161][T21860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.093105][T21860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.138488][ T5642] usbhid 6-1:1.0: can't add hid device: -22 [ 759.145526][ T5642] usbhid: probe of 6-1:1.0 failed with error -22 [ 759.166746][ T5642] usb 6-1: USB disconnect, device number 4 [ 759.178408][ T3676] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.192274][ T3676] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.202526][ T3676] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 759.217833][ T3676] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 12:13:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000008c0)={'sit0\x00', 0x0}) 12:13:42 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "5bc556fb268546db517cad355b9026ba773d96451a5044df6648ff6e52b31893f0e86a82405bfcc4999215942de63d0562e600155868dbd03894e2dd334df56a"}, 0x48, r0) keyctl$invalidate(0x15, r1) [ 759.488200][ T3676] usb 4-1: string descriptor 0 read error: -22 [ 759.494604][ T3676] usb 4-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.40 [ 759.504271][ T3676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.551321][ T3676] usbhid 4-1:1.0: can't add hid device: -22 [ 759.557865][ T3676] usbhid: probe of 4-1:1.0 failed with error -22 12:13:43 executing program 1: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) getresuid(&(0x7f00000041c0), &(0x7f0000004200), &(0x7f0000004240)) 12:13:43 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x7, 0x0, &(0x7f0000000200), 0x2001040, &(0x7f0000000240)={[{@data_writeback}, {@balloc_notest4}, {@errors_continue}, {@jdev={'jdev', 0x3d, './file0'}}]}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000400)="6e44b757cc66fd6c952112a8da8d27d2", 0x10) 12:13:43 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 12:13:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d940000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 759.651362][T21897] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 759.707619][T21897] device bond231 entered promiscuous mode [ 759.722769][T21901] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 759.755890][ T5642] usb 4-1: USB disconnect, device number 15 [ 759.773426][T21901] device veth687 entered promiscuous mode [ 759.796244][T21901] bond231: (slave veth687): Enslaving as an active interface with an up link [ 759.817296][T21897] bond231 (unregistering): (slave veth687): Releasing backup interface [ 759.842604][T21897] bond231 (unregistering): Released all slaves 12:13:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="1a7070b7969c87a2533c2aadf7a9523b04d5516f5d8a3179152733ade1ef8c74", 0x20) 12:13:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 12:13:43 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 12:13:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 12:13:43 executing program 2: socketpair(0x22, 0x0, 0x8450, 0x0) 12:13:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000dac0000000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, 0x0) 12:13:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 760.307392][T21907] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="e8f873c0cabcde435f41b9569fd15591d0f0789ca3c272a92c3b2bb10f7210635af506de4ab256846596043a49c4669472618c61473b7dc68e4385d7f68b0da9b86699d0bdd74c229b02159fd303a4a9a613f6a2778163ff22a026b8dea0d00bff80738945f3c09235f1704e30fbfa47429507f3dea986e5750d6f1a59bb943b9f3262fe6c5cd16fd646f1d30be5ded1ac9a1053e81b42c05bc0bc7ca3221051ff432a3a51cf46458d6b2a8a2c887d50ea0a0d065479a2dee107da053b4735488a2d285fe8d49075d8a99475b1651f422f427e0b1d435e8ab3333e46deddf24039684d334f7bc6741f251383f6734f83a4bfc5c3b83af0f36a6fe953d9f54356", 0x100) 12:13:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 12:13:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 12:13:43 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) [ 760.485920][T21907] device bond231 entered promiscuous mode [ 760.504579][T21913] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:43 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x8d9a82cca5b931f, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 12:13:43 executing program 5: r0 = epoll_create(0x74f8) r1 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x70000011}) 12:13:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) [ 760.545960][T21913] device veth689 entered promiscuous mode [ 760.564988][T21913] bond231: (slave veth689): Enslaving as an active interface with an up link 12:13:44 executing program 3: syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x80) [ 760.641418][T21922] bond231 (unregistering): (slave veth689): Releasing backup interface 12:13:44 executing program 1: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)) [ 760.688669][T21922] bond231 (unregistering): Released all slaves 12:13:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020100000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:44 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 12:13:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ni\x00'}, 0x58) 12:13:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 12:13:44 executing program 1: syz_mount_image$v7(&(0x7f0000001840), &(0x7f0000001880)='./file0\x00', 0x0, 0x1, &(0x7f0000001f40)=[{0x0, 0x0, 0x101}], 0x809e, &(0x7f0000002100)) 12:13:44 executing program 3: syz_mount_image$ufs(&(0x7f00000017c0), &(0x7f0000001800)='./file0\x00', 0x0, 0x0, &(0x7f0000001940), 0x0, &(0x7f0000001ac0)) 12:13:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 12:13:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @empty}, 0xc) [ 760.861090][T21954] loop1: detected capacity change from 0 to 1 [ 760.887751][T21952] ufs: ufs was compiled with read-only support, can't be mounted as read-write [ 760.933008][T21954] Dev loop1: unable to read RDB block 1 [ 760.951926][T21956] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:44 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000001980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) [ 760.980910][T21954] loop1: unable to read partition table 12:13:44 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "e46bf37b9db7479e558241fc59b5b48ca0dd68df172a371f378f623be5d270d3ff819c4dd308b09dc92dd8cec17c085b34b2224fa4a4d0c59bb19b3171d9cf5a"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000000c0)=@secondary) [ 761.008613][T21954] loop1: partition table beyond EOD, truncated [ 761.044737][T21956] device bond231 entered promiscuous mode 12:13:44 executing program 3: syz_mount_image$gfs2meta(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x806002, &(0x7f0000000800)) 12:13:44 executing program 2: r0 = socket(0x1e, 0x5, 0x0) getsockname$l2tp(r0, 0x0, &(0x7f0000000300)) [ 761.052651][T21962] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.063159][T21954] VFS: could not find a valid V7 on loop1. [ 761.109337][T21968] fuse: Bad value for 'fd' [ 761.166949][T21962] device veth691 entered promiscuous mode [ 761.217351][T21962] bond231: (slave veth691): Enslaving as an active interface with an up link 12:13:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030100000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:44 executing program 5: r0 = epoll_create1(0x0) r1 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 12:13:44 executing program 0: r0 = socket(0x18, 0x0, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 12:13:44 executing program 3: r0 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) 12:13:44 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/mrp', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:13:44 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000008600), 0x0, 0x0) 12:13:44 executing program 5: times(&(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) 12:13:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="cf7079ea3824ccd7e197e9050f5b7537", 0x10) 12:13:44 executing program 2: r0 = socket(0x2, 0x3, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) [ 761.355222][T21977] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:44 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "e46bf37b9db7479e558241fc59b5b48ca0dd68df172a371f378f623be5d270d3ff819c4dd308b09dc92dd8cec17c085b34b2224fa4a4d0c59bb19b3171d9cf5a"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 12:13:44 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x4, @sliced}) 12:13:44 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x12161, 0x0, 0x0) [ 761.455974][T21977] device bond232 entered promiscuous mode [ 761.472411][T21977] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.532127][T21977] device veth693 entered promiscuous mode [ 761.550716][T21977] bond232: (slave veth693): Enslaving as an active interface with an up link 12:13:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d010200000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:45 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper}) 12:13:45 executing program 5: r0 = socket(0x15, 0x5, 0x0) accept$nfc_llcp(r0, 0x0, 0x0) 12:13:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="cf7079ea3824ccd7e197e9050f5b7537", 0x10) 12:13:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r1, 0xe5aa8a507d8d6b3b}, 0x14}}, 0x0) 12:13:45 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x4, @sliced}) 12:13:45 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/uts\x00') 12:13:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)) 12:13:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000008c0)={0x2, @win={{0x0, 0xffffff80}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 12:13:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="cf7079ea3824ccd7e197e9050f5b7537", 0x10) [ 761.713283][T22009] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:45 executing program 0: add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, &(0x7f0000000280)='?$', 0x2, 0xfffffffffffffffe) 12:13:45 executing program 5: r0 = socket(0x29, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) [ 761.822630][T22009] device bond233 entered promiscuous mode [ 761.852536][T22012] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.935408][T22012] device veth695 entered promiscuous mode [ 761.970828][T22012] bond233: (slave veth695): Enslaving as an active interface with an up link [ 762.009415][T22021] bond233 (unregistering): (slave veth695): Releasing backup interface [ 762.025095][T22021] bond233 (unregistering): Released all slaves 12:13:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020200000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) 12:13:45 executing program 0: r0 = socket(0x26, 0x5, 0x0) getsockname$l2tp(r0, 0x0, 0x0) 12:13:45 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x4, @sliced}) 12:13:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="cf7079ea3824ccd7e197e9050f5b7537", 0x10) 12:13:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000002280), &(0x7f00000022c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6b]}}]}) 12:13:45 executing program 0: syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x40) 12:13:45 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x4, @sliced}) 12:13:45 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 12:13:45 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 12:13:45 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300), 0x4) 12:13:45 executing program 0: r0 = socket(0x15, 0x5, 0x0) r1 = getpid() r2 = getpid() r3 = socket$kcm(0x29, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f00000000c0)={r0}) [ 762.235676][T22043] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 762.329930][T22043] device bond233 entered promiscuous mode [ 762.356385][T22050] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030200000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{}, "ada97f6814c5c6c8", "8e5bc349807ea8eb6d953659f55a4e60", "0ce1e6e4", "e00aedf9b669c346"}, 0x28) 12:13:45 executing program 2: syz_mount_image$v7(&(0x7f0000001840), &(0x7f0000001880)='./file0\x00', 0x0, 0x1, &(0x7f0000001f40)=[{&(0x7f0000001e80)="6251967b463c8e7e6f569c40c3113f0363ed7be4", 0x14, 0x2bd}], 0x0, &(0x7f0000002100)) 12:13:45 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x1d) 12:13:45 executing program 5: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, {[@timestamp={0x44, 0x4}]}}}}}) 12:13:45 executing program 0: syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x82) [ 762.416821][T22050] device veth697 entered promiscuous mode [ 762.426470][T22050] bond233: (slave veth697): Enslaving as an active interface with an up link 12:13:45 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f0000000080)) 12:13:45 executing program 0: socket(0x18, 0x0, 0x3e114d8c) [ 762.482104][T22057] loop2: detected capacity change from 0 to 2 [ 762.509309][T22063] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:45 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 12:13:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000001380), 0x2, 0x0) read$FUSE(r0, &(0x7f00000013c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000280)={0x20, 0x0, r1}, 0x20) [ 762.542012][T22057] Dev loop2: unable to read RDB block 2 [ 762.568601][T22057] loop2: unable to read partition table [ 762.574606][T22057] loop2: partition table beyond EOD, truncated 12:13:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f00000012c0)) 12:13:46 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop11', 0x0, 0x0) [ 762.590367][T22057] VFS: could not find a valid V7 on loop2. [ 762.599869][T22063] device bond234 entered promiscuous mode [ 762.657273][T22069] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 762.709840][T22069] device veth699 entered promiscuous mode [ 762.746466][T22069] bond234: (slave veth699): Enslaving as an active interface with an up link 12:13:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d000300000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:46 executing program 2: add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 12:13:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 12:13:46 executing program 5: keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 12:13:46 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 12:13:46 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/sr_mod', 0x2041, 0x0) 12:13:46 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) 12:13:46 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 12:13:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x100, 0x4) 12:13:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, r2) [ 762.893249][T22093] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:46 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000380)) 12:13:46 executing program 2: r0 = socket(0x1e, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 763.103624][T22093] device bond235 entered promiscuous mode [ 763.146036][T22100] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 763.186403][T22100] device veth701 entered promiscuous mode [ 763.207451][T22100] bond235: (slave veth701): Enslaving as an active interface with an up link [ 763.229458][T22104] bond235 (unregistering): (slave veth701): Releasing backup interface [ 763.246090][T22104] bond235 (unregistering): Released all slaves 12:13:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d010300000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:46 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:13:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:13:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140), 0x10) 12:13:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000001380), 0x2, 0x0) read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) 12:13:46 executing program 3: r0 = socket(0xf, 0x3, 0x2) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4008841) 12:13:46 executing program 3: syz_mount_image$qnx4(&(0x7f0000003ec0), &(0x7f0000003f00)='./file0\x00', 0x0, 0x0, &(0x7f0000004100), 0x0, &(0x7f0000004180)) 12:13:46 executing program 2: r0 = socket(0x29, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 12:13:46 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000300)) 12:13:46 executing program 5: request_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0xfffffffffffffffd) 12:13:46 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)) 12:13:46 executing program 2: add_key(&(0x7f0000001b00)='asymmetric\x00', 0x0, &(0x7f0000001b80)="ca2c", 0x2, 0xfffffffffffffffe) [ 763.446467][T22126] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 763.487605][T22132] qnx4: no qnx4 filesystem (no root dir). [ 763.532250][T22126] device bond235 entered promiscuous mode [ 763.533841][T22134] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 763.538542][T22137] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 763.624588][T22137] device veth703 entered promiscuous mode [ 763.634768][T22137] bond235: (slave veth703): Enslaving as an active interface with an up link [ 763.665041][T22126] bond235 (unregistering): (slave veth703): Releasing backup interface [ 763.717436][T22126] bond235 (unregistering): Released all slaves 12:13:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020300000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000140)) 12:13:47 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 12:13:47 executing program 3: syz_mount_image$qnx4(&(0x7f0000003ec0), &(0x7f0000003f00)='./file0\x00', 0x0, 0x0, &(0x7f0000004100), 0x0, &(0x7f0000004180)) 12:13:47 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 12:13:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0) 12:13:47 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000011c0)) r0 = syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x82) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 12:13:47 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000085c0), 0x40400, 0x0) 12:13:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/18, 0x12) 12:13:47 executing program 0: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='+%\x00', 0xfffffffffffffffd) [ 763.862437][T22145] qnx4: no qnx4 filesystem (no root dir). [ 763.890555][T22152] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 763.953476][T22152] device bond235 entered promiscuous mode 12:13:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0), 0x4) 12:13:47 executing program 3: syz_mount_image$qnx4(&(0x7f0000003ec0), &(0x7f0000003f00)='./file0\x00', 0x0, 0x0, &(0x7f0000004100), 0x0, &(0x7f0000004180)) [ 763.996103][T22159] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 764.030470][T22156] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 764.106141][T22156] device veth705 entered promiscuous mode 12:13:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030300000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:47 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @bcast, 0xee00}) 12:13:47 executing program 2: r0 = socket(0x28, 0x801, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x1) 12:13:47 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) 12:13:47 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@balloc_notest4}]}) [ 764.156450][T22156] bond235: (slave veth705): Enslaving as an active interface with an up link [ 764.175190][T22168] qnx4: no qnx4 filesystem (no root dir). 12:13:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000001c0)=0x6, 0x4) 12:13:47 executing program 2: syz_mount_image$efs(&(0x7f00000038c0), &(0x7f0000003900)='./file0\x00', 0x0, 0x1, &(0x7f0000003cc0)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f0000003d40)) 12:13:47 executing program 5: syz_mount_image$qnx4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000041c0), &(0x7f0000004200)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000056c0), 0x0, &(0x7f00000057c0)={[{@usrquota}]}) 12:13:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0x35) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ec7079ea3824ccd7e116e8c1312066caf8e0f200"/33, 0x21) [ 764.306956][T22178] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 764.320831][T22180] loop2: detected capacity change from 0 to 1 12:13:47 executing program 3: syz_mount_image$qnx4(&(0x7f0000003ec0), &(0x7f0000003f00)='./file0\x00', 0x0, 0x0, &(0x7f0000004100), 0x0, &(0x7f0000004180)) [ 764.355450][T22180] Dev loop2: unable to read RDB block 1 12:13:47 executing program 0: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) [ 764.408586][T22180] loop2: unable to read partition table [ 764.479627][T22196] qnx4: no qnx4 filesystem (no root dir). [ 764.483375][T22180] loop2: partition table beyond EOD, truncated [ 764.531799][T22180] efs: cannot read superblock [ 764.536655][T22178] device bond236 entered promiscuous mode [ 764.574348][T22184] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 764.608969][T22184] device veth707 entered promiscuous mode [ 764.620057][T22184] bond236: (slave veth707): Enslaving as an active interface with an up link 12:13:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020400000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:48 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@jdev={'jdev', 0x3d, './file0'}}]}) 12:13:48 executing program 2: socket(0x1d, 0x0, 0x104) [ 764.692052][T22189] XFS (loop5): Invalid superblock magic number [ 764.697803][T22206] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 764.733113][T22206] device bond237 entered promiscuous mode 12:13:48 executing program 2: r0 = socket(0x15, 0x5, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 12:13:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) [ 764.786455][T22210] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "" [ 764.845368][T22206] device veth709 entered promiscuous mode 12:13:48 executing program 3: socket(0x25, 0x3, 0x0) 12:13:48 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x5421, &(0x7f0000000040)) 12:13:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "7fcdadeff49ff0f21a4386f1004b5e298d44cfb0bdd7a90879a11c4ad47ceaefe24b0f93ad2f08b644c378310b5cb5628e066de740f7144e28e2d3a884189d06"}, 0x48, r0) keyctl$revoke(0x3, r0) [ 764.906667][T22206] bond237: (slave veth709): Enslaving as an active interface with an up link 12:13:48 executing program 5: keyctl$join(0x1, &(0x7f0000003940)={'syz', 0x2}) 12:13:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030400000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:48 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) [ 765.206561][T22226] FAT-fs (loop3): bogus number of reserved sectors [ 765.215402][T22227] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 765.233025][T22226] FAT-fs (loop3): Can't find a valid FAT filesystem 12:13:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f00000006c0)=[{0x2, 0x0, 0x0, 0x10001}]}) 12:13:48 executing program 1: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 12:13:48 executing program 2: rt_sigaction(0x8, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000240)) 12:13:48 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x5452, &(0x7f0000000040)) 12:13:48 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000004c0), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x9}, 0x0, 0x0, 0x0) [ 765.258339][T22227] device bond238 entered promiscuous mode 12:13:48 executing program 5: futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000540)={{0x0, 0xea60}}) [ 765.316752][T22227] device veth711 entered promiscuous mode [ 765.337092][T22227] bond238: (slave veth711): Enslaving as an active interface with an up link 12:13:48 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) 12:13:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d000500000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:48 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) 12:13:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "4d00cc000000001d9a004525f486d64a418c07c049ae994b236c240000000000000000b34b29dd83b7e46e00512d26fb54bc00", 0x2d}, 0x48, r0) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='keyring\x00', r1) 12:13:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2203, 0x0) 12:13:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/snmp\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) 12:13:48 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x404000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}, {@cache_mmap}, {@cache_none}, {@version_L}], [{@smackfsdef={'smackfsdef', 0x3d, '$@\\+(!{,'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '}%!^*:}.3'}}, {@fowner_gt={'fowner>', r1}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddrlabel={0x44, 0x48, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x18, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c815}, 0x40) socketpair(0xb, 0x5, 0xe691, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000340)={0x0, "37dd39d77af0093aa66a79ead059eb43"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) r5 = openat$cgroup_ro(r0, &(0x7f0000001380)='pids.events\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f00000013c0)={r3, "e48224aaeb6c72b939565482fb235faa"}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r2) syz_open_dev$vcsn(&(0x7f0000002640), 0x7, 0x4082) [ 765.513230][T22245] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000001440)) 12:13:49 executing program 0: syz_emit_ethernet(0x22, &(0x7f00000000c0)={@link_local, @empty, @val={@void, {0x8100, 0x5}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "07d2ecb8f000b769"}}}}, 0x0) 12:13:49 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "4d00cc000000001d9a004525f486d64a418c07c049ae994b236c240000000000000000b34b29dd83b7e46e00512d26fb54bc00", 0x2d}, 0x48, r0) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='keyring\x00', r1) 12:13:49 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "7fcdadeff49ff0f21a4386f1004b5e298d44cfb0bdd7a90879a11c4ad47ceaefe24b0f93ad2f08b644c378310b5cb5628e066de740f7144e28e2d3a884189d06"}, 0x48, r0) keyctl$negate(0x3, r1, 0x0, 0x0) 12:13:49 executing program 1: setitimer(0x2, &(0x7f00000003c0)={{0x0, 0xea60}, {0x77359400}}, &(0x7f0000000400)) [ 765.624682][T22245] device bond239 entered promiscuous mode [ 765.641539][T22256] __nla_validate_parse: 2 callbacks suppressed [ 765.641566][T22256] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:49 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "4d00cc000000001d9a004525f486d64a418c07c049ae994b236c240000000000000000b34b29dd83b7e46e00512d26fb54bc00", 0x2d}, 0x48, r0) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='keyring\x00', r1) [ 765.750729][T22256] device veth713 entered promiscuous mode [ 765.804220][T22256] bond239: (slave veth713): Enslaving as an active interface with an up link [ 765.846392][T22259] bond239 (unregistering): (slave veth713): Releasing backup interface [ 765.875544][T22259] bond239 (unregistering): Released all slaves 12:13:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d010500000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:49 executing program 3: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001380)='net/netstat\x00') 12:13:49 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000003880)='net/udplite6\x00') 12:13:49 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "4d00cc000000001d9a004525f486d64a418c07c049ae994b236c240000000000000000b34b29dd83b7e46e00512d26fb54bc00", 0x2d}, 0x48, r0) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='keyring\x00', r1) 12:13:49 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 12:13:49 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1}) 12:13:49 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffffebffffff0b00010064736d61726b"], 0x3c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:13:49 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) 12:13:49 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0xc01047d0, &(0x7f0000000040)) 12:13:49 executing program 0: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff) 12:13:49 executing program 2: rt_sigaction(0x8, &(0x7f0000000140)={&(0x7f0000000040)="3666460fdd3da5000000410f50fec402e9bb9feec2ed0667420ffc65a7f018ac398ae881050f1c6d08c4c23d3ac764450f72e3262e2666400f38332f430f8ffeefffff", 0x0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000240)) 12:13:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000080), 0x4) [ 766.090536][T22284] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 766.257793][T22284] device bond239 entered promiscuous mode [ 766.265421][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.290342][T22294] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.323755][T22294] device veth715 entered promiscuous mode [ 766.334592][T22294] bond239: (slave veth715): Enslaving as an active interface with an up link [ 766.348921][T22299] bond239 (unregistering): (slave veth715): Releasing backup interface [ 766.363922][T22299] bond239 (unregistering): Released all slaves 12:13:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020500000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) 12:13:49 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[{&(0x7f0000001b00)='N', 0x1}], 0x0, 0x0) 12:13:49 executing program 0: setitimer(0x0, 0x0, 0x0) getrusage(0x1, &(0x7f0000000000)) 12:13:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000800)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="cd1a0def94c5", 0x0, 0x0, 0x0, 0x0, 0x0}) 12:13:49 executing program 1: syz_open_dev$vcsn(&(0x7f0000002640), 0x0, 0x0) 12:13:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 12:13:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/snmp\x00') write$evdev(r0, 0x0, 0x0) 12:13:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000300)) 12:13:49 executing program 5: openat$pidfd(0xffffffffffffff9c, 0x0, 0x436042, 0x0) [ 766.461095][T22304] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 12:13:49 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) [ 766.546037][T22311] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 766.585619][T22311] device bond239 entered promiscuous mode [ 766.621029][T22311] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.652230][T22311] device veth717 entered promiscuous mode 12:13:50 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x2, &(0x7f0000000040)) [ 766.664490][T22311] bond239: (slave veth717): Enslaving as an active interface with an up link 12:13:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030500000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:50 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 12:13:50 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0xc0189436, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 12:13:50 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f00000000c0)) 12:13:50 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x40}, 0x0, 0x0) 12:13:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2286, 0x0) 12:13:50 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'pim6reg0\x00', {0x867d}}) 12:13:50 executing program 1: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, "fabb02529b432063eb50ab344ed536646c95ab6540e847358dd59066d4732850c8864f3a3b7efaece4fdcb7bd1d227bc5c09c8ccfee5cadd462d7da4efbb82ac"}, 0x48, 0xfffffffffffffffc) [ 766.815294][T22333] device bond240 entered promiscuous mode 12:13:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x14, &(0x7f00000001c0)=""/20}, &(0x7f0000000200)="f4f0c636037d", 0x0, 0x0, 0x10010, 0x0, 0x0}) 12:13:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x0, 0x0}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) 12:13:50 executing program 2: setitimer(0x2, 0x0, &(0x7f0000000400)) 12:13:50 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000024c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 766.859733][T22341] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 767.008955][T22341] device veth719 entered promiscuous mode 12:13:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d000600000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 12:13:50 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) 12:13:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x14, &(0x7f00000001c0)=""/20}, &(0x7f0000000200)="f4f0c636037d", 0x0, 0x0, 0x0, 0x0, 0x0}) 12:13:50 executing program 1: socket(0x25, 0x3, 0x6) 12:13:50 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x5460, 0x0) [ 767.055006][T22341] bond240: (slave veth719): Enslaving as an active interface with an up link 12:13:50 executing program 0: syz_open_dev$evdev(&(0x7f0000002540), 0x8000000000000000, 0x600400) 12:13:50 executing program 5: syz_mount_image$iso9660(&(0x7f00000019c0), 0x0, 0x0, 0x1, &(0x7f0000001b40)=[{&(0x7f0000001a80)="9e", 0x1}], 0x0, &(0x7f0000001bc0)) 12:13:50 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='net/netstat\x00') 12:13:50 executing program 1: inotify_init1(0x140000) 12:13:50 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:50 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002580)={'wlan0\x00'}) [ 767.302012][T22363] device bond241 entered promiscuous mode [ 767.308774][T22377] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 767.352752][T22377] device veth721 entered promiscuous mode [ 767.382857][T22377] bond241: (slave veth721): Enslaving as an active interface with an up link [ 767.403222][T22363] bond241 (unregistering): (slave veth721): Releasing backup interface [ 767.416363][T22363] bond241 (unregistering): Released all slaves 12:13:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d010600000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:50 executing program 5: mknodat(0xffffffffffffffff, &(0x7f00000017c0)='./file0\x00', 0x0, 0x0) 12:13:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@deltaction={0x24, 0x31, 0x119, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}}, 0x0) 12:13:50 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x14, 0x1, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) 12:13:50 executing program 2: syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02014200000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 12:13:50 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x0) 12:13:50 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xc646, 0x2) sendfile(r1, r0, 0x0, 0x20007ffff000) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)) [ 767.515772][T22385] loop2: detected capacity change from 0 to 1 12:13:50 executing program 5: mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000a000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) [ 767.580418][T22389] validate_nla: 2 callbacks suppressed [ 767.580438][T22389] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 767.619353][T22385] ldm_validate_privheads(): Disk read failed. [ 767.651635][T22385] loop2: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 767.651747][T22385] loop2: partition table partially beyond EOD, [ 767.676732][T22399] loop5: detected capacity change from 0 to 4096 12:13:51 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x200) 12:13:51 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) [ 767.742245][T22385] truncated [ 767.797705][T22389] device bond241 entered promiscuous mode [ 767.818791][T22385] loop2: p1 start 1 is beyond EOD, truncated [ 767.834555][T22389] bond241 (unregistering): Released all slaves 12:13:51 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000a000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) [ 767.859871][T22385] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 767.877444][T22402] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 767.902422][T22399] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 767.924867][T22385] loop2: p3 size 2 extends beyond EOD, truncated [ 767.950221][T22385] loop2: p4 size 32768 extends beyond EOD, truncated [ 767.967015][T22412] loop1: detected capacity change from 0 to 4096 [ 768.011419][T22385] loop2: p5 start 1 is beyond EOD, truncated [ 768.016732][T22412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 768.023190][T22385] loop2: p6 size 1073741824 extends beyond EOD, truncated [ 768.041528][T22402] device veth723 entered promiscuous mode [ 768.048177][T22385] loop2: p7 size 32768 extends beyond EOD, truncated [ 768.057435][ T3790] EXT4-fs (loop5): unmounting filesystem. [ 768.063479][T22385] loop2: p8 start 1 is beyond EOD, truncated [ 768.063506][T22385] loop2: p9 size 1073741824 extends beyond EOD, truncated [ 768.084986][T22385] loop2: p10 size 32768 extends beyond EOD, truncated [ 768.093567][T22385] loop2: p11 start 1 is beyond EOD, truncated [ 768.100483][T22385] loop2: p12 size 1073741824 extends beyond EOD, truncated [ 768.109568][T22385] loop2: p13 size 32768 extends beyond EOD, truncated [ 768.121760][T22385] loop2: p14 start 1 is beyond EOD, truncated [ 768.128823][T22385] loop2: p15 size 1073741824 extends beyond EOD, truncated [ 768.139598][T22385] loop2: p16 size 32768 extends beyond EOD, truncated [ 768.147385][T22385] loop2: p17 start 1 is beyond EOD, truncated [ 768.163480][T22385] loop2: p18 size 1073741824 extends beyond EOD, truncated [ 768.165363][ T3639] EXT4-fs (loop1): unmounting filesystem. [ 768.172456][T22385] loop2: p19 size 32768 extends beyond EOD, truncated 12:13:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020600000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000a000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) 12:13:51 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:51 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000a000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) [ 768.209426][T22385] loop2: p20 start 1 is beyond EOD, truncated [ 768.215569][T22385] loop2: p21 size 1073741824 extends beyond EOD, truncated [ 768.235002][T22385] loop2: p22 size 32768 extends beyond EOD, truncated [ 768.243170][T22385] loop2: p23 start 1 is beyond EOD, truncated [ 768.249676][T22385] loop2: p24 size 1073741824 extends beyond EOD, truncated [ 768.316047][T22419] loop5: detected capacity change from 0 to 4096 [ 768.323020][T22385] loop2: p25 size 32768 extends beyond EOD, truncated [ 768.336224][T22423] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 768.350204][T22385] loop2: p26 start 1 is beyond EOD, truncated [ 768.368842][T22385] loop2: p27 size 1073741824 extends beyond EOD, truncated [ 768.382781][T22419] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 768.394250][T22385] loop2: p28 size 32768 extends beyond EOD, truncated [ 768.410143][T22385] loop2: p29 start 1 is beyond EOD, truncated [ 768.417123][T22385] loop2: p30 size 1073741824 extends beyond EOD, truncated [ 768.417296][T22423] device bond241 entered promiscuous mode [ 768.445410][T22428] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 768.446614][T22385] loop2: p31 size 32768 extends beyond EOD, truncated [ 768.480609][T22385] loop2: p32 start 1 is beyond EOD, truncated [ 768.503827][T22385] loop2: p33 size 1073741824 extends beyond EOD, truncated [ 768.514791][T22428] device veth723 entered promiscuous mode [ 768.526421][ T3790] EXT4-fs (loop5): unmounting filesystem. [ 768.536942][T22385] loop2: p34 size 32768 extends beyond EOD, truncated [ 768.542485][T22428] bond241: (slave veth723): Enslaving as an active interface with an up link [ 768.547229][T22385] loop2: p35 start 1 is beyond EOD, truncated [ 768.570180][T22385] loop2: p36 size 1073741824 extends beyond EOD, truncated [ 768.599382][T22385] loop2: p37 size 32768 extends beyond EOD, truncated [ 768.622419][T22385] loop2: p38 start 1 is beyond EOD, truncated [ 768.633939][T22385] loop2: p39 size 1073741824 extends beyond EOD, truncated [ 768.648193][T22385] loop2: p40 size 32768 extends beyond EOD, truncated [ 768.657219][T22385] loop2: p41 start 1 is beyond EOD, truncated [ 768.663778][T22385] loop2: p42 size 1073741824 extends beyond EOD, truncated [ 768.677263][T22385] loop2: p43 size 32768 extends beyond EOD, truncated [ 768.685175][T22385] loop2: p44 start 1 is beyond EOD, truncated [ 768.698650][T22385] loop2: p45 size 1073741824 extends beyond EOD, truncated [ 768.707148][T22385] loop2: p46 size 32768 extends beyond EOD, truncated [ 768.715322][T22385] loop2: p47 start 1 is beyond EOD, truncated [ 768.721723][T22385] loop2: p48 size 1073741824 extends beyond EOD, truncated [ 768.731850][T22385] loop2: p49 size 32768 extends beyond EOD, truncated [ 768.741820][T22385] loop2: p50 start 1 is beyond EOD, truncated [ 768.752524][T22385] loop2: p51 size 1073741824 extends beyond EOD, truncated [ 768.761358][T22385] loop2: p52 size 32768 extends beyond EOD, truncated [ 768.772428][T22385] loop2: p53 start 1 is beyond EOD, truncated [ 768.779614][T22385] loop2: p54 size 1073741824 extends beyond EOD, truncated [ 768.787452][T22385] loop2: p55 size 32768 extends beyond EOD, truncated [ 768.796949][T22385] loop2: p56 start 1 is beyond EOD, truncated [ 768.803152][T22385] loop2: p57 size 1073741824 extends beyond EOD, truncated [ 768.811468][T22385] loop2: p58 size 32768 extends beyond EOD, truncated [ 768.819787][T22385] loop2: p59 start 1 is beyond EOD, truncated [ 768.825906][T22385] loop2: p60 size 1073741824 extends beyond EOD, truncated [ 768.834196][T22385] loop2: p61 size 32768 extends beyond EOD, truncated [ 768.842638][T22385] loop2: p62 start 1 is beyond EOD, truncated [ 768.848839][T22385] loop2: p63 size 1073741824 extends beyond EOD, truncated [ 768.859798][T22385] loop2: p64 size 32768 extends beyond EOD, truncated [ 768.867600][T22385] loop2: p65 start 1 is beyond EOD, truncated [ 768.874979][T22385] loop2: p66 size 1073741824 extends beyond EOD, truncated [ 768.884468][T22385] loop2: p67 size 32768 extends beyond EOD, truncated [ 768.892549][T22385] loop2: p68 start 1 is beyond EOD, truncated [ 768.900081][T22385] loop2: p69 size 1073741824 extends beyond EOD, truncated [ 768.908514][T22385] loop2: p70 size 32768 extends beyond EOD, truncated [ 768.916238][T22385] loop2: p71 start 1 is beyond EOD, truncated [ 768.922832][T22385] loop2: p72 size 1073741824 extends beyond EOD, truncated [ 768.931317][T22385] loop2: p73 size 32768 extends beyond EOD, truncated [ 768.939477][T22385] loop2: p74 start 1 is beyond EOD, truncated [ 768.945588][T22385] loop2: p75 size 1073741824 extends beyond EOD, truncated [ 768.953908][T22385] loop2: p76 size 32768 extends beyond EOD, truncated [ 768.962244][T22385] loop2: p77 start 1 is beyond EOD, truncated [ 768.968759][T22385] loop2: p78 size 1073741824 extends beyond EOD, truncated [ 768.976930][T22385] loop2: p79 size 32768 extends beyond EOD, truncated [ 768.985635][T22385] loop2: p80 start 1 is beyond EOD, truncated [ 768.992013][T22385] loop2: p81 size 1073741824 extends beyond EOD, truncated [ 769.010356][T22385] loop2: p82 size 32768 extends beyond EOD, truncated [ 769.018471][T22385] loop2: p83 start 1 is beyond EOD, truncated [ 769.024576][T22385] loop2: p84 size 1073741824 extends beyond EOD, truncated [ 769.033750][T22385] loop2: p85 size 32768 extends beyond EOD, truncated [ 769.041761][T22385] loop2: p86 start 1 is beyond EOD, truncated [ 769.047844][T22385] loop2: p87 size 1073741824 extends beyond EOD, truncated [ 769.056849][T22385] loop2: p88 size 32768 extends beyond EOD, truncated [ 769.064699][T22385] loop2: p89 start 1 is beyond EOD, truncated [ 769.071049][T22385] loop2: p90 size 1073741824 extends beyond EOD, truncated [ 769.086599][T22385] loop2: p91 size 32768 extends beyond EOD, truncated [ 769.095859][T22385] loop2: p92 start 1 is beyond EOD, truncated [ 769.103963][T22385] loop2: p93 size 1073741824 extends beyond EOD, truncated [ 769.112156][T22385] loop2: p94 size 32768 extends beyond EOD, truncated [ 769.120283][T22385] loop2: p95 start 1 is beyond EOD, truncated [ 769.126407][T22385] loop2: p96 size 1073741824 extends beyond EOD, truncated [ 769.134673][T22385] loop2: p97 size 32768 extends beyond EOD, truncated [ 769.142457][T22385] loop2: p98 start 1 is beyond EOD, truncated [ 769.148838][T22385] loop2: p99 size 1073741824 extends beyond EOD, truncated [ 769.156838][T22385] loop2: p100 size 32768 extends beyond EOD, truncated [ 769.165174][T22385] loop2: p101 start 1 is beyond EOD, truncated [ 769.171439][T22385] loop2: p102 size 1073741824 extends beyond EOD, truncated [ 769.180377][T22385] loop2: p103 size 32768 extends beyond EOD, truncated [ 769.188068][T22385] loop2: p104 start 1 is beyond EOD, truncated [ 769.194288][T22385] loop2: p105 size 1073741824 extends beyond EOD, truncated [ 769.205328][T22385] loop2: p106 size 32768 extends beyond EOD, truncated [ 769.213867][T22385] loop2: p107 start 1 is beyond EOD, truncated [ 769.220427][T22385] loop2: p108 size 1073741824 extends beyond EOD, truncated [ 769.229611][T22385] loop2: p109 size 32768 extends beyond EOD, truncated [ 769.237537][T22385] loop2: p110 start 1 is beyond EOD, truncated [ 769.244199][T22385] loop2: p111 size 1073741824 extends beyond EOD, truncated [ 769.257329][T22385] loop2: p112 size 32768 extends beyond EOD, truncated [ 769.265356][T22385] loop2: p113 start 1 is beyond EOD, truncated [ 769.271975][T22385] loop2: p114 size 1073741824 extends beyond EOD, truncated [ 769.280660][T22385] loop2: p115 size 32768 extends beyond EOD, truncated [ 769.289738][T22385] loop2: p116 start 1 is beyond EOD, truncated [ 769.296410][T22385] loop2: p117 size 1073741824 extends beyond EOD, truncated [ 769.306704][T22385] loop2: p118 size 32768 extends beyond EOD, truncated [ 769.316458][T22385] loop2: p119 start 1 is beyond EOD, truncated [ 769.323783][T22385] loop2: p120 size 1073741824 extends beyond EOD, truncated [ 769.333109][T22385] loop2: p121 size 32768 extends beyond EOD, truncated [ 769.341571][T22385] loop2: p122 start 1 is beyond EOD, truncated [ 769.347777][T22385] loop2: p123 size 1073741824 extends beyond EOD, truncated [ 769.356243][T22385] loop2: p124 size 32768 extends beyond EOD, truncated [ 769.364689][T22385] loop2: p125 start 1 is beyond EOD, truncated [ 769.371189][T22385] loop2: p126 size 1073741824 extends beyond EOD, truncated [ 769.380027][T22385] loop2: p127 size 32768 extends beyond EOD, truncated [ 769.389466][T22385] loop2: p128 start 1 is beyond EOD, truncated [ 769.395657][T22385] loop2: p129 size 1073741824 extends beyond EOD, truncated [ 769.406432][T22385] loop2: p130 size 32768 extends beyond EOD, truncated [ 769.415665][T22385] loop2: p131 start 1 is beyond EOD, truncated [ 769.422356][T22385] loop2: p132 size 1073741824 extends beyond EOD, truncated [ 769.430888][T22385] loop2: p133 size 32768 extends beyond EOD, truncated [ 769.439079][T22385] loop2: p134 start 1 is beyond EOD, truncated [ 769.445351][T22385] loop2: p135 size 1073741824 extends beyond EOD, truncated [ 769.454279][T22385] loop2: p136 size 32768 extends beyond EOD, truncated [ 769.463490][T22385] loop2: p137 start 1 is beyond EOD, truncated [ 769.469793][T22385] loop2: p138 size 1073741824 extends beyond EOD, truncated [ 769.478462][T22385] loop2: p139 size 32768 extends beyond EOD, truncated [ 769.486511][T22385] loop2: p140 start 1 is beyond EOD, truncated [ 769.492815][T22385] loop2: p141 size 1073741824 extends beyond EOD, truncated [ 769.501598][T22385] loop2: p142 size 32768 extends beyond EOD, truncated [ 769.515943][T22385] loop2: p143 start 1 is beyond EOD, truncated [ 769.522257][T22385] loop2: p144 size 1073741824 extends beyond EOD, truncated [ 769.530773][T22385] loop2: p145 size 32768 extends beyond EOD, truncated [ 769.539023][T22385] loop2: p146 start 1 is beyond EOD, truncated [ 769.545251][T22385] loop2: p147 size 1073741824 extends beyond EOD, truncated [ 769.553450][T22385] loop2: p148 size 32768 extends beyond EOD, truncated [ 769.561518][T22385] loop2: p149 start 1 is beyond EOD, truncated [ 769.567714][T22385] loop2: p150 size 1073741824 extends beyond EOD, truncated [ 769.576471][T22385] loop2: p151 size 32768 extends beyond EOD, truncated [ 769.584319][T22385] loop2: p152 start 1 is beyond EOD, truncated [ 769.590645][T22385] loop2: p153 size 1073741824 extends beyond EOD, truncated [ 769.599486][T22385] loop2: p154 size 32768 extends beyond EOD, truncated [ 769.607118][T22385] loop2: p155 start 1 is beyond EOD, truncated [ 769.614570][T22385] loop2: p156 size 1073741824 extends beyond EOD, truncated [ 769.624213][T22385] loop2: p157 size 32768 extends beyond EOD, truncated [ 769.632469][T22385] loop2: p158 start 1 is beyond EOD, truncated [ 769.638902][T22385] loop2: p159 size 1073741824 extends beyond EOD, truncated [ 769.646873][T22385] loop2: p160 size 32768 extends beyond EOD, truncated [ 769.654737][T22385] loop2: p161 start 1 is beyond EOD, truncated [ 769.661332][T22385] loop2: p162 size 1073741824 extends beyond EOD, truncated [ 769.670539][T22385] loop2: p163 size 32768 extends beyond EOD, truncated [ 769.681130][T22385] loop2: p164 start 1 is beyond EOD, truncated [ 769.687341][T22385] loop2: p165 size 1073741824 extends beyond EOD, truncated [ 769.697234][T22385] loop2: p166 size 32768 extends beyond EOD, truncated [ 769.709909][T22385] loop2: p167 start 1 is beyond EOD, truncated [ 769.716677][T22385] loop2: p168 size 1073741824 extends beyond EOD, truncated [ 769.726221][T22385] loop2: p169 size 32768 extends beyond EOD, truncated [ 769.736623][T22385] loop2: p170 start 1 is beyond EOD, truncated [ 769.742916][T22385] loop2: p171 size 1073741824 extends beyond EOD, truncated [ 769.751676][T22385] loop2: p172 size 32768 extends beyond EOD, truncated [ 769.759714][T22385] loop2: p173 start 1 is beyond EOD, truncated [ 769.765908][T22385] loop2: p174 size 1073741824 extends beyond EOD, truncated [ 769.774425][T22385] loop2: p175 size 32768 extends beyond EOD, truncated [ 769.782499][T22385] loop2: p176 start 1 is beyond EOD, truncated [ 769.788782][T22385] loop2: p177 size 1073741824 extends beyond EOD, truncated [ 769.796874][T22385] loop2: p178 size 32768 extends beyond EOD, truncated [ 769.804780][T22385] loop2: p179 start 1 is beyond EOD, truncated [ 769.811356][T22385] loop2: p180 size 1073741824 extends beyond EOD, truncated [ 769.822828][T22385] loop2: p181 size 32768 extends beyond EOD, truncated [ 769.831454][T22385] loop2: p182 start 1 is beyond EOD, truncated [ 769.837824][T22385] loop2: p183 size 1073741824 extends beyond EOD, truncated [ 769.847331][T22385] loop2: p184 size 32768 extends beyond EOD, truncated [ 769.855336][T22385] loop2: p185 start 1 is beyond EOD, truncated [ 769.861602][T22385] loop2: p186 size 1073741824 extends beyond EOD, truncated [ 769.870357][T22385] loop2: p187 size 32768 extends beyond EOD, truncated [ 769.878179][T22385] loop2: p188 start 1 is beyond EOD, truncated [ 769.884377][T22385] loop2: p189 size 1073741824 extends beyond EOD, truncated [ 769.892566][T22385] loop2: p190 size 32768 extends beyond EOD, truncated [ 769.900949][T22385] loop2: p191 start 1 is beyond EOD, truncated [ 769.907136][T22385] loop2: p192 size 1073741824 extends beyond EOD, truncated [ 769.915406][T22385] loop2: p193 size 32768 extends beyond EOD, truncated [ 769.923807][T22385] loop2: p194 start 1 is beyond EOD, truncated [ 769.930384][T22385] loop2: p195 size 1073741824 extends beyond EOD, truncated [ 769.939558][T22385] loop2: p196 size 32768 extends beyond EOD, truncated [ 769.947260][T22385] loop2: p197 start 1 is beyond EOD, truncated [ 769.954931][T22385] loop2: p198 size 1073741824 extends beyond EOD, truncated [ 769.963562][T22385] loop2: p199 size 32768 extends beyond EOD, truncated [ 769.971344][T22385] loop2: p200 start 1 is beyond EOD, truncated [ 769.977600][T22385] loop2: p201 size 1073741824 extends beyond EOD, truncated [ 769.985906][T22385] loop2: p202 size 32768 extends beyond EOD, truncated [ 769.993909][T22385] loop2: p203 start 1 is beyond EOD, truncated [ 770.000280][T22385] loop2: p204 size 1073741824 extends beyond EOD, truncated [ 770.009027][T22385] loop2: p205 size 32768 extends beyond EOD, truncated [ 770.016766][T22385] loop2: p206 start 1 is beyond EOD, truncated [ 770.023785][T22385] loop2: p207 size 1073741824 extends beyond EOD, truncated [ 770.032294][T22385] loop2: p208 size 32768 extends beyond EOD, truncated [ 770.040412][T22385] loop2: p209 start 1 is beyond EOD, truncated [ 770.047574][T22385] loop2: p210 size 1073741824 extends beyond EOD, truncated [ 770.056984][T22385] loop2: p211 size 32768 extends beyond EOD, truncated [ 770.066017][T22385] loop2: p212 start 1 is beyond EOD, truncated [ 770.072313][T22385] loop2: p213 size 1073741824 extends beyond EOD, truncated [ 770.081222][T22385] loop2: p214 size 32768 extends beyond EOD, truncated [ 770.089247][T22385] loop2: p215 start 1 is beyond EOD, truncated [ 770.095501][T22385] loop2: p216 size 1073741824 extends beyond EOD, truncated [ 770.103756][T22385] loop2: p217 size 32768 extends beyond EOD, truncated [ 770.112168][T22385] loop2: p218 start 1 is beyond EOD, truncated [ 770.119348][T22385] loop2: p219 size 1073741824 extends beyond EOD, truncated [ 770.128094][T22385] loop2: p220 size 32768 extends beyond EOD, truncated [ 770.136084][T22385] loop2: p221 start 1 is beyond EOD, truncated [ 770.142659][T22385] loop2: p222 size 1073741824 extends beyond EOD, truncated [ 770.152338][T22385] loop2: p223 size 32768 extends beyond EOD, truncated [ 770.161778][T22385] loop2: p224 start 1 is beyond EOD, truncated [ 770.170437][T22385] loop2: p225 size 1073741824 extends beyond EOD, truncated [ 770.178997][T22385] loop2: p226 size 32768 extends beyond EOD, truncated [ 770.186718][T22385] loop2: p227 start 1 is beyond EOD, truncated [ 770.193089][T22385] loop2: p228 size 1073741824 extends beyond EOD, truncated [ 770.202121][T22385] loop2: p229 size 32768 extends beyond EOD, truncated [ 770.210193][T22385] loop2: p230 start 1 is beyond EOD, truncated [ 770.216544][T22385] loop2: p231 size 1073741824 extends beyond EOD, truncated [ 770.224990][T22385] loop2: p232 size 32768 extends beyond EOD, truncated [ 770.233586][T22385] loop2: p233 start 1 is beyond EOD, truncated [ 770.239876][T22385] loop2: p234 size 1073741824 extends beyond EOD, truncated [ 770.247989][T22385] loop2: p235 size 32768 extends beyond EOD, truncated [ 770.255622][T22385] loop2: p236 start 1 is beyond EOD, truncated [ 770.262353][T22385] loop2: p237 size 1073741824 extends beyond EOD, truncated [ 770.271399][T22385] loop2: p238 size 32768 extends beyond EOD, truncated [ 770.282016][T22385] loop2: p239 start 1 is beyond EOD, truncated [ 770.288586][T22385] loop2: p240 size 1073741824 extends beyond EOD, truncated [ 770.296953][T22385] loop2: p241 size 32768 extends beyond EOD, truncated [ 770.304748][T22385] loop2: p242 start 1 is beyond EOD, truncated [ 770.311032][T22385] loop2: p243 size 1073741824 extends beyond EOD, truncated [ 770.320010][T22385] loop2: p244 size 32768 extends beyond EOD, truncated [ 770.327680][T22385] loop2: p245 start 1 is beyond EOD, truncated [ 770.334571][T22385] loop2: p246 size 1073741824 extends beyond EOD, truncated [ 770.342784][T22385] loop2: p247 size 32768 extends beyond EOD, truncated [ 770.351118][T22385] loop2: p248 start 1 is beyond EOD, truncated [ 770.358662][T22385] loop2: p249 size 1073741824 extends beyond EOD, truncated [ 770.367847][T22385] loop2: p250 size 32768 extends beyond EOD, truncated 12:13:53 executing program 2: syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02014200000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 12:13:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x48011}, 0x4880) 12:13:53 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 770.375661][T22385] loop2: p251 start 1 is beyond EOD, truncated [ 770.382655][T22385] loop2: p252 size 1073741824 extends beyond EOD, truncated [ 770.393348][T22385] loop2: p253 size 32768 extends beyond EOD, truncated [ 770.401411][T22385] loop2: p254 start 1 is beyond EOD, truncated [ 770.407602][T22385] loop2: p255 size 1073741824 extends beyond EOD, truncated 12:13:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000a000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) 12:13:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030600000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:53 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 770.486093][T22433] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:53 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) accept$inet(r0, 0x0, 0x0) 12:13:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0xc0189436, 0x0) [ 770.546896][T22439] loop5: detected capacity change from 0 to 4096 [ 770.704334][T22433] device bond242 entered promiscuous mode 12:13:54 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0x6, &(0x7f0000000780)=@string={0x6, 0x3, "24d08dbf"}}]}) 12:13:54 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f0000009c40), &(0x7f0000009c80)={0x8}, 0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40), 0x8}) 12:13:54 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') [ 770.772894][T22448] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 770.803945][T22439] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 12:13:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 771.010930][ T3790] EXT4-fs (loop5): unmounting filesystem. [ 771.011511][T22448] device veth725 entered promiscuous mode [ 771.097606][T22448] bond242: (slave veth725): Enslaving as an active interface with an up link [ 771.150072][T22466] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 771.150627][ T3681] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 771.263532][T22437] udevd[22437]: inotify_add_watch(7, /dev/loop2p13, 10) failed: No such file or directory [ 771.268350][T22447] loop2: detected capacity change from 0 to 1 [ 771.289290][ T8479] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.308792][ T8479] Buffer I/O error on dev loop2, logical block 0, async page read [ 771.342844][ T8479] ldm_validate_privheads(): Disk read failed. [ 771.367004][ T8479] loop2: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 771.367103][ T8479] loop2: partition table partially beyond EOD, truncated [ 771.472682][ T8479] loop2: p1 start 1 is beyond EOD, truncated [ 771.479515][ T8479] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 771.508279][ T3681] usb 4-1: Using ep0 maxpacket: 8 [ 771.513700][ T8479] loop2: p3 size 2 extends beyond EOD, truncated [ 771.532136][ T8479] loop2: p4 size 32768 extends beyond EOD, truncated [ 771.552489][ T8479] loop2: p5 start 1 is beyond EOD, truncated [ 771.568315][ T8479] loop2: p6 size 1073741824 extends beyond EOD, truncated [ 771.578338][ T8479] loop2: p7 size 32768 extends beyond EOD, truncated [ 771.598497][ T8479] loop2: p8 start 1 is beyond EOD, truncated [ 771.604538][ T8479] loop2: p9 size 1073741824 extends beyond EOD, truncated [ 771.628374][ T3681] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 771.642547][ T8479] loop2: p10 size 32768 extends beyond EOD, truncated [ 771.654292][ T8479] loop2: p11 start 1 is beyond EOD, truncated [ 771.670516][ T8479] loop2: p12 size 1073741824 extends beyond EOD, truncated [ 771.694860][ T8479] loop2: p13 size 32768 extends beyond EOD, truncated [ 771.719534][ T8479] loop2: p14 start 1 is beyond EOD, truncated [ 771.725668][ T8479] loop2: p15 size 1073741824 extends beyond EOD, truncated [ 771.749155][ T8479] loop2: p16 size 32768 extends beyond EOD, truncated [ 771.764034][ T8479] loop2: p17 start 1 is beyond EOD, truncated [ 771.780910][ T8479] loop2: p18 size 1073741824 extends beyond EOD, truncated [ 771.798206][ T3681] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.807293][ T3681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.816938][ T8479] loop2: p19 size 32768 extends beyond EOD, truncated [ 771.829755][ T8479] loop2: p20 start 1 is beyond EOD, truncated [ 771.835903][ T8479] loop2: p21 size 1073741824 extends beyond EOD, truncated [ 771.843773][ T3681] usb 4-1: Product: syz [ 771.857942][ T3681] usb 4-1: Manufacturer: 퀤뾍 [ 771.862896][ T3681] usb 4-1: SerialNumber: syz [ 771.878965][ T8479] loop2: p22 size 32768 extends beyond EOD, truncated [ 771.892044][ T8479] loop2: p23 start 1 is beyond EOD, truncated [ 771.908463][ T8479] loop2: p24 size 1073741824 extends beyond EOD, truncated [ 771.930214][ T3681] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 771.938375][ T8479] loop2: p25 size 32768 extends beyond EOD, truncated [ 771.959136][ T8479] loop2: p26 start 1 is beyond EOD, truncated [ 771.965256][ T8479] loop2: p27 size 1073741824 extends beyond EOD, truncated [ 771.989232][ T8479] loop2: p28 size 32768 extends beyond EOD, truncated [ 772.000940][ T8479] loop2: p29 start 1 is beyond EOD, truncated [ 772.007151][ T8479] loop2: p30 size 1073741824 extends beyond EOD, truncated [ 772.039001][ T8479] loop2: p31 size 32768 extends beyond EOD, truncated [ 772.046870][ T8479] loop2: p32 start 1 is beyond EOD, truncated [ 772.067992][ T8479] loop2: p33 size 1073741824 extends beyond EOD, truncated [ 772.076842][ T8479] loop2: p34 size 32768 extends beyond EOD, truncated [ 772.098831][ T8479] loop2: p35 start 1 is beyond EOD, truncated [ 772.104967][ T8479] loop2: p36 size 1073741824 extends beyond EOD, truncated [ 772.134655][ T5642] usb 4-1: USB disconnect, device number 16 [ 772.144273][ T8479] loop2: p37 size 32768 extends beyond EOD, truncated [ 772.169211][ T8479] loop2: p38 start 1 is beyond EOD, truncated [ 772.175939][ T8479] loop2: p39 size 1073741824 extends beyond EOD, truncated [ 772.199241][ T8479] loop2: p40 size 32768 extends beyond EOD, truncated [ 772.206940][ T8479] loop2: p41 start 1 is beyond EOD, truncated [ 772.220594][ T8479] loop2: p42 size 1073741824 extends beyond EOD, truncated [ 772.239599][ T8479] loop2: p43 size 32768 extends beyond EOD, truncated [ 772.259220][ T8479] loop2: p44 start 1 is beyond EOD, truncated [ 772.265351][ T8479] loop2: p45 size 1073741824 extends beyond EOD, truncated [ 772.289256][ T8479] loop2: p46 size 32768 extends beyond EOD, truncated [ 772.298626][ T8479] loop2: p47 start 1 is beyond EOD, truncated [ 772.304736][ T8479] loop2: p48 size 1073741824 extends beyond EOD, truncated [ 772.331388][ T8479] loop2: p49 size 32768 extends beyond EOD, truncated [ 772.347524][ T8479] loop2: p50 start 1 is beyond EOD, truncated [ 772.367977][ T8479] loop2: p51 size 1073741824 extends beyond EOD, truncated [ 772.378739][ T8479] loop2: p52 size 32768 extends beyond EOD, truncated [ 772.398189][ T8479] loop2: p53 start 1 is beyond EOD, truncated [ 772.404311][ T8479] loop2: p54 size 1073741824 extends beyond EOD, truncated [ 772.428989][ T8479] loop2: p55 size 32768 extends beyond EOD, truncated [ 772.448436][ T8479] loop2: p56 start 1 is beyond EOD, truncated [ 772.454609][ T8479] loop2: p57 size 1073741824 extends beyond EOD, truncated [ 772.479037][ T8479] loop2: p58 size 32768 extends beyond EOD, truncated [ 772.487294][ T8479] loop2: p59 start 1 is beyond EOD, truncated [ 772.507991][ T8479] loop2: p60 size 1073741824 extends beyond EOD, truncated [ 772.516192][ T8479] loop2: p61 size 32768 extends beyond EOD, truncated [ 772.538932][ T8479] loop2: p62 start 1 is beyond EOD, truncated [ 772.545063][ T8479] loop2: p63 size 1073741824 extends beyond EOD, truncated [ 772.568859][ T8479] loop2: p64 size 32768 extends beyond EOD, truncated [ 772.588570][ T8479] loop2: p65 start 1 is beyond EOD, truncated [ 772.594694][ T8479] loop2: p66 size 1073741824 extends beyond EOD, truncated [ 772.619164][ T8479] loop2: p67 size 32768 extends beyond EOD, truncated [ 772.638291][ T8479] loop2: p68 start 1 is beyond EOD, truncated [ 772.644428][ T8479] loop2: p69 size 1073741824 extends beyond EOD, truncated [ 772.679347][ T8479] loop2: p70 size 32768 extends beyond EOD, truncated [ 772.698237][ T8479] loop2: p71 start 1 is beyond EOD, truncated [ 772.704455][ T8479] loop2: p72 size 1073741824 extends beyond EOD, truncated [ 772.729019][ T8479] loop2: p73 size 32768 extends beyond EOD, truncated [ 772.736790][ T8479] loop2: p74 start 1 is beyond EOD, truncated [ 772.757960][ T8479] loop2: p75 size 1073741824 extends beyond EOD, truncated [ 772.766150][ T8479] loop2: p76 size 32768 extends beyond EOD, truncated [ 772.789611][ T8479] loop2: p77 start 1 is beyond EOD, truncated [ 772.795751][ T8479] loop2: p78 size 1073741824 extends beyond EOD, truncated [ 772.818968][ T8479] loop2: p79 size 32768 extends beyond EOD, truncated [ 772.832673][ T8479] loop2: p80 start 1 is beyond EOD, truncated [ 772.847959][ T8479] loop2: p81 size 1073741824 extends beyond EOD, truncated [ 772.856180][ T8479] loop2: p82 size 32768 extends beyond EOD, truncated [ 772.864586][ T8479] loop2: p83 start 1 is beyond EOD, truncated [ 772.871422][ T8479] loop2: p84 size 1073741824 extends beyond EOD, truncated [ 772.882413][ T8479] loop2: p85 size 32768 extends beyond EOD, truncated [ 772.892112][ T8479] loop2: p86 start 1 is beyond EOD, truncated [ 772.898869][ T8479] loop2: p87 size 1073741824 extends beyond EOD, truncated [ 772.907185][ T8479] loop2: p88 size 32768 extends beyond EOD, truncated [ 772.915509][ T8479] loop2: p89 start 1 is beyond EOD, truncated [ 772.922420][ T8479] loop2: p90 size 1073741824 extends beyond EOD, truncated [ 772.931268][ T8479] loop2: p91 size 32768 extends beyond EOD, truncated [ 772.939489][ T8479] loop2: p92 start 1 is beyond EOD, truncated [ 772.945691][ T8479] loop2: p93 size 1073741824 extends beyond EOD, truncated [ 772.954715][ T8479] loop2: p94 size 32768 extends beyond EOD, truncated [ 772.963044][ T8479] loop2: p95 start 1 is beyond EOD, truncated [ 772.969374][ T8479] loop2: p96 size 1073741824 extends beyond EOD, truncated [ 772.977263][ T8479] loop2: p97 size 32768 extends beyond EOD, truncated [ 772.984985][ T8479] loop2: p98 start 1 is beyond EOD, truncated [ 772.993319][ T8479] loop2: p99 size 1073741824 extends beyond EOD, truncated [ 773.002929][ T8479] loop2: p100 size 32768 extends beyond EOD, truncated [ 773.010942][ T8479] loop2: p101 start 1 is beyond EOD, truncated [ 773.017154][ T8479] loop2: p102 size 1073741824 extends beyond EOD, truncated [ 773.025856][ T8479] loop2: p103 size 32768 extends beyond EOD, truncated [ 773.033697][ T8479] loop2: p104 start 1 is beyond EOD, truncated [ 773.040290][ T8479] loop2: p105 size 1073741824 extends beyond EOD, truncated [ 773.049193][ T8479] loop2: p106 size 32768 extends beyond EOD, truncated [ 773.056689][ T8479] loop2: p107 start 1 is beyond EOD, truncated [ 773.063131][ T8479] loop2: p108 size 1073741824 extends beyond EOD, truncated [ 773.071896][ T8479] loop2: p109 size 32768 extends beyond EOD, truncated [ 773.081734][ T8479] loop2: p110 start 1 is beyond EOD, truncated [ 773.088561][ T8479] loop2: p111 size 1073741824 extends beyond EOD, truncated [ 773.097290][ T8479] loop2: p112 size 32768 extends beyond EOD, truncated [ 773.111131][ T8479] loop2: p113 start 1 is beyond EOD, truncated [ 773.117304][ T8479] loop2: p114 size 1073741824 extends beyond EOD, truncated [ 773.126000][ T8479] loop2: p115 size 32768 extends beyond EOD, truncated [ 773.134815][ T8479] loop2: p116 start 1 is beyond EOD, truncated [ 773.141134][ T8479] loop2: p117 size 1073741824 extends beyond EOD, truncated [ 773.149974][ T8479] loop2: p118 size 32768 extends beyond EOD, truncated [ 773.157532][ T8479] loop2: p119 start 1 is beyond EOD, truncated [ 773.165234][ T8479] loop2: p120 size 1073741824 extends beyond EOD, truncated [ 773.173906][ T8479] loop2: p121 size 32768 extends beyond EOD, truncated [ 773.181602][ T8479] loop2: p122 start 1 is beyond EOD, truncated [ 773.187847][ T8479] loop2: p123 size 1073741824 extends beyond EOD, truncated [ 773.199365][ T8479] loop2: p124 size 32768 extends beyond EOD, truncated [ 773.206864][ T8479] loop2: p125 start 1 is beyond EOD, truncated [ 773.215933][ T8479] loop2: p126 size 1073741824 extends beyond EOD, truncated [ 773.224286][ T8479] loop2: p127 size 32768 extends beyond EOD, truncated [ 773.232044][ T8479] loop2: p128 start 1 is beyond EOD, truncated [ 773.238621][ T8479] loop2: p129 size 1073741824 extends beyond EOD, truncated [ 773.246615][ T8479] loop2: p130 size 32768 extends beyond EOD, truncated [ 773.255548][ T8479] loop2: p131 start 1 is beyond EOD, truncated [ 773.261922][ T8479] loop2: p132 size 1073741824 extends beyond EOD, truncated [ 773.270276][ T8479] loop2: p133 size 32768 extends beyond EOD, truncated [ 773.277750][ T8479] loop2: p134 start 1 is beyond EOD, truncated [ 773.284267][ T8479] loop2: p135 size 1073741824 extends beyond EOD, truncated [ 773.292385][ T8479] loop2: p136 size 32768 extends beyond EOD, truncated [ 773.301080][ T8479] loop2: p137 start 1 is beyond EOD, truncated [ 773.307281][ T8479] loop2: p138 size 1073741824 extends beyond EOD, truncated [ 773.315570][ T8479] loop2: p139 size 32768 extends beyond EOD, truncated [ 773.325710][ T8479] loop2: p140 start 1 is beyond EOD, truncated [ 773.332019][ T8479] loop2: p141 size 1073741824 extends beyond EOD, truncated [ 773.340273][ T8479] loop2: p142 size 32768 extends beyond EOD, truncated [ 773.347780][ T8479] loop2: p143 start 1 is beyond EOD, truncated [ 773.354042][ T8479] loop2: p144 size 1073741824 extends beyond EOD, truncated [ 773.362575][ T8479] loop2: p145 size 32768 extends beyond EOD, truncated [ 773.370470][ T8479] loop2: p146 start 1 is beyond EOD, truncated [ 773.376642][ T8479] loop2: p147 size 1073741824 extends beyond EOD, truncated [ 773.384858][ T8479] loop2: p148 size 32768 extends beyond EOD, truncated [ 773.392892][ T8479] loop2: p149 start 1 is beyond EOD, truncated [ 773.399968][ T8479] loop2: p150 size 1073741824 extends beyond EOD, truncated [ 773.409126][ T8479] loop2: p151 size 32768 extends beyond EOD, truncated [ 773.416670][ T8479] loop2: p152 start 1 is beyond EOD, truncated [ 773.424399][ T8479] loop2: p153 size 1073741824 extends beyond EOD, truncated [ 773.433570][ T8479] loop2: p154 size 32768 extends beyond EOD, truncated [ 773.442009][ T8479] loop2: p155 start 1 is beyond EOD, truncated [ 773.448526][ T8479] loop2: p156 size 1073741824 extends beyond EOD, truncated [ 773.456532][ T8479] loop2: p157 size 32768 extends beyond EOD, truncated [ 773.464783][ T8479] loop2: p158 start 1 is beyond EOD, truncated [ 773.471541][ T8479] loop2: p159 size 1073741824 extends beyond EOD, truncated [ 773.481251][ T8479] loop2: p160 size 32768 extends beyond EOD, truncated [ 773.489545][ T8479] loop2: p161 start 1 is beyond EOD, truncated [ 773.495823][ T8479] loop2: p162 size 1073741824 extends beyond EOD, truncated [ 773.505882][ T8479] loop2: p163 size 32768 extends beyond EOD, truncated [ 773.513785][ T8479] loop2: p164 start 1 is beyond EOD, truncated [ 773.520334][ T8479] loop2: p165 size 1073741824 extends beyond EOD, truncated [ 773.532619][ T8479] loop2: p166 size 32768 extends beyond EOD, truncated [ 773.541210][ T8479] loop2: p167 start 1 is beyond EOD, truncated [ 773.547546][ T8479] loop2: p168 size 1073741824 extends beyond EOD, truncated [ 773.556350][ T8479] loop2: p169 size 32768 extends beyond EOD, truncated [ 773.564378][ T8479] loop2: p170 start 1 is beyond EOD, truncated [ 773.574742][ T8479] loop2: p171 size 1073741824 extends beyond EOD, truncated [ 773.583227][ T8479] loop2: p172 size 32768 extends beyond EOD, truncated [ 773.591337][ T8479] loop2: p173 start 1 is beyond EOD, truncated [ 773.597725][ T8479] loop2: p174 size 1073741824 extends beyond EOD, truncated [ 773.607516][ T8479] loop2: p175 size 32768 extends beyond EOD, truncated [ 773.615695][ T8479] loop2: p176 start 1 is beyond EOD, truncated [ 773.622234][ T8479] loop2: p177 size 1073741824 extends beyond EOD, truncated [ 773.630654][ T8479] loop2: p178 size 32768 extends beyond EOD, truncated [ 773.638347][ T8479] loop2: p179 start 1 is beyond EOD, truncated [ 773.644536][ T8479] loop2: p180 size 1073741824 extends beyond EOD, truncated [ 773.654459][ T8479] loop2: p181 size 32768 extends beyond EOD, truncated [ 773.662312][ T8479] loop2: p182 start 1 is beyond EOD, truncated [ 773.668686][ T8479] loop2: p183 size 1073741824 extends beyond EOD, truncated [ 773.676603][ T8479] loop2: p184 size 32768 extends beyond EOD, truncated [ 773.684387][ T8479] loop2: p185 start 1 is beyond EOD, truncated [ 773.690635][ T8479] loop2: p186 size 1073741824 extends beyond EOD, truncated [ 773.698885][ T8479] loop2: p187 size 32768 extends beyond EOD, truncated [ 773.706374][ T8479] loop2: p188 start 1 is beyond EOD, truncated [ 773.713607][ T8479] loop2: p189 size 1073741824 extends beyond EOD, truncated [ 773.722017][ T8479] loop2: p190 size 32768 extends beyond EOD, truncated [ 773.729572][ T8479] loop2: p191 start 1 is beyond EOD, truncated [ 773.735729][ T8479] loop2: p192 size 1073741824 extends beyond EOD, truncated [ 773.744245][ T8479] loop2: p193 size 32768 extends beyond EOD, truncated [ 773.752032][ T8479] loop2: p194 start 1 is beyond EOD, truncated [ 773.759705][ T8479] loop2: p195 size 1073741824 extends beyond EOD, truncated [ 773.768786][ T8479] loop2: p196 size 32768 extends beyond EOD, truncated [ 773.776200][ T8479] loop2: p197 start 1 is beyond EOD, truncated [ 773.782459][ T8479] loop2: p198 size 1073741824 extends beyond EOD, truncated [ 773.790507][ T8479] loop2: p199 size 32768 extends beyond EOD, truncated [ 773.798106][ T8479] loop2: p200 start 1 is beyond EOD, truncated [ 773.804672][ T8479] loop2: p201 size 1073741824 extends beyond EOD, truncated [ 773.814424][ T8479] loop2: p202 size 32768 extends beyond EOD, truncated [ 773.822280][ T8479] loop2: p203 start 1 is beyond EOD, truncated [ 773.828526][ T8479] loop2: p204 size 1073741824 extends beyond EOD, truncated [ 773.836420][ T8479] loop2: p205 size 32768 extends beyond EOD, truncated [ 773.844497][ T8479] loop2: p206 start 1 is beyond EOD, truncated [ 773.851159][ T8479] loop2: p207 size 1073741824 extends beyond EOD, truncated [ 773.859886][ T8479] loop2: p208 size 32768 extends beyond EOD, truncated [ 773.867368][ T8479] loop2: p209 start 1 is beyond EOD, truncated [ 773.874616][ T8479] loop2: p210 size 1073741824 extends beyond EOD, truncated [ 773.885034][ T8479] loop2: p211 size 32768 extends beyond EOD, truncated [ 773.892755][ T8479] loop2: p212 start 1 is beyond EOD, truncated [ 773.899010][ T8479] loop2: p213 size 1073741824 extends beyond EOD, truncated [ 773.907142][ T8479] loop2: p214 size 32768 extends beyond EOD, truncated [ 773.916512][ T8479] loop2: p215 start 1 is beyond EOD, truncated [ 773.923069][ T8479] loop2: p216 size 1073741824 extends beyond EOD, truncated [ 773.931957][ T8479] loop2: p217 size 32768 extends beyond EOD, truncated [ 773.940382][ T8479] loop2: p218 start 1 is beyond EOD, truncated [ 773.946567][ T8479] loop2: p219 size 1073741824 extends beyond EOD, truncated [ 773.954970][ T8479] loop2: p220 size 32768 extends beyond EOD, truncated [ 773.962612][ T8479] loop2: p221 start 1 is beyond EOD, truncated [ 773.969168][ T8479] loop2: p222 size 1073741824 extends beyond EOD, truncated [ 773.977102][ T8479] loop2: p223 size 32768 extends beyond EOD, truncated [ 773.985405][ T8479] loop2: p224 start 1 is beyond EOD, truncated [ 773.997455][ T8479] loop2: p225 size 1073741824 extends beyond EOD, truncated [ 774.006202][ T8479] loop2: p226 size 32768 extends beyond EOD, truncated [ 774.017797][ T8479] loop2: p227 start 1 is beyond EOD, truncated [ 774.024540][ T8479] loop2: p228 size 1073741824 extends beyond EOD, truncated [ 774.033403][ T8479] loop2: p229 size 32768 extends beyond EOD, truncated [ 774.042171][ T8479] loop2: p230 start 1 is beyond EOD, truncated [ 774.049123][ T8479] loop2: p231 size 1073741824 extends beyond EOD, truncated [ 774.057510][ T8479] loop2: p232 size 32768 extends beyond EOD, truncated [ 774.065680][ T8479] loop2: p233 start 1 is beyond EOD, truncated [ 774.072588][ T8479] loop2: p234 size 1073741824 extends beyond EOD, truncated [ 774.081338][ T8479] loop2: p235 size 32768 extends beyond EOD, truncated [ 774.089833][ T8479] loop2: p236 start 1 is beyond EOD, truncated [ 774.096050][ T8479] loop2: p237 size 1073741824 extends beyond EOD, truncated [ 774.105165][ T8479] loop2: p238 size 32768 extends beyond EOD, truncated [ 774.113099][ T8479] loop2: p239 start 1 is beyond EOD, truncated [ 774.121066][ T8479] loop2: p240 size 1073741824 extends beyond EOD, truncated [ 774.130147][ T8479] loop2: p241 size 32768 extends beyond EOD, truncated [ 774.137764][ T8479] loop2: p242 start 1 is beyond EOD, truncated [ 774.144211][ T8479] loop2: p243 size 1073741824 extends beyond EOD, truncated [ 774.153409][ T8479] loop2: p244 size 32768 extends beyond EOD, truncated [ 774.161138][ T8479] loop2: p245 start 1 is beyond EOD, truncated [ 774.167302][ T8479] loop2: p246 size 1073741824 extends beyond EOD, truncated [ 774.175632][ T8479] loop2: p247 size 32768 extends beyond EOD, truncated [ 774.184017][ T8479] loop2: p248 start 1 is beyond EOD, truncated [ 774.191151][ T8479] loop2: p249 size 1073741824 extends beyond EOD, truncated [ 774.209719][ T8479] loop2: p250 size 32768 extends beyond EOD, truncated [ 774.217195][ T8479] loop2: p251 start 1 is beyond EOD, truncated [ 774.224362][ T8479] loop2: p252 size 1073741824 extends beyond EOD, truncated [ 774.233095][ T8479] loop2: p253 size 32768 extends beyond EOD, truncated [ 774.241220][ T8479] loop2: p254 start 1 is beyond EOD, truncated [ 774.247564][ T8479] loop2: p255 size 1073741824 extends beyond EOD, truncated 12:13:57 executing program 2: syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02014200000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 12:13:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) 12:13:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000a000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) [ 774.282351][T22447] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) 12:13:57 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000007680), &(0x7f00000076c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000009a00)={[{@nr_blocks={'nr_blocks', 0x3d, [0x34]}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 12:13:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d000700000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:13:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) 12:13:57 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000e, 0x13, r0, 0x0) [ 774.356127][T22472] loop5: detected capacity change from 0 to 4096 [ 774.362709][T22476] tmpfs: Unknown parameter 'rootcontext' [ 774.367267][T22474] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:13:57 executing program 3: socketpair(0x1f, 0x0, 0x0, &(0x7f0000004940)) 12:13:57 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f0000009c40), &(0x7f0000009c80)={0x8}, 0x0, &(0x7f0000009d00)={0x77359400}, 0x0) [ 774.412787][T22474] device bond243 entered promiscuous mode [ 774.430356][T22472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 774.450975][T22481] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 12:13:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000a000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) 12:13:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) [ 774.555912][ T3790] EXT4-fs (loop5): unmounting filesystem. [ 774.587070][T22481] device veth727 entered promiscuous mode [ 774.615775][T22481] bond243: (slave veth727): Enslaving as an active interface with an up link [ 774.664645][T22474] bond243 (unregistering): (slave veth727): Releasing backup interface [ 774.708253][T22493] loop5: detected capacity change from 0 to 4096 [ 774.723168][T22474] bond243 (unregistering): Released all slaves [ 774.751332][T22493] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 774.859747][ T3790] EXT4-fs (loop5): unmounting filesystem. [ 775.020480][T22496] loop2: detected capacity change from 0 to 1 [ 775.070021][T22496] ldm_validate_privheads(): Disk read failed. [ 775.079000][T22496] loop2: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 775.079112][T22496] loop2: partition table partially beyond EOD, truncated [ 775.175111][T22496] loop2: p1 start 1 is beyond EOD, truncated [ 775.181168][T22496] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 775.191011][T22496] loop2: p3 size 2 extends beyond EOD, truncated [ 775.199963][T22496] loop2: p4 size 32768 extends beyond EOD, truncated [ 775.207506][T22496] loop2: p5 start 1 is beyond EOD, truncated [ 775.215870][T22496] loop2: p6 size 1073741824 extends beyond EOD, truncated [ 775.224993][T22496] loop2: p7 size 32768 extends beyond EOD, truncated [ 775.232750][T22496] loop2: p8 start 1 is beyond EOD, truncated [ 775.238978][T22496] loop2: p9 size 1073741824 extends beyond EOD, truncated [ 775.247737][T22496] loop2: p10 size 32768 extends beyond EOD, truncated [ 775.256307][T22496] loop2: p11 start 1 is beyond EOD, truncated [ 775.262996][T22496] loop2: p12 size 1073741824 extends beyond EOD, truncated [ 775.271877][T22496] loop2: p13 size 32768 extends beyond EOD, truncated [ 775.279618][T22496] loop2: p14 start 1 is beyond EOD, truncated [ 775.285799][T22496] loop2: p15 size 1073741824 extends beyond EOD, truncated [ 775.294066][T22496] loop2: p16 size 32768 extends beyond EOD, truncated [ 775.303776][T22496] loop2: p17 start 1 is beyond EOD, truncated [ 775.310109][T22496] loop2: p18 size 1073741824 extends beyond EOD, truncated [ 775.318832][T22496] loop2: p19 size 32768 extends beyond EOD, truncated [ 775.327131][T22496] loop2: p20 start 1 is beyond EOD, truncated [ 775.333782][T22496] loop2: p21 size 1073741824 extends beyond EOD, truncated [ 775.342338][T22496] loop2: p22 size 32768 extends beyond EOD, truncated [ 775.351169][T22496] loop2: p23 start 1 is beyond EOD, truncated [ 775.357344][T22496] loop2: p24 size 1073741824 extends beyond EOD, truncated [ 775.366515][T22496] loop2: p25 size 32768 extends beyond EOD, truncated [ 775.374851][T22496] loop2: p26 start 1 is beyond EOD, truncated [ 775.381315][T22496] loop2: p27 size 1073741824 extends beyond EOD, truncated [ 775.390757][T22496] loop2: p28 size 32768 extends beyond EOD, truncated [ 775.399519][T22496] loop2: p29 start 1 is beyond EOD, truncated [ 775.405733][T22496] loop2: p30 size 1073741824 extends beyond EOD, truncated [ 775.414146][T22496] loop2: p31 size 32768 extends beyond EOD, truncated [ 775.423135][T22496] loop2: p32 start 1 is beyond EOD, truncated [ 775.430781][T22496] loop2: p33 size 1073741824 extends beyond EOD, truncated [ 775.440160][T22496] loop2: p34 size 32768 extends beyond EOD, truncated [ 775.447784][T22496] loop2: p35 start 1 is beyond EOD, truncated [ 775.455027][T22496] loop2: p36 size 1073741824 extends beyond EOD, truncated [ 775.464048][T22496] loop2: p37 size 32768 extends beyond EOD, truncated [ 775.472939][T22496] loop2: p38 start 1 is beyond EOD, truncated [ 775.479701][T22496] loop2: p39 size 1073741824 extends beyond EOD, truncated [ 775.487850][T22496] loop2: p40 size 32768 extends beyond EOD, truncated [ 775.495780][T22496] loop2: p41 start 1 is beyond EOD, truncated [ 775.502737][T22496] loop2: p42 size 1073741824 extends beyond EOD, truncated [ 775.511481][T22496] loop2: p43 size 32768 extends beyond EOD, truncated [ 775.519189][T22496] loop2: p44 start 1 is beyond EOD, truncated [ 775.525355][T22496] loop2: p45 size 1073741824 extends beyond EOD, truncated [ 775.540016][T22496] loop2: p46 size 32768 extends beyond EOD, truncated [ 775.547608][T22496] loop2: p47 start 1 is beyond EOD, truncated [ 775.555207][T22496] loop2: p48 size 1073741824 extends beyond EOD, truncated [ 775.563947][T22496] loop2: p49 size 32768 extends beyond EOD, truncated [ 775.572085][T22496] loop2: p50 start 1 is beyond EOD, truncated [ 775.578480][T22496] loop2: p51 size 1073741824 extends beyond EOD, truncated [ 775.586526][T22496] loop2: p52 size 32768 extends beyond EOD, truncated [ 775.594435][T22496] loop2: p53 start 1 is beyond EOD, truncated [ 775.600632][T22496] loop2: p54 size 1073741824 extends beyond EOD, truncated [ 775.609001][T22496] loop2: p55 size 32768 extends beyond EOD, truncated [ 775.616659][T22496] loop2: p56 start 1 is beyond EOD, truncated [ 775.623270][T22496] loop2: p57 size 1073741824 extends beyond EOD, truncated [ 775.631335][T22496] loop2: p58 size 32768 extends beyond EOD, truncated [ 775.639889][T22496] loop2: p59 start 1 is beyond EOD, truncated [ 775.646006][T22496] loop2: p60 size 1073741824 extends beyond EOD, truncated [ 775.657487][T22496] loop2: p61 size 32768 extends beyond EOD, truncated [ 775.665244][T22496] loop2: p62 start 1 is beyond EOD, truncated [ 775.671416][T22496] loop2: p63 size 1073741824 extends beyond EOD, truncated [ 775.679487][T22496] loop2: p64 size 32768 extends beyond EOD, truncated [ 775.686890][T22496] loop2: p65 start 1 is beyond EOD, truncated [ 775.693034][T22496] loop2: p66 size 1073741824 extends beyond EOD, truncated [ 775.701377][T22496] loop2: p67 size 32768 extends beyond EOD, truncated [ 775.709480][T22496] loop2: p68 start 1 is beyond EOD, truncated [ 775.715576][T22496] loop2: p69 size 1073741824 extends beyond EOD, truncated [ 775.723584][T22496] loop2: p70 size 32768 extends beyond EOD, truncated [ 775.731346][T22496] loop2: p71 start 1 is beyond EOD, truncated [ 775.737477][T22496] loop2: p72 size 1073741824 extends beyond EOD, truncated [ 775.745716][T22496] loop2: p73 size 32768 extends beyond EOD, truncated [ 775.753203][T22496] loop2: p74 start 1 is beyond EOD, truncated [ 775.762314][T22496] loop2: p75 size 1073741824 extends beyond EOD, truncated [ 775.770546][T22496] loop2: p76 size 32768 extends beyond EOD, truncated [ 775.777882][T22496] loop2: p77 start 1 is beyond EOD, truncated [ 775.784037][T22496] loop2: p78 size 1073741824 extends beyond EOD, truncated [ 775.792289][T22496] loop2: p79 size 32768 extends beyond EOD, truncated [ 775.800541][T22496] loop2: p80 start 1 is beyond EOD, truncated [ 775.806669][T22496] loop2: p81 size 1073741824 extends beyond EOD, truncated [ 775.815382][T22496] loop2: p82 size 32768 extends beyond EOD, truncated [ 775.823040][T22496] loop2: p83 start 1 is beyond EOD, truncated [ 775.829492][T22496] loop2: p84 size 1073741824 extends beyond EOD, truncated [ 775.837610][T22496] loop2: p85 size 32768 extends beyond EOD, truncated [ 775.845242][T22496] loop2: p86 start 1 is beyond EOD, truncated [ 775.851432][T22496] loop2: p87 size 1073741824 extends beyond EOD, truncated [ 775.860614][T22496] loop2: p88 size 32768 extends beyond EOD, truncated [ 775.871016][T22496] loop2: p89 start 1 is beyond EOD, truncated [ 775.877154][T22496] loop2: p90 size 1073741824 extends beyond EOD, truncated [ 775.887589][T22496] loop2: p91 size 32768 extends beyond EOD, truncated [ 775.895744][T22496] loop2: p92 start 1 is beyond EOD, truncated [ 775.901922][T22496] loop2: p93 size 1073741824 extends beyond EOD, truncated [ 775.910485][T22496] loop2: p94 size 32768 extends beyond EOD, truncated [ 775.918282][T22496] loop2: p95 start 1 is beyond EOD, truncated [ 775.924447][T22496] loop2: p96 size 1073741824 extends beyond EOD, truncated [ 775.932564][T22496] loop2: p97 size 32768 extends beyond EOD, truncated [ 775.940496][T22496] loop2: p98 start 1 is beyond EOD, truncated [ 775.946698][T22496] loop2: p99 size 1073741824 extends beyond EOD, truncated [ 775.954936][T22496] loop2: p100 size 32768 extends beyond EOD, truncated [ 775.963348][T22496] loop2: p101 start 1 is beyond EOD, truncated [ 775.969729][T22496] loop2: p102 size 1073741824 extends beyond EOD, truncated [ 775.981829][T22496] loop2: p103 size 32768 extends beyond EOD, truncated [ 775.989597][T22496] loop2: p104 start 1 is beyond EOD, truncated [ 775.995859][T22496] loop2: p105 size 1073741824 extends beyond EOD, truncated [ 776.003972][T22496] loop2: p106 size 32768 extends beyond EOD, truncated [ 776.012232][T22496] loop2: p107 start 1 is beyond EOD, truncated [ 776.018573][T22496] loop2: p108 size 1073741824 extends beyond EOD, truncated [ 776.026575][T22496] loop2: p109 size 32768 extends beyond EOD, truncated [ 776.034580][T22496] loop2: p110 start 1 is beyond EOD, truncated [ 776.041343][T22496] loop2: p111 size 1073741824 extends beyond EOD, truncated [ 776.049848][T22496] loop2: p112 size 32768 extends beyond EOD, truncated [ 776.057502][T22496] loop2: p113 start 1 is beyond EOD, truncated [ 776.064994][T22496] loop2: p114 size 1073741824 extends beyond EOD, truncated [ 776.073891][T22496] loop2: p115 size 32768 extends beyond EOD, truncated [ 776.081699][T22496] loop2: p116 start 1 is beyond EOD, truncated [ 776.088004][T22496] loop2: p117 size 1073741824 extends beyond EOD, truncated [ 776.096054][T22496] loop2: p118 size 32768 extends beyond EOD, truncated [ 776.105742][T22496] loop2: p119 start 1 is beyond EOD, truncated [ 776.114471][T22496] loop2: p120 size 1073741824 extends beyond EOD, truncated [ 776.124989][T22496] loop2: p121 size 32768 extends beyond EOD, truncated [ 776.135304][T22496] loop2: p122 start 1 is beyond EOD, truncated [ 776.143969][T22496] loop2: p123 size 1073741824 extends beyond EOD, truncated [ 776.154545][T22496] loop2: p124 size 32768 extends beyond EOD, truncated [ 776.164728][T22496] loop2: p125 start 1 is beyond EOD, truncated [ 776.172076][T22496] loop2: p126 size 1073741824 extends beyond EOD, truncated [ 776.180513][T22496] loop2: p127 size 32768 extends beyond EOD, truncated [ 776.188483][T22496] loop2: p128 start 1 is beyond EOD, truncated [ 776.194667][T22496] loop2: p129 size 1073741824 extends beyond EOD, truncated [ 776.205483][T22496] loop2: p130 size 32768 extends beyond EOD, truncated [ 776.213244][T22496] loop2: p131 start 1 is beyond EOD, truncated [ 776.219786][T22496] loop2: p132 size 1073741824 extends beyond EOD, truncated [ 776.227850][T22496] loop2: p133 size 32768 extends beyond EOD, truncated [ 776.235630][T22496] loop2: p134 start 1 is beyond EOD, truncated [ 776.241954][T22496] loop2: p135 size 1073741824 extends beyond EOD, truncated [ 776.250812][T22496] loop2: p136 size 32768 extends beyond EOD, truncated [ 776.259002][T22496] loop2: p137 start 1 is beyond EOD, truncated [ 776.265282][T22496] loop2: p138 size 1073741824 extends beyond EOD, truncated [ 776.274242][T22496] loop2: p139 size 32768 extends beyond EOD, truncated [ 776.282413][T22496] loop2: p140 start 1 is beyond EOD, truncated [ 776.288771][T22496] loop2: p141 size 1073741824 extends beyond EOD, truncated [ 776.297257][T22496] loop2: p142 size 32768 extends beyond EOD, truncated [ 776.304930][T22496] loop2: p143 start 1 is beyond EOD, truncated [ 776.313463][T22496] loop2: p144 size 1073741824 extends beyond EOD, truncated [ 776.322378][T22496] loop2: p145 size 32768 extends beyond EOD, truncated [ 776.330422][T22496] loop2: p146 start 1 is beyond EOD, truncated [ 776.336624][T22496] loop2: p147 size 1073741824 extends beyond EOD, truncated [ 776.344964][T22496] loop2: p148 size 32768 extends beyond EOD, truncated [ 776.352664][T22496] loop2: p149 start 1 is beyond EOD, truncated [ 776.358926][T22496] loop2: p150 size 1073741824 extends beyond EOD, truncated [ 776.366956][T22496] loop2: p151 size 32768 extends beyond EOD, truncated [ 776.375553][T22496] loop2: p152 start 1 is beyond EOD, truncated [ 776.381798][T22496] loop2: p153 size 1073741824 extends beyond EOD, truncated [ 776.390672][T22496] loop2: p154 size 32768 extends beyond EOD, truncated [ 776.398636][T22496] loop2: p155 start 1 is beyond EOD, truncated [ 776.404813][T22496] loop2: p156 size 1073741824 extends beyond EOD, truncated [ 776.412963][T22496] loop2: p157 size 32768 extends beyond EOD, truncated [ 776.423488][T22496] loop2: p158 start 1 is beyond EOD, truncated [ 776.430068][T22496] loop2: p159 size 1073741824 extends beyond EOD, truncated [ 776.438491][T22496] loop2: p160 size 32768 extends beyond EOD, truncated [ 776.446724][T22496] loop2: p161 start 1 is beyond EOD, truncated [ 776.453117][T22496] loop2: p162 size 1073741824 extends beyond EOD, truncated [ 776.461504][T22496] loop2: p163 size 32768 extends beyond EOD, truncated [ 776.469396][T22496] loop2: p164 start 1 is beyond EOD, truncated [ 776.476209][T22496] loop2: p165 size 1073741824 extends beyond EOD, truncated [ 776.484320][T22496] loop2: p166 size 32768 extends beyond EOD, truncated [ 776.492241][T22496] loop2: p167 start 1 is beyond EOD, truncated [ 776.498779][T22496] loop2: p168 size 1073741824 extends beyond EOD, truncated [ 776.507086][T22496] loop2: p169 size 32768 extends beyond EOD, truncated [ 776.514747][T22496] loop2: p170 start 1 is beyond EOD, truncated [ 776.521332][T22496] loop2: p171 size 1073741824 extends beyond EOD, truncated [ 776.532706][T22496] loop2: p172 size 32768 extends beyond EOD, truncated [ 776.540707][T22496] loop2: p173 start 1 is beyond EOD, truncated [ 776.546934][T22496] loop2: p174 size 1073741824 extends beyond EOD, truncated [ 776.555348][T22496] loop2: p175 size 32768 extends beyond EOD, truncated [ 776.563300][T22496] loop2: p176 start 1 is beyond EOD, truncated [ 776.569681][T22496] loop2: p177 size 1073741824 extends beyond EOD, truncated [ 776.579024][T22496] loop2: p178 size 32768 extends beyond EOD, truncated [ 776.586588][T22496] loop2: p179 start 1 is beyond EOD, truncated [ 776.592886][T22496] loop2: p180 size 1073741824 extends beyond EOD, truncated [ 776.601350][T22496] loop2: p181 size 32768 extends beyond EOD, truncated [ 776.609915][T22496] loop2: p182 start 1 is beyond EOD, truncated [ 776.616136][T22496] loop2: p183 size 1073741824 extends beyond EOD, truncated [ 776.624265][T22496] loop2: p184 size 32768 extends beyond EOD, truncated [ 776.632003][T22496] loop2: p185 start 1 is beyond EOD, truncated [ 776.641177][T22496] loop2: p186 size 1073741824 extends beyond EOD, truncated [ 776.649461][T22496] loop2: p187 size 32768 extends beyond EOD, truncated [ 776.656939][T22496] loop2: p188 start 1 is beyond EOD, truncated [ 776.663197][T22496] loop2: p189 size 1073741824 extends beyond EOD, truncated [ 776.671938][T22496] loop2: p190 size 32768 extends beyond EOD, truncated [ 776.681032][T22496] loop2: p191 start 1 is beyond EOD, truncated [ 776.687202][T22496] loop2: p192 size 1073741824 extends beyond EOD, truncated [ 776.695475][T22496] loop2: p193 size 32768 extends beyond EOD, truncated [ 776.703805][T22496] loop2: p194 start 1 is beyond EOD, truncated [ 776.710161][T22496] loop2: p195 size 1073741824 extends beyond EOD, truncated [ 776.718582][T22496] loop2: p196 size 32768 extends beyond EOD, truncated [ 776.726523][T22496] loop2: p197 start 1 is beyond EOD, truncated [ 776.733140][T22496] loop2: p198 size 1073741824 extends beyond EOD, truncated [ 776.741664][T22496] loop2: p199 size 32768 extends beyond EOD, truncated [ 776.750945][T22496] loop2: p200 start 1 is beyond EOD, truncated [ 776.757130][T22496] loop2: p201 size 1073741824 extends beyond EOD, truncated [ 776.766159][T22496] loop2: p202 size 32768 extends beyond EOD, truncated [ 776.773944][T22496] loop2: p203 start 1 is beyond EOD, truncated [ 776.780761][T22496] loop2: p204 size 1073741824 extends beyond EOD, truncated [ 776.791819][T22496] loop2: p205 size 32768 extends beyond EOD, truncated [ 776.799613][T22496] loop2: p206 start 1 is beyond EOD, truncated [ 776.805847][T22496] loop2: p207 size 1073741824 extends beyond EOD, truncated [ 776.817422][T22496] loop2: p208 size 32768 extends beyond EOD, truncated [ 776.825443][T22496] loop2: p209 start 1 is beyond EOD, truncated [ 776.831789][T22496] loop2: p210 size 1073741824 extends beyond EOD, truncated [ 776.840054][T22496] loop2: p211 size 32768 extends beyond EOD, truncated [ 776.848358][T22496] loop2: p212 start 1 is beyond EOD, truncated [ 776.854547][T22496] loop2: p213 size 1073741824 extends beyond EOD, truncated [ 776.866506][T22496] loop2: p214 size 32768 extends beyond EOD, truncated [ 776.874278][T22496] loop2: p215 start 1 is beyond EOD, truncated [ 776.880842][T22496] loop2: p216 size 1073741824 extends beyond EOD, truncated [ 776.890036][T22496] loop2: p217 size 32768 extends beyond EOD, truncated [ 776.898142][T22496] loop2: p218 start 1 is beyond EOD, truncated [ 776.904586][T22496] loop2: p219 size 1073741824 extends beyond EOD, truncated [ 776.913326][T22496] loop2: p220 size 32768 extends beyond EOD, truncated [ 776.921264][T22496] loop2: p221 start 1 is beyond EOD, truncated [ 776.927649][T22496] loop2: p222 size 1073741824 extends beyond EOD, truncated [ 776.936051][T22496] loop2: p223 size 32768 extends beyond EOD, truncated [ 776.944051][T22496] loop2: p224 start 1 is beyond EOD, truncated [ 776.950349][T22496] loop2: p225 size 1073741824 extends beyond EOD, truncated [ 776.958665][T22496] loop2: p226 size 32768 extends beyond EOD, truncated [ 776.966242][T22496] loop2: p227 start 1 is beyond EOD, truncated [ 776.974399][T22496] loop2: p228 size 1073741824 extends beyond EOD, truncated [ 776.983388][T22496] loop2: p229 size 32768 extends beyond EOD, truncated [ 776.991973][T22496] loop2: p230 start 1 is beyond EOD, truncated [ 776.998682][T22496] loop2: p231 size 1073741824 extends beyond EOD, truncated [ 777.006743][T22496] loop2: p232 size 32768 extends beyond EOD, truncated [ 777.014931][T22496] loop2: p233 start 1 is beyond EOD, truncated [ 777.021247][T22496] loop2: p234 size 1073741824 extends beyond EOD, truncated [ 777.029799][T22496] loop2: p235 size 32768 extends beyond EOD, truncated [ 777.037318][T22496] loop2: p236 start 1 is beyond EOD, truncated [ 777.043586][T22496] loop2: p237 size 1073741824 extends beyond EOD, truncated [ 777.051664][T22496] loop2: p238 size 32768 extends beyond EOD, truncated [ 777.060919][T22496] loop2: p239 start 1 is beyond EOD, truncated [ 777.067107][T22496] loop2: p240 size 1073741824 extends beyond EOD, truncated [ 777.075433][T22496] loop2: p241 size 32768 extends beyond EOD, truncated [ 777.086526][T22496] loop2: p242 start 1 is beyond EOD, truncated [ 777.093957][T22496] loop2: p243 size 1073741824 extends beyond EOD, truncated [ 777.102387][T22496] loop2: p244 size 32768 extends beyond EOD, truncated [ 777.110349][T22496] loop2: p245 start 1 is beyond EOD, truncated [ 777.116545][T22496] loop2: p246 size 1073741824 extends beyond EOD, truncated [ 777.129809][T22496] loop2: p247 size 32768 extends beyond EOD, truncated [ 777.137446][T22496] loop2: p248 start 1 is beyond EOD, truncated [ 777.143833][T22496] loop2: p249 size 1073741824 extends beyond EOD, truncated [ 777.152806][T22496] loop2: p250 size 32768 extends beyond EOD, truncated [ 777.160666][T22496] loop2: p251 start 1 is beyond EOD, truncated [ 777.166891][T22496] loop2: p252 size 1073741824 extends beyond EOD, truncated [ 777.175683][T22496] loop2: p253 size 32768 extends beyond EOD, truncated [ 777.183813][T22496] loop2: p254 start 1 is beyond EOD, truncated [ 777.193374][T22496] loop2: p255 size 1073741824 extends beyond EOD, truncated 12:14:00 executing program 2: syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02014200000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 12:14:00 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000200)) 12:14:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000500)=@deltfilter={0x2318, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0x9, 0xfff1}, {0x10, 0x7}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x22e8, 0x2, [@TCA_RSVP_POLICE={0x414, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x59c8, 0x7, 0x9, 0x8, 0x9, 0x3, 0x80000001, 0x8, 0x6, 0x1, 0x3ff, 0x800, 0x0, 0x14cc, 0x7, 0x4, 0xeb6, 0x0, 0x4, 0x0, 0x3, 0x6, 0x74d49877, 0x0, 0x0, 0x2, 0x3, 0x0, 0xb6, 0x7, 0x200, 0x3, 0x4, 0x7fffffff, 0x8d55, 0xf0a00000, 0x1, 0x80000000, 0x6, 0x3, 0x4, 0xfffffa75, 0x1, 0x7ff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x3f80, 0x74, 0x2, 0x5, 0x80000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x4000000, 0x0, 0x3a4c, 0x7, 0x71c, 0xfff, 0x3, 0x0, 0x1fa6, 0x6, 0x8, 0x5, 0xfffffeff, 0x2ad0, 0x0, 0x8d7, 0x1, 0x94, 0x97, 0x6, 0x0, 0x5, 0x2, 0x2, 0xe2, 0x3, 0x8, 0x9, 0x7, 0x1, 0x20, 0x9, 0x0, 0x6, 0x4, 0x9, 0xfffffffc, 0x3f, 0xfffffffb, 0xffffffff, 0x9, 0x5, 0xb976, 0x9, 0x4, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x100, 0x80, 0x94, 0x6, 0x10001, 0x1f, 0x9, 0x1, 0x6, 0x9, 0x4d, 0xe4, 0x4, 0x1, 0x3, 0xbf, 0x40, 0x3, 0x1, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xff, 0x17db, 0x5, 0x9, 0x4, 0x0, 0x8, 0x80bb, 0x100, 0x6, 0x0, 0x80000000, 0x7ff, 0x7fffffff, 0x9b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7ff, 0x238, 0x4, 0xfcd, 0x3, 0x2, 0x80000000, 0x65, 0x2, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb882, 0x5, 0x2, 0x80, 0xfffffff7, 0x5, 0xc1, 0x7, 0x7, 0x1ff, 0x2, 0x186a, 0x8000, 0x5f, 0x400, 0x1f, 0x7f9]}]}, @TCA_RSVP_ACT={0x1ed0, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x34, 0xd, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x74, 0xd, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0xc}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4305}, @TCA_MPLS_TTL={0x5}]}, {0x27, 0x6, "4defcb142e4babe7380d5fc3a2af024bc993a8eed3ae8d55049fff1f2d584a75b0e1bc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x1dc8, 0x10, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x6a, 0x3, 0x1, 0x8, 0x4}, 0x7, 0x6, [{0x0, 0xcd10, 0x4, 0x1}, {0x3, 0x7f, 0x6, 0x1, 0xfffffffc, 0x1}, {0x0, 0x20, 0x0, 0x200, 0x0, 0x1}, {0x0, 0x0, 0xc606, 0x0, 0xf1fa, 0x1}, {0x0, 0x9, 0x4, 0x46, 0x1, 0x80000001}, {0x9, 0x0, 0x1, 0x6, 0xb28, 0x7ff}, {0x5, 0x1, 0x7, 0x20, 0x7, 0x3c22d8bd}, {0xffffffff, 0x3, 0xfe, 0xa8, 0xffff, 0xa21d}, {0x6, 0x7ff, 0x7fffffff, 0x10000, 0x7, 0x620f}]}, [{}, {0x10000, 0x4, 0x1, 0x7, 0x1}, {0x100, 0x81, 0x0, 0x9, 0x1, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x8, 0x9, 0x9}, {0x1000, 0x4e4e, 0x43d, 0x7f, 0x0, 0x9}, {0x1, 0x81, 0x0, 0x7, 0x2}, {0x0, 0x6, 0x6, 0x3, 0x0, 0x8}, {}, {}, {}, {0x0, 0x9, 0x8, 0x1000, 0x0, 0x2}, {}, {0x9, 0x7fff, 0x4}, {0x0, 0xfffff801, 0x3, 0xffffffff, 0x9, 0x8}, {0x8, 0x200, 0x722bd0ef, 0x5, 0xfffffffd, 0x400}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, {}, {0x7, 0x1, 0xfffffffa, 0x4, 0x1ff, 0xed}, {0x1, 0x6, 0x95, 0xff000000, 0xce, 0x605}, {0x2, 0x6, 0x7, 0xfffffff7, 0xea, 0x3}, {0xc6, 0x3, 0x7be1, 0x4, 0x9, 0x7ff}, {0x20, 0x3, 0x0, 0xf3f, 0xfffffff8, 0x7e378403}, {0xffffffff, 0x400, 0x6, 0x5726, 0x7, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8, 0x5, 0x2, 0x1}, {}, {0x0, 0xfffffff7}, {0x1000, 0x9, 0xffffff29, 0xff}, {0xffff534d, 0x10000000, 0x5dc4, 0x7, 0x0, 0x4}, {0x78, 0x3, 0x3c3e0dd3, 0x9, 0x3, 0x2}, {}, {0x0, 0x2}, {0x0, 0x0, 0x7dbd, 0x4}, {0x80000000, 0x7, 0x2, 0x9, 0x1000, 0x8}, {0x9, 0x80000000, 0x3f, 0x2, 0x9, 0x9}, {0x4ee, 0x3f, 0x4, 0x1, 0x7f}, {0x7, 0xff, 0x10001, 0x100, 0x7fff, 0x2}, {0x0, 0x10000, 0x8, 0x0, 0x8000, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f, 0x80000000}, {}, {0x1, 0x9c, 0x6}, {0xecb, 0x4, 0x5, 0x100, 0x3f, 0x9}, {0x66e, 0x3, 0x7f, 0x1, 0x10000, 0x88}, {0x0, 0x0, 0xffff, 0xffffffff, 0x5, 0xae}, {0x0, 0xfffffffe}, {0x7ff, 0x18000, 0x9, 0x86, 0x6, 0xd9f}, {0x1f, 0x8, 0x6418, 0x0, 0x0, 0x7fff}, {0x8, 0x7, 0x0, 0x1, 0x3, 0x1000}, {0xddb, 0x101, 0x1, 0x8, 0x3ff, 0xfffffffb}, {0xff, 0x6, 0x401, 0x7bba0fda, 0xffffffff, 0x10001}, {0x2, 0xc8, 0x10000, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x401, 0x1}, {}, {0xfffffff9, 0x2, 0x2, 0x3f}, {0x0, 0x7, 0x5, 0x81, 0x40, 0xfff}, {0x7, 0x9, 0x2, 0x3, 0x5, 0xb44}, {0x8, 0x0, 0x9, 0x672, 0xffff4f49, 0xd5}, {0x0, 0x3, 0x2, 0x8001, 0x3}, {0x101, 0x81, 0x7, 0x7, 0x1, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x64d9b678}, {}, {}, {0x7fffffff, 0x7fffffff}, {}, {}, {0x1, 0x3}, {0xffffffff, 0x7, 0x4ac25e50, 0x4, 0x20, 0x10001}, {0x5, 0x6, 0x9, 0x9, 0x4, 0x9}, {0x3, 0x9, 0x2, 0x5, 0x5, 0x101}, {0x0, 0x0, 0x1ff, 0x6, 0x640, 0x5}, {0x20, 0x295d, 0x20000000}, {0x0, 0x8, 0x0, 0x1, 0x3, 0x1}, {0x0, 0x6, 0xffffffff, 0x4, 0x7f}, {0x1, 0x7fff, 0x7, 0x1ff, 0xad, 0x2426}, {0x0, 0x2, 0x0, 0x8, 0x10001, 0x9}, {}, {}, {}, {0xfffffffe, 0x2, 0x9, 0x4}, {0x3, 0x2, 0xac6}, {0x8, 0x10001, 0x4, 0x9, 0x133, 0x4}, {0x8b6a, 0xfff, 0x7, 0x2, 0x1ff, 0xffffffff}, {0x0, 0x8, 0x5, 0x5, 0x40, 0xb16f}, {0x3, 0x0, 0x19c, 0x80, 0x2, 0xfef}, {0x1, 0x10001, 0xa7, 0xe69d, 0xdf6, 0x9}, {0x6, 0x7ff, 0x0, 0x6, 0x8, 0x1ff}, {0x3, 0xcd, 0x3f, 0x80, 0x7fff, 0x8}, {0x96, 0x18d, 0xfffffbeb, 0x3, 0x8000, 0x200}, {0x80000000, 0x70, 0x3, 0x2, 0x6, 0x8000}, {0x7, 0x4, 0x7, 0x6, 0x1f}, {0x3, 0x200, 0x7b1d, 0x98, 0x6, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {0x0, 0x1, 0x10000, 0x5, 0x0, 0x3}, {0x0, 0xfffffffc, 0x0, 0x2d1a, 0x2, 0x7d25}, {0x0, 0xfff, 0x4, 0x100, 0x18, 0x7f}, {0x77d, 0x0, 0x5, 0x6, 0x7, 0x20}, {0x0, 0xff, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x401}, {0x10000, 0x54, 0x1108, 0x4, 0x3f, 0xb26}, {0x6, 0x3, 0xffffff00, 0x80000000, 0x8, 0x400}, {0x4, 0x800, 0x5, 0x6, 0x2000000, 0xffff}, {0x9, 0x3, 0x5, 0x50, 0x1, 0x81}, {0x4, 0x6, 0x401, 0x2, 0xffff, 0x2}, {0x1, 0x0, 0x8e, 0x8, 0x1, 0x1f}], [{0x3, 0x1}, {0x5}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{0x0, 0x4, 0x9, 0x7}, {0xffff, 0x2800, 0x0, 0x6, 0xffffffff, 0xffffffff}, {}, {0x1000, 0x5, 0x3ff, 0x8, 0x101, 0x40}, {0x0, 0x1, 0x1, 0x9, 0x0, 0x700000}, {0x7fff, 0x0, 0x57f, 0x0, 0x6, 0x80000001}, {0x80, 0x0, 0x4, 0x5}, {0x1, 0xfff, 0x0, 0x2, 0x5, 0x8}, {0x0, 0x0, 0x0, 0x688, 0x4, 0x9}, {}, {}, {0x6, 0x9, 0x0, 0x3f, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}, {}, {0x0, 0xa5a, 0x9, 0xac, 0x93}, {0x4, 0x0, 0x6, 0x5, 0x0, 0x10001}, {0x8, 0x0, 0x9, 0x0, 0x8001, 0x1}, {0x800, 0xffff8001, 0xfff, 0x3, 0x7681, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, {}, {}, {0x3, 0x5, 0x8a, 0x7}, {0x0, 0x0, 0x0, 0x6, 0x8, 0x41}, {0x8, 0x8, 0xfff}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, {}, {0xde2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, {}, {0x10001, 0x6, 0x6}, {0x4e, 0x24000000, 0xa55, 0x5, 0xa0, 0x3}, {0x1000, 0x3, 0x0, 0x1, 0x3, 0xff}, {0xba39, 0x0, 0x3, 0x0, 0xfffffffb, 0x10000}, {0x73aa, 0x5, 0x5766aa8f, 0x9, 0xfff, 0x4}, {0x3, 0x91e8, 0x4, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x1, 0xffff, 0x80000001, 0x100}, {}, {0x4b44681, 0xec, 0x7fff, 0x3, 0x4, 0xf0}, {0x0, 0x3f, 0x0, 0x5, 0xe49}, {}, {}, {0x80}, {0x6, 0xb9, 0x9, 0x80000000, 0x7ff, 0x1}, {0x4, 0x7fff, 0x91, 0x2, 0x0, 0x5}, {0x9167, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x8, 0xffffff74, 0x9, 0x9}, {0xa5, 0x1, 0x0, 0x400, 0x0, 0x7f}, {0x2, 0x785, 0x400, 0x3, 0x4, 0x2}, {0x0, 0x0, 0x4, 0x8a}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x8001, 0x2}, {0x9, 0x6, 0x4e, 0x9, 0x401, 0x10000}, {0x101, 0x2, 0x4, 0x763, 0x5}, {0x800, 0x1000, 0x816, 0x6, 0x8, 0x101}, {0x0, 0x0, 0x0, 0x1, 0x8}, {}, {}, {0xfda2, 0x6, 0x3f, 0x1}, {0x0, 0x1, 0x3, 0x7, 0x0, 0x7}, {0x7, 0x4, 0x7, 0x80, 0x8, 0x3}, {}, {}, {}, {}, {0x6, 0x2, 0x7, 0x80000001, 0x7fffffff, 0x7}, {0x0, 0x0, 0x10001, 0x3, 0x4, 0x1}, {}, {0x1000, 0x1, 0x8, 0x5d2c}, {0x4, 0x0, 0x3, 0x3, 0x7, 0x9a01}, {0x5b80da56, 0x33, 0x8, 0x1, 0xfffffff7, 0x4}, {0x0, 0x0, 0x0, 0x40, 0xffffff96, 0x7fff}, {}, {}, {}, {0x0, 0x0, 0x1, 0xfffffffe, 0x101}, {}, {}, {}, {}, {}, {}, {}, {0xfffeffff}, {0x49, 0x5, 0xffffff92, 0x3f, 0xb2f6, 0x8}, {0x0, 0x1c000, 0x9, 0x5, 0x6, 0x1}, {}, {}, {}, {0x0, 0x4}, {0x2, 0x0, 0x9, 0x1b7, 0x9}, {0x6, 0x0, 0xdbb, 0x7f, 0x9, 0x1}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x3f}, {}, {0x9, 0x0, 0x32, 0x1000000, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x10001, 0x635}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffb, 0x1000, 0x0, 0x6, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfff, 0x8}, {}, {0x10000, 0xd15, 0x544}, {0x8000, 0x8001, 0xa804, 0x1, 0xa34, 0x9}, {0x2215, 0x0, 0x100, 0x7ff, 0x400, 0x1}, {0x0, 0x10001, 0x3, 0x2, 0x3, 0x800}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}]}}]}, {0x84, 0x6, "0d1982e63d4afab0be6f9ce8b27e30cb6fc783a543bbe9d759ca1e3089c13c37d0e9b872d5b4faa4982c620ea3025776d8fed14891a540af1e95505046fc1f98b45afa2ee459c9fb069b13dc13e3172de6f01b6aad1a9803646804e921bf05656a638488d26998de2347f8fb264f87d2279b44a08d37133959f49c225647203c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x2318}, 0x1, 0x0, 0x0, 0x80}, 0x14) 12:14:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000048c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 12:14:00 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x80000000) 12:14:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d010700000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:00 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) 12:14:00 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000d80), 0x6d0c82, 0x0) 12:14:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0), r0) 12:14:00 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/block/loop9', 0x22000, 0x0) [ 777.353555][T22503] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 12:14:00 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) [ 777.544671][T22503] device bond243 entered promiscuous mode [ 777.567835][T22509] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 777.663768][T22509] device veth729 entered promiscuous mode [ 777.683077][T22509] bond243: (slave veth729): Enslaving as an active interface with an up link [ 777.745500][T22516] bond243 (unregistering): (slave veth729): Releasing backup interface [ 777.784518][T22516] bond243 (unregistering): Released all slaves [ 777.960977][T22508] loop2: detected capacity change from 0 to 1 [ 777.998943][T22508] ldm_validate_privheads(): Disk read failed. [ 778.022093][T22508] loop2: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 778.022180][T22508] loop2: partition table partially beyond EOD, truncated [ 778.200191][T22508] loop2: p1 start 1 is beyond EOD, truncated [ 778.208772][T22508] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 778.221418][T22508] loop2: p3 size 2 extends beyond EOD, truncated [ 778.229911][T22508] loop2: p4 size 32768 extends beyond EOD, truncated [ 778.237465][T22508] loop2: p5 start 1 is beyond EOD, truncated [ 778.243662][T22508] loop2: p6 size 1073741824 extends beyond EOD, truncated [ 778.253925][T22508] loop2: p7 size 32768 extends beyond EOD, truncated [ 778.262140][T22508] loop2: p8 start 1 is beyond EOD, truncated [ 778.268300][T22508] loop2: p9 size 1073741824 extends beyond EOD, truncated [ 778.276390][T22508] loop2: p10 size 32768 extends beyond EOD, truncated [ 778.285874][T22508] loop2: p11 start 1 is beyond EOD, truncated [ 778.292350][T22508] loop2: p12 size 1073741824 extends beyond EOD, truncated [ 778.301048][T22508] loop2: p13 size 32768 extends beyond EOD, truncated [ 778.309246][T22508] loop2: p14 start 1 is beyond EOD, truncated [ 778.315425][T22508] loop2: p15 size 1073741824 extends beyond EOD, truncated [ 778.324378][T22508] loop2: p16 size 32768 extends beyond EOD, truncated [ 778.335435][T22508] loop2: p17 start 1 is beyond EOD, truncated [ 778.343366][T22508] loop2: p18 size 1073741824 extends beyond EOD, truncated [ 778.352498][T22508] loop2: p19 size 32768 extends beyond EOD, truncated [ 778.361183][T22508] loop2: p20 start 1 is beyond EOD, truncated [ 778.367369][T22508] loop2: p21 size 1073741824 extends beyond EOD, truncated [ 778.376155][T22508] loop2: p22 size 32768 extends beyond EOD, truncated [ 778.384095][T22508] loop2: p23 start 1 is beyond EOD, truncated [ 778.390689][T22508] loop2: p24 size 1073741824 extends beyond EOD, truncated [ 778.399276][T22508] loop2: p25 size 32768 extends beyond EOD, truncated [ 778.406679][T22508] loop2: p26 start 1 is beyond EOD, truncated [ 778.413281][T22508] loop2: p27 size 1073741824 extends beyond EOD, truncated [ 778.422664][T22508] loop2: p28 size 32768 extends beyond EOD, truncated [ 778.430826][T22508] loop2: p29 start 1 is beyond EOD, truncated [ 778.436930][T22508] loop2: p30 size 1073741824 extends beyond EOD, truncated [ 778.453189][T22508] loop2: p31 size 32768 extends beyond EOD, truncated [ 778.460820][T22508] loop2: p32 start 1 is beyond EOD, truncated [ 778.466901][T22508] loop2: p33 size 1073741824 extends beyond EOD, truncated [ 778.476469][T22508] loop2: p34 size 32768 extends beyond EOD, truncated [ 778.484161][T22508] loop2: p35 start 1 is beyond EOD, truncated [ 778.490389][T22508] loop2: p36 size 1073741824 extends beyond EOD, truncated [ 778.499204][T22508] loop2: p37 size 32768 extends beyond EOD, truncated [ 778.506648][T22508] loop2: p38 start 1 is beyond EOD, truncated [ 778.512859][T22508] loop2: p39 size 1073741824 extends beyond EOD, truncated [ 778.523683][T22508] loop2: p40 size 32768 extends beyond EOD, truncated [ 778.532012][T22508] loop2: p41 start 1 is beyond EOD, truncated [ 778.538207][T22508] loop2: p42 size 1073741824 extends beyond EOD, truncated [ 778.546308][T22508] loop2: p43 size 32768 extends beyond EOD, truncated [ 778.555568][T22508] loop2: p44 start 1 is beyond EOD, truncated [ 778.562184][T22508] loop2: p45 size 1073741824 extends beyond EOD, truncated [ 778.570556][T22508] loop2: p46 size 32768 extends beyond EOD, truncated [ 778.578133][T22508] loop2: p47 start 1 is beyond EOD, truncated [ 778.587182][T22508] loop2: p48 size 1073741824 extends beyond EOD, truncated [ 778.595937][T22508] loop2: p49 size 32768 extends beyond EOD, truncated [ 778.604140][T22508] loop2: p50 start 1 is beyond EOD, truncated [ 778.610376][T22508] loop2: p51 size 1073741824 extends beyond EOD, truncated [ 778.619217][T22508] loop2: p52 size 32768 extends beyond EOD, truncated [ 778.627397][T22508] loop2: p53 start 1 is beyond EOD, truncated [ 778.633592][T22508] loop2: p54 size 1073741824 extends beyond EOD, truncated [ 778.641765][T22508] loop2: p55 size 32768 extends beyond EOD, truncated [ 778.650053][T22508] loop2: p56 start 1 is beyond EOD, truncated [ 778.656170][T22508] loop2: p57 size 1073741824 extends beyond EOD, truncated [ 778.665756][T22508] loop2: p58 size 32768 extends beyond EOD, truncated [ 778.673446][T22508] loop2: p59 start 1 is beyond EOD, truncated [ 778.680045][T22508] loop2: p60 size 1073741824 extends beyond EOD, truncated [ 778.688268][T22508] loop2: p61 size 32768 extends beyond EOD, truncated [ 778.695874][T22508] loop2: p62 start 1 is beyond EOD, truncated [ 778.702086][T22508] loop2: p63 size 1073741824 extends beyond EOD, truncated [ 778.713953][T22508] loop2: p64 size 32768 extends beyond EOD, truncated [ 778.721584][T22508] loop2: p65 start 1 is beyond EOD, truncated [ 778.732673][T22508] loop2: p66 size 1073741824 extends beyond EOD, truncated [ 778.740952][T22508] loop2: p67 size 32768 extends beyond EOD, truncated [ 778.752796][T22508] loop2: p68 start 1 is beyond EOD, truncated [ 778.759614][T22508] loop2: p69 size 1073741824 extends beyond EOD, truncated [ 778.767486][T22508] loop2: p70 size 32768 extends beyond EOD, truncated [ 778.780564][T22508] loop2: p71 start 1 is beyond EOD, truncated [ 778.786966][T22508] loop2: p72 size 1073741824 extends beyond EOD, truncated [ 778.795731][T22508] loop2: p73 size 32768 extends beyond EOD, truncated [ 778.805131][T22508] loop2: p74 start 1 is beyond EOD, truncated [ 778.814316][T22508] loop2: p75 size 1073741824 extends beyond EOD, truncated [ 778.823873][T22508] loop2: p76 size 32768 extends beyond EOD, truncated [ 778.834556][T22508] loop2: p77 start 1 is beyond EOD, truncated [ 778.840791][T22508] loop2: p78 size 1073741824 extends beyond EOD, truncated [ 778.848684][T22508] loop2: p79 size 32768 extends beyond EOD, truncated [ 778.856054][T22508] loop2: p80 start 1 is beyond EOD, truncated [ 778.862544][T22508] loop2: p81 size 1073741824 extends beyond EOD, truncated [ 778.870752][T22508] loop2: p82 size 32768 extends beyond EOD, truncated [ 778.878349][T22508] loop2: p83 start 1 is beyond EOD, truncated [ 778.884459][T22508] loop2: p84 size 1073741824 extends beyond EOD, truncated [ 778.894345][T22508] loop2: p85 size 32768 extends beyond EOD, truncated [ 778.901956][T22508] loop2: p86 start 1 is beyond EOD, truncated [ 778.908231][T22508] loop2: p87 size 1073741824 extends beyond EOD, truncated [ 778.916431][T22508] loop2: p88 size 32768 extends beyond EOD, truncated [ 778.924668][T22508] loop2: p89 start 1 is beyond EOD, truncated [ 778.931956][T22508] loop2: p90 size 1073741824 extends beyond EOD, truncated [ 778.940242][T22508] loop2: p91 size 32768 extends beyond EOD, truncated [ 778.947642][T22508] loop2: p92 start 1 is beyond EOD, truncated [ 778.954114][T22508] loop2: p93 size 1073741824 extends beyond EOD, truncated [ 778.962556][T22508] loop2: p94 size 32768 extends beyond EOD, truncated [ 778.970439][T22508] loop2: p95 start 1 is beyond EOD, truncated [ 778.976570][T22508] loop2: p96 size 1073741824 extends beyond EOD, truncated [ 778.984972][T22508] loop2: p97 size 32768 extends beyond EOD, truncated [ 778.992539][T22508] loop2: p98 start 1 is beyond EOD, truncated [ 779.001335][T22508] loop2: p99 size 1073741824 extends beyond EOD, truncated [ 779.010049][T22508] loop2: p100 size 32768 extends beyond EOD, truncated [ 779.017608][T22508] loop2: p101 start 1 is beyond EOD, truncated [ 779.023834][T22508] loop2: p102 size 1073741824 extends beyond EOD, truncated [ 779.032197][T22508] loop2: p103 size 32768 extends beyond EOD, truncated [ 779.040948][T22508] loop2: p104 start 1 is beyond EOD, truncated [ 779.047220][T22508] loop2: p105 size 1073741824 extends beyond EOD, truncated [ 779.055343][T22508] loop2: p106 size 32768 extends beyond EOD, truncated [ 779.063210][T22508] loop2: p107 start 1 is beyond EOD, truncated [ 779.069817][T22508] loop2: p108 size 1073741824 extends beyond EOD, truncated [ 779.077768][T22508] loop2: p109 size 32768 extends beyond EOD, truncated [ 779.087336][T22508] loop2: p110 start 1 is beyond EOD, truncated [ 779.093594][T22508] loop2: p111 size 1073741824 extends beyond EOD, truncated [ 779.102340][T22508] loop2: p112 size 32768 extends beyond EOD, truncated [ 779.111825][T22508] loop2: p113 start 1 is beyond EOD, truncated [ 779.118186][T22508] loop2: p114 size 1073741824 extends beyond EOD, truncated [ 779.126091][T22508] loop2: p115 size 32768 extends beyond EOD, truncated [ 779.134126][T22508] loop2: p116 start 1 is beyond EOD, truncated [ 779.140881][T22508] loop2: p117 size 1073741824 extends beyond EOD, truncated [ 779.149306][T22508] loop2: p118 size 32768 extends beyond EOD, truncated [ 779.156771][T22508] loop2: p119 start 1 is beyond EOD, truncated [ 779.163295][T22508] loop2: p120 size 1073741824 extends beyond EOD, truncated [ 779.171799][T22508] loop2: p121 size 32768 extends beyond EOD, truncated [ 779.179708][T22508] loop2: p122 start 1 is beyond EOD, truncated [ 779.185905][T22508] loop2: p123 size 1073741824 extends beyond EOD, truncated [ 779.194261][T22508] loop2: p124 size 32768 extends beyond EOD, truncated [ 779.202002][T22508] loop2: p125 start 1 is beyond EOD, truncated [ 779.208282][T22508] loop2: p126 size 1073741824 extends beyond EOD, truncated [ 779.216579][T22508] loop2: p127 size 32768 extends beyond EOD, truncated [ 779.225836][T22508] loop2: p128 start 1 is beyond EOD, truncated [ 779.232094][T22508] loop2: p129 size 1073741824 extends beyond EOD, truncated [ 779.241002][T22508] loop2: p130 size 32768 extends beyond EOD, truncated [ 779.249205][T22508] loop2: p131 start 1 is beyond EOD, truncated [ 779.255387][T22508] loop2: p132 size 1073741824 extends beyond EOD, truncated [ 779.263450][T22508] loop2: p133 size 32768 extends beyond EOD, truncated [ 779.271378][T22508] loop2: p134 start 1 is beyond EOD, truncated [ 779.277560][T22508] loop2: p135 size 1073741824 extends beyond EOD, truncated [ 779.285851][T22508] loop2: p136 size 32768 extends beyond EOD, truncated [ 779.293600][T22508] loop2: p137 start 1 is beyond EOD, truncated [ 779.299896][T22508] loop2: p138 size 1073741824 extends beyond EOD, truncated [ 779.307846][T22508] loop2: p139 size 32768 extends beyond EOD, truncated [ 779.315707][T22508] loop2: p140 start 1 is beyond EOD, truncated [ 779.322070][T22508] loop2: p141 size 1073741824 extends beyond EOD, truncated [ 779.333755][T22508] loop2: p142 size 32768 extends beyond EOD, truncated [ 779.342441][T22508] loop2: p143 start 1 is beyond EOD, truncated [ 779.348726][T22508] loop2: p144 size 1073741824 extends beyond EOD, truncated [ 779.356705][T22508] loop2: p145 size 32768 extends beyond EOD, truncated [ 779.364644][T22508] loop2: p146 start 1 is beyond EOD, truncated [ 779.371201][T22508] loop2: p147 size 1073741824 extends beyond EOD, truncated [ 779.379571][T22508] loop2: p148 size 32768 extends beyond EOD, truncated [ 779.387209][T22508] loop2: p149 start 1 is beyond EOD, truncated [ 779.393503][T22508] loop2: p150 size 1073741824 extends beyond EOD, truncated [ 779.402294][T22508] loop2: p151 size 32768 extends beyond EOD, truncated [ 779.410266][T22508] loop2: p152 start 1 is beyond EOD, truncated [ 779.416455][T22508] loop2: p153 size 1073741824 extends beyond EOD, truncated [ 779.424743][T22508] loop2: p154 size 32768 extends beyond EOD, truncated [ 779.432682][T22508] loop2: p155 start 1 is beyond EOD, truncated [ 779.441644][T22508] loop2: p156 size 1073741824 extends beyond EOD, truncated [ 779.451333][T22508] loop2: p157 size 32768 extends beyond EOD, truncated [ 779.459236][T22508] loop2: p158 start 1 is beyond EOD, truncated [ 779.465399][T22508] loop2: p159 size 1073741824 extends beyond EOD, truncated [ 779.476253][T22508] loop2: p160 size 32768 extends beyond EOD, truncated [ 779.484237][T22508] loop2: p161 start 1 is beyond EOD, truncated [ 779.490901][T22508] loop2: p162 size 1073741824 extends beyond EOD, truncated [ 779.499506][T22508] loop2: p163 size 32768 extends beyond EOD, truncated [ 779.507101][T22508] loop2: p164 start 1 is beyond EOD, truncated [ 779.513389][T22508] loop2: p165 size 1073741824 extends beyond EOD, truncated [ 779.524190][T22508] loop2: p166 size 32768 extends beyond EOD, truncated [ 779.532003][T22508] loop2: p167 start 1 is beyond EOD, truncated [ 779.538581][T22508] loop2: p168 size 1073741824 extends beyond EOD, truncated [ 779.547363][T22508] loop2: p169 size 32768 extends beyond EOD, truncated [ 779.556180][T22508] loop2: p170 start 1 is beyond EOD, truncated [ 779.563367][T22508] loop2: p171 size 1073741824 extends beyond EOD, truncated [ 779.572100][T22508] loop2: p172 size 32768 extends beyond EOD, truncated [ 779.580486][T22508] loop2: p173 start 1 is beyond EOD, truncated [ 779.586885][T22508] loop2: p174 size 1073741824 extends beyond EOD, truncated [ 779.595198][T22508] loop2: p175 size 32768 extends beyond EOD, truncated [ 779.603168][T22508] loop2: p176 start 1 is beyond EOD, truncated [ 779.609587][T22508] loop2: p177 size 1073741824 extends beyond EOD, truncated [ 779.617581][T22508] loop2: p178 size 32768 extends beyond EOD, truncated [ 779.625812][T22508] loop2: p179 start 1 is beyond EOD, truncated [ 779.632082][T22508] loop2: p180 size 1073741824 extends beyond EOD, truncated [ 779.640922][T22508] loop2: p181 size 32768 extends beyond EOD, truncated [ 779.649995][T22508] loop2: p182 start 1 is beyond EOD, truncated [ 779.656191][T22508] loop2: p183 size 1073741824 extends beyond EOD, truncated [ 779.664761][T22508] loop2: p184 size 32768 extends beyond EOD, truncated [ 779.672418][T22508] loop2: p185 start 1 is beyond EOD, truncated [ 779.679479][T22508] loop2: p186 size 1073741824 extends beyond EOD, truncated [ 779.687477][T22508] loop2: p187 size 32768 extends beyond EOD, truncated [ 779.696025][T22508] loop2: p188 start 1 is beyond EOD, truncated [ 779.705555][T22508] loop2: p189 size 1073741824 extends beyond EOD, truncated [ 779.715379][T22508] loop2: p190 size 32768 extends beyond EOD, truncated [ 779.725994][T22508] loop2: p191 start 1 is beyond EOD, truncated [ 779.733160][T22508] loop2: p192 size 1073741824 extends beyond EOD, truncated [ 779.742238][T22508] loop2: p193 size 32768 extends beyond EOD, truncated [ 779.751466][T22508] loop2: p194 start 1 is beyond EOD, truncated [ 779.757683][T22508] loop2: p195 size 1073741824 extends beyond EOD, truncated [ 779.766387][T22508] loop2: p196 size 32768 extends beyond EOD, truncated [ 779.774289][T22508] loop2: p197 start 1 is beyond EOD, truncated [ 779.780670][T22508] loop2: p198 size 1073741824 extends beyond EOD, truncated [ 779.789958][T22508] loop2: p199 size 32768 extends beyond EOD, truncated [ 779.797586][T22508] loop2: p200 start 1 is beyond EOD, truncated [ 779.804319][T22508] loop2: p201 size 1073741824 extends beyond EOD, truncated [ 779.813017][T22508] loop2: p202 size 32768 extends beyond EOD, truncated [ 779.821241][T22508] loop2: p203 start 1 is beyond EOD, truncated [ 779.827447][T22508] loop2: p204 size 1073741824 extends beyond EOD, truncated [ 779.835584][T22508] loop2: p205 size 32768 extends beyond EOD, truncated [ 779.843271][T22508] loop2: p206 start 1 is beyond EOD, truncated [ 779.849701][T22508] loop2: p207 size 1073741824 extends beyond EOD, truncated [ 779.859241][T22508] loop2: p208 size 32768 extends beyond EOD, truncated [ 779.866841][T22508] loop2: p209 start 1 is beyond EOD, truncated [ 779.873264][T22508] loop2: p210 size 1073741824 extends beyond EOD, truncated [ 779.884316][T22508] loop2: p211 size 32768 extends beyond EOD, truncated [ 779.892369][T22508] loop2: p212 start 1 is beyond EOD, truncated [ 779.900190][T22508] loop2: p213 size 1073741824 extends beyond EOD, truncated [ 779.909965][T22508] loop2: p214 size 32768 extends beyond EOD, truncated [ 779.917639][T22508] loop2: p215 start 1 is beyond EOD, truncated [ 779.924126][T22508] loop2: p216 size 1073741824 extends beyond EOD, truncated [ 779.932676][T22508] loop2: p217 size 32768 extends beyond EOD, truncated [ 779.941027][T22508] loop2: p218 start 1 is beyond EOD, truncated [ 779.947262][T22508] loop2: p219 size 1073741824 extends beyond EOD, truncated [ 779.956863][T22508] loop2: p220 size 32768 extends beyond EOD, truncated [ 779.965366][T22508] loop2: p221 start 1 is beyond EOD, truncated [ 779.972478][T22508] loop2: p222 size 1073741824 extends beyond EOD, truncated [ 779.981073][T22508] loop2: p223 size 32768 extends beyond EOD, truncated [ 779.992898][T22508] loop2: p224 start 1 is beyond EOD, truncated [ 779.999541][T22508] loop2: p225 size 1073741824 extends beyond EOD, truncated [ 780.007435][T22508] loop2: p226 size 32768 extends beyond EOD, truncated [ 780.015536][T22508] loop2: p227 start 1 is beyond EOD, truncated [ 780.022971][T22508] loop2: p228 size 1073741824 extends beyond EOD, truncated [ 780.031401][T22508] loop2: p229 size 32768 extends beyond EOD, truncated [ 780.039653][T22508] loop2: p230 start 1 is beyond EOD, truncated [ 780.045834][T22508] loop2: p231 size 1073741824 extends beyond EOD, truncated [ 780.054263][T22508] loop2: p232 size 32768 extends beyond EOD, truncated [ 780.063300][T22508] loop2: p233 start 1 is beyond EOD, truncated [ 780.069866][T22508] loop2: p234 size 1073741824 extends beyond EOD, truncated [ 780.077874][T22508] loop2: p235 size 32768 extends beyond EOD, truncated [ 780.085572][T22508] loop2: p236 start 1 is beyond EOD, truncated [ 780.092271][T22508] loop2: p237 size 1073741824 extends beyond EOD, truncated [ 780.103346][T22508] loop2: p238 size 32768 extends beyond EOD, truncated [ 780.111287][T22508] loop2: p239 start 1 is beyond EOD, truncated [ 780.117464][T22508] loop2: p240 size 1073741824 extends beyond EOD, truncated [ 780.126138][T22508] loop2: p241 size 32768 extends beyond EOD, truncated [ 780.134462][T22508] loop2: p242 start 1 is beyond EOD, truncated [ 780.140728][T22508] loop2: p243 size 1073741824 extends beyond EOD, truncated [ 780.149240][T22508] loop2: p244 size 32768 extends beyond EOD, truncated [ 780.156901][T22508] loop2: p245 start 1 is beyond EOD, truncated [ 780.164270][T22508] loop2: p246 size 1073741824 extends beyond EOD, truncated [ 780.172606][T22508] loop2: p247 size 32768 extends beyond EOD, truncated [ 780.180903][T22508] loop2: p248 start 1 is beyond EOD, truncated [ 780.187103][T22508] loop2: p249 size 1073741824 extends beyond EOD, truncated 12:14:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020700000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:03 executing program 3: socket$inet(0xa, 0x1, 0x6) 12:14:03 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x18) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x100080, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x404800, 0x40) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:14:03 executing program 0: syz_clone(0x28802200, 0x0, 0x0, 0x0, 0x0, 0x0) 12:14:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x31) [ 780.195275][T22508] loop2: p250 size 32768 extends beyond EOD, truncated [ 780.202995][T22508] loop2: p251 start 1 is beyond EOD, truncated [ 780.212226][T22508] loop2: p252 size 1073741824 extends beyond EOD, truncated [ 780.220654][T22508] loop2: p253 size 32768 extends beyond EOD, truncated [ 780.228476][T22508] loop2: p254 start 1 is beyond EOD, truncated [ 780.234703][T22508] loop2: p255 size 1073741824 extends beyond EOD, truncated [ 780.312245][T22531] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:03 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 12:14:03 executing program 1: syz_open_dev$vcsa(0x0, 0x3, 0x0) socket(0x0, 0x0, 0x20) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) 12:14:03 executing program 3: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x41, &(0x7f0000000640)={0x5, 0xf, 0x41, 0x3, [@generic={0x14, 0x10, 0x4, "f242251612d0c03ddd60f63ce461e79afe"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "991bc18196ec0b5469011b530d11ca79"}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 12:14:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x5502, 0x0) 12:14:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x4008556c, 0x0) [ 780.571082][T22531] device bond243 entered promiscuous mode [ 780.606836][T22537] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:14:04 executing program 1: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) io_setup(0x8001, &(0x7f00000018c0)) 12:14:04 executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x8001, &(0x7f00000018c0)) [ 780.636190][T22537] device veth731 entered promiscuous mode [ 780.654333][T22537] bond243: (slave veth731): Enslaving as an active interface with an up link 12:14:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030700000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) [ 780.758312][ T3681] usb 4-1: new low-speed USB device number 17 using dummy_hcd 12:14:04 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x18) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x100080, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x404800, 0x40) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 780.840104][T22556] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000680)="110000000000080000000082d95c5399aa", 0x11, 0x0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 12:14:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) 12:14:04 executing program 1: syz_open_dev$vcsa(&(0x7f0000000140), 0x5b05, 0x4000) [ 780.984844][T22556] device bond244 entered promiscuous mode [ 781.002967][T22558] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:14:04 executing program 0: renameat(0xffffffffffffffff, &(0x7f00000017c0)='./file0\x00', 0xffffffffffffffff, 0x0) 12:14:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000046c0)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}]}, 0x190) [ 781.091359][T22558] device veth733 entered promiscuous mode [ 781.128199][ T3681] usb 4-1: No LPM exit latency info found, disabling LPM. [ 781.173767][T22558] bond244: (slave veth733): Enslaving as an active interface with an up link [ 781.218262][ T3681] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 781.427841][T22434] udevd[22434]: inotify_add_watch(7, /dev/loop2p64, 10) failed: No such file or directory [ 781.445340][T22444] udevd[22444]: inotify_add_watch(7, /dev/loop2p67, 10) failed: No such file or directory [ 781.445618][ T7683] udevd[7683]: inotify_add_watch(7, /dev/loop2p66, 10) failed: No such file or directory [ 781.458924][ T7573] udevd[7573]: inotify_add_watch(7, /dev/loop2p69, 10) failed: No such file or directory [ 781.484452][T22443] udevd[22443]: inotify_add_watch(7, /dev/loop2p73, 10) failed: No such file or directory [ 781.488227][ T3681] usb 4-1: string descriptor 0 read error: -22 [ 781.504971][T22449] udevd[22449]: inotify_add_watch(7, /dev/loop2p79, 10) failed: No such file or directory [ 781.505082][ T7528] udevd[7528]: inotify_add_watch(7, /dev/loop2p78, 10) failed: No such file or directory [ 781.518717][ T7575] udevd[7575]: inotify_add_watch(7, /dev/loop2p81, 10) failed: No such file or directory [ 781.531946][T22437] udevd[22437]: inotify_add_watch(7, /dev/loop2p76, 10) failed: No such file or directory [ 781.538155][ T7574] udevd[7574]: inotify_add_watch(7, /dev/loop2p75, 10) failed: No such file or directory [ 781.568074][ T3681] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 781.577179][ T3681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.649294][ T3681] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 781.861960][T20836] usb 4-1: USB disconnect, device number 17 12:14:05 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)="b3", 0x1, 0xfffffffffffff001}], 0x0, 0x0) 12:14:05 executing program 0: futex(&(0x7f0000000080), 0x6, 0x0, &(0x7f0000000100), 0x0, 0x0) 12:14:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d010800000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f01b6d0ff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f00000018c0)={[{@barrier_val}]}) 12:14:05 executing program 2: syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@dmode}, {@overriderock}, {@utf8}], [{@smackfshat={'smackfshat', 0x3d, '\\\\[@'}}, {@dont_measure}, {@euid_gt={'euid>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '^.}'}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 12:14:05 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x18) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x100080, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x404800, 0x40) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:14:05 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) 12:14:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) [ 782.449222][T22585] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 782.466090][T22584] loop1: detected capacity change from 0 to 4 [ 782.497565][T22584] Dev loop1: unable to read RDB block 4 [ 782.555540][T22584] loop1: unable to read partition table [ 782.573070][T22594] loop3: detected capacity change from 0 to 16368 [ 782.590569][T22584] loop1: partition table beyond EOD, truncated 12:14:06 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/time\x00') [ 782.616046][T22585] device bond245 entered promiscuous mode [ 782.641467][T22584] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 782.712370][T22588] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:14:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8927, &(0x7f00000004c0)={'gre0\x00', 0x0}) 12:14:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xc9}]}}}], 0x18}, 0x0) 12:14:06 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000080)) 12:14:06 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0xc00a, 0x4) [ 782.929841][T22588] device veth735 entered promiscuous mode 12:14:06 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0xc0189436, &(0x7f0000000100)) [ 782.973779][T22588] bond245: (slave veth735): Enslaving as an active interface with an up link [ 783.021676][T22608] sock: sock_timestamping_bind_phc: sock not bind to device [ 783.087486][T22595] bond245 (unregistering): (slave veth735): Releasing backup interface [ 783.133372][T22595] bond245 (unregistering): Released all slaves 12:14:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020800000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0x3}, {}, {}]}]}}, &(0x7f0000000c40)=""/162, 0x46, 0xa2, 0x1}, 0x20) 12:14:06 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x18) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x100080, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x404800, 0x40) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:14:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a}, 0x48) 12:14:06 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000013c0)=""/176, &(0x7f0000001480)=0xb0) [ 783.462832][T22620] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 783.558307][T22620] device bond245 entered promiscuous mode [ 783.584707][T22623] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 783.676219][T22623] device veth737 entered promiscuous mode [ 783.755725][T22623] bond245: (slave veth737): Enslaving as an active interface with an up link 12:14:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80108906, 0x0) 12:14:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @loopback}, @phonet, @vsock={0x28, 0x0, 0x0, @host}, 0x7fff, 0x0, 0x0, 0x0, 0xffe1}) 12:14:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x0) 12:14:08 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x10000) 12:14:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030800000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:08 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x2, &(0x7f0000000100)) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffdf1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) accept$nfc_llcp(r1, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='pimreg0\x00') 12:14:08 executing program 3: r0 = socket(0x1, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 12:14:08 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000000c40)=""/173, 0x2a, 0xad, 0x1}, 0x20) 12:14:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 12:14:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x401c5820, &(0x7f0000000000)) 12:14:08 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000500)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x8d, &(0x7f0000000240)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:14:08 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:14:08 executing program 1: r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, &(0x7f0000000080)) [ 784.979724][T22635] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:08 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x2, 0xf0ffff}}]}, 0x20}}, 0x0) 12:14:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x0, 0x0, 0x491b}, 0x48) 12:14:08 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5452, &(0x7f0000000100)) [ 785.115278][T22635] device bond246 entered promiscuous mode [ 785.124771][T22637] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 785.299582][T22637] device veth739 entered promiscuous mode [ 785.321385][T22637] bond246: (slave veth739): Enslaving as an active interface with an up link 12:14:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000df40800000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000780)={&(0x7f0000000680), 0x5, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"/446, @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf25036c0000"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 12:14:08 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) 12:14:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 12:14:08 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f0000000340)='\x00'}, 0x10) 12:14:08 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x100, &(0x7f00000000c0)=""/256, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:14:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}) 12:14:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}}) 12:14:08 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 12:14:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001500)=[@ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}, 0x0) 12:14:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 785.595999][T22672] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:09 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000000080)) [ 785.756850][T22672] device bond247 entered promiscuous mode [ 785.763672][T22676] device bridge_slave_1 left promiscuous mode [ 785.776179][T22676] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.895603][T22678] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 786.023862][T22678] device veth741 entered promiscuous mode [ 786.035918][T22678] bond247: (slave veth741): Enslaving as an active interface with an up link [ 786.060252][T22685] bond247 (unregistering): (slave veth741): Releasing backup interface [ 786.101807][T22685] bond247 (unregistering): Released all slaves 12:14:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x200, 0x0, 0x7}, 0x48) 12:14:09 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f0000000080)) 12:14:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8916, &(0x7f0000000280)={0x0, @phonet, @vsock={0x28, 0x0, 0x0, @local}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b11619ea6c68"}}) 12:14:09 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40c, 0x4) 12:14:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d000900000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x0) 12:14:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8982, &(0x7f0000000000)) 12:14:09 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_team\x00', &(0x7f0000000000)=@ethtool_ts_info}) 12:14:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 12:14:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001800)={&(0x7f0000001680)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000016c0)="8b52", 0x2}], 0x1}, 0x0) 12:14:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}}, 0x0) [ 786.439489][T22701] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x18, 0x2, [@array]}}, &(0x7f0000000c40)=""/173, 0x32, 0xad, 0x1}, 0x20) 12:14:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0xb, 'wpan3\x00'}]}, 0x20}}, 0x0) 12:14:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000003440)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000003380)=[{&(0x7f00000000c0)="50e4", 0x2}], 0x1}, 0x10) 12:14:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xb2, &(0x7f0000000240)=""/178, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:14:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x10000000}}]}}, &(0x7f0000000c40)=""/173, 0x32, 0xad, 0x1}, 0x20) [ 786.689481][T22720] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 786.719065][T22701] device bond247 entered promiscuous mode [ 786.750955][T22711] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 786.847510][T22711] device veth743 entered promiscuous mode [ 786.873770][T22711] bond247: (slave veth743): Enslaving as an active interface with an up link [ 786.889293][T22716] bond247 (unregistering): (slave veth743): Releasing backup interface [ 786.907547][T22716] bond247 (unregistering): Released all slaves 12:14:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d010900000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8918, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x1, 'virt_wifi0\x00', {}, 0x7fff}) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000180)=""/241, &(0x7f0000000280)=0xf1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'veth1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="3700000008000000800000000000000005000000"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x4e22, @loopback}, @phonet={0x23, 0x1, 0x7, 0x3f}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x7fff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='dvmrp1\x00', 0x86a, 0x5, 0x26fc}) 12:14:10 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x2, 0x2}}]}, 0x20}}, 0x0) 12:14:10 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r0, 0x1, 0x31, 0x0, &(0x7f0000000080)) 12:14:10 executing program 2: r0 = socket(0x2b, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 12:14:10 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) 12:14:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f0000000c40)=""/173, 0x32, 0xad, 0x1}, 0x20) 12:14:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x38}, 0x0) 12:14:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e32, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000013c0)}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'vxcan1\x00', {0x4}, 0x7}) 12:14:10 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r0, 0x1, 0x24, 0x0, &(0x7f0000000080)) 12:14:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}}}) 12:14:10 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x2, 0xf0}}]}, 0x20}}, 0x0) [ 787.106681][T22736] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 787.194994][T22736] device bond247 entered promiscuous mode [ 787.230866][T22746] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 787.292225][T22746] device veth745 entered promiscuous mode [ 787.309007][T22746] bond247: (slave veth745): Enslaving as an active interface with an up link [ 787.337335][T22736] bond247 (unregistering): (slave veth745): Releasing backup interface [ 787.360164][T22736] bond247 (unregistering): Released all slaves 12:14:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d020900000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x1, &(0x7f0000000040)=@raw=[@generic], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:14:10 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r0, 0x1, 0x48, 0x0, &(0x7f0000000080)) 12:14:10 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x2, &(0x7f0000000100)) 12:14:10 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'ip6gre0\x00', {}, 0x3}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000080)={"7facba4fbbee4bb27a13b5ae79041742", 0x0, 0x0, {0xe2, 0x4767}, {0x4}, 0xfffffffffffffffa, [0xfdbd, 0x58eb, 0x3, 0xfffffffffffffffa, 0x74ce, 0x2, 0xc3, 0x4, 0x6, 0x0, 0x8000000000000000, 0x8000000000000001, 0x4, 0x7ffffffd, 0x6, 0x30]}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xa2, 0x3, 0x80, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xc}, 0x48) 12:14:10 executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x200, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x9}, 0x48) 12:14:10 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x2}}]}, 0x20}}, 0x0) 12:14:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8918, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x1, 'virt_wifi0\x00', {}, 0x7fff}) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000180)=""/241, &(0x7f0000000280)=0xf1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'veth1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="3700000008000000800000000000000005000000"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x4e22, @loopback}, @phonet={0x23, 0x1, 0x7, 0x3f}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x7fff, 0x0, 0x0, 0x0, 0xffe1, &(0x7f0000000000)='dvmrp1\x00', 0x86a, 0x5, 0x26fc}) 12:14:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r0, &(0x7f0000000380), 0x12) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000300)={{0x0, 0x200, 0x1000, 0x0, 0x1, 0x8, 0x4, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcc, 0x4cd}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000400)={{0x0, 0x95, 0x0, 0x0, 0x0, 0x400, 0x2, 0x401, 0x1, 0x0, 0x7, 0x7fffffffffffffff, 0x7, 0x1f, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 12:14:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 12:14:10 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x2, 0xf0}}]}, 0x20}}, 0x0) [ 787.535928][T22760] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x91) [ 787.670510][T22760] device bond247 entered promiscuous mode [ 787.682393][T22768] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 787.711950][ T27] audit: type=1800 audit(1659528851.116:45): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1170 res=0 errno=0 [ 787.740383][T22768] device veth747 entered promiscuous mode [ 787.753625][T22768] bond247: (slave veth747): Enslaving as an active interface with an up link 12:14:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d030900000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:11 executing program 5: r0 = socket(0x11, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 12:14:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) 12:14:11 executing program 2: bpf$MAP_CREATE(0xa, &(0x7f00000001c0), 0x48) 12:14:11 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) 12:14:11 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_gfeatures}) 12:14:11 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xfe, &(0x7f00000001c0)=""/254, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:14:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000540)=[{&(0x7f00000002c0)="0b0cc73d9f27f218", 0x8}], 0x1}, 0x0) [ 787.982721][T22787] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:11 executing program 3: r0 = socket(0x18, 0x0, 0x0) bind(r0, 0x0, 0x15) 12:14:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8932, &(0x7f0000000140)={'tunl0\x00', 0x0}) 12:14:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x894c, 0x0) 12:14:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x2, @any, 0x0, 0x1}, 0xe) [ 788.060802][T22787] device bond248 entered promiscuous mode [ 788.068679][T22793] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 788.113049][T22793] device veth749 entered promiscuous mode [ 788.124962][T22793] bond248: (slave veth749): Enslaving as an active interface with an up link 12:14:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d400900000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private}}}}) [ 788.252137][T22808] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 788.285982][T22808] device bond249 entered promiscuous mode [ 788.295184][T22808] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 788.318676][T22808] device veth751 entered promiscuous mode [ 788.330075][T22808] bond249: (slave veth751): Enslaving as an active interface with an up link [ 788.345878][T22808] bond249 (unregistering): (slave veth751): Releasing backup interface [ 788.369992][T22808] bond249 (unregistering): Released all slaves 12:14:12 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x6c000000}]}}, &(0x7f0000000c40)=""/173, 0x32, 0xad, 0x1}, 0x20) 12:14:12 executing program 5: bpf$BPF_BTF_LOAD(0x7ffffffff000, 0x0, 0x0) 12:14:12 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup2(r2, r1) r4 = dup2(r3, r0) sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f0000000000)=@file={0xa}, 0xa, 0x0}, 0x0) 12:14:12 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14043, 0x0) 12:14:12 executing program 0: r0 = socket(0x18, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 12:14:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d000a00000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 12:14:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 12:14:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x7}, {0x1}]}) [ 788.731813][T22818] netlink: 'syz-executor.4': attribute type 17 has an invalid length. 12:14:12 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x9b050ef957c30633) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 12:14:12 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) [ 788.820268][T22818] device bond249 entered promiscuous mode [ 788.830300][T22827] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. 12:14:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000014000200000000000000000000000000000000001400030000001000000000000000000000000910240007"], 0x68}}, 0x0) 12:14:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x8002, 0x4) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:14:12 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x66f2, &(0x7f0000000240), &(0x7f0000248000/0x2000)=nil, &(0x7f00000bf000/0x13000)=nil, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0x4008ae9c, &(0x7f0000003680)={{0x0, 0x0, 0x80}}) [ 789.004180][T22827] device veth753 entered promiscuous mode [ 789.041003][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:14:12 executing program 0: bpf$OBJ_GET_MAP(0x6, &(0x7f0000000000)={0x0, 0x0, 0x18}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_clone(0x40000600, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 12:14:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000100)={0xa, 0x4e24, 0x0, @local, 0x1}, 0x1c, 0x0}, 0x0) [ 789.132582][T22827] bond249: (slave veth753): Enslaving as an active interface with an up link 12:14:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 789.213984][T22818] bond249 (unregistering): (slave veth753): Releasing backup interface [ 789.271582][T22818] bond249 (unregistering): Released all slaves [ 789.280182][T22845] general protection fault, probably for non-canonical address 0xdffffc000000001d: 0000 [#1] PREEMPT SMP KASAN [ 789.291939][T22845] KASAN: null-ptr-deref in range [0x00000000000000e8-0x00000000000000ef] [ 789.300372][T22845] CPU: 1 PID: 22845 Comm: syz-executor.5 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 789.310389][T22845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 789.320468][T22845] RIP: 0010:kvm_arch_vcpu_ioctl+0x10d1/0x3d40 [ 789.326583][T22845] Code: 80 3c 02 00 0f 85 91 28 00 00 4d 8b ac 24 b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bd ec 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 62 [ 789.346220][T22845] RSP: 0018:ffffc90014bd7960 EFLAGS: 00010207 [ 789.352316][T22845] RAX: dffffc0000000000 RBX: 0000000000000006 RCX: ffffc9000af99000 [ 789.360308][T22845] RDX: 000000000000001d RSI: ffffffff8110c6ee RDI: 00000000000000ec [ 789.368285][T22845] RBP: ffffc90014bd7d20 R08: 0000000000000007 R09: 0000000000000000 [ 789.376257][T22845] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88808b6f8000 [ 789.384231][T22845] R13: 0000000000000000 R14: 1ffff9200297af36 R15: dffffc0000000000 [ 789.392293][T22845] FS: 00007f2608144700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 789.401228][T22845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.407835][T22845] CR2: 0000001b30932000 CR3: 000000004ca79000 CR4: 00000000003526e0 [ 789.415814][T22845] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 789.423788][T22845] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 789.431759][T22845] Call Trace: [ 789.435033][T22845] [ 789.437980][T22845] ? kvm_arch_vcpu_put+0x950/0x950 [ 789.443120][T22845] ? find_held_lock+0x2d/0x110 [ 789.447892][T22845] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 789.454112][T22845] ? debug_check_no_obj_freed+0x20c/0x420 [ 789.459857][T22845] ? lock_downgrade+0x6e0/0x6e0 [ 789.464769][T22845] ? lock_release+0x780/0x780 [ 789.469449][T22845] ? rcu_read_lock_sched_held+0x3a/0x70 [ 789.475005][T22845] ? trace_contention_end+0xea/0x150 [ 789.480310][T22845] ? __mutex_lock+0x231/0x1350 [ 789.485118][T22845] ? kvm_vcpu_ioctl+0x1d1/0xf30 [ 789.490008][T22845] ? mutex_lock_io_nested+0x1190/0x1190 [ 789.495582][T22845] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 789.501451][T22845] ? kvm_vcpu_ioctl+0x973/0xf30 [ 789.506305][T22845] kvm_vcpu_ioctl+0x973/0xf30 [ 789.511013][T22845] ? kvm_vcpu_kick+0x2f0/0x2f0 [ 789.515819][T22845] ? __ct_user_exit+0xff/0x150 [ 789.520611][T22845] ? lock_downgrade+0x6e0/0x6e0 [ 789.525465][T22845] ? __fget_files+0x26a/0x440 [ 789.530157][T22845] ? bpf_lsm_file_ioctl+0x5/0x10 [ 789.535106][T22845] ? kvm_vcpu_kick+0x2f0/0x2f0 [ 789.539895][T22845] __x64_sys_ioctl+0x193/0x200 [ 789.544682][T22845] do_syscall_64+0x35/0xb0 [ 789.549106][T22845] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 789.555007][T22845] RIP: 0033:0x7f2607089209 [ 789.559421][T22845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 789.579040][T22845] RSP: 002b:00007f2608144168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.587455][T22845] RAX: ffffffffffffffda RBX: 00007f260719bf60 RCX: 00007f2607089209 [ 789.595509][T22845] RDX: 0000000020003680 RSI: 000000004008ae9c RDI: 000000000000000b [ 789.603471][T22845] RBP: 00007f26070e3161 R08: 0000000000000000 R09: 0000000000000000 [ 789.611433][T22845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.619400][T22845] R13: 00007ffc99bd352f R14: 00007f2608144300 R15: 0000000000022000 [ 789.627543][T22845] [ 789.630555][T22845] Modules linked in: [ 789.672443][T22845] ---[ end trace 0000000000000000 ]--- [ 789.679508][T22845] RIP: 0010:kvm_arch_vcpu_ioctl+0x10d1/0x3d40 [ 789.686604][T22845] Code: 80 3c 02 00 0f 85 91 28 00 00 4d 8b ac 24 b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bd ec 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 62 12:14:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d330000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010160008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d010a00000000006f0010000000", @ANYRES32=r3], 0x20}}, 0x0) 12:14:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x8002, 0x4) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:14:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:14:13 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x9b050ef957c30633) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) [ 789.727310][T22845] RSP: 0018:ffffc90014bd7960 EFLAGS: 00010207 [ 789.746025][T22845] RAX: dffffc0000000000 RBX: 0000000000000006 RCX: ffffc9000af99000 12:14:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:14:13 executing program 0: bpf$OBJ_GET_MAP(0x6, &(0x7f0000000000)={0x0, 0x0, 0x18}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_clone(0x40000600, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) [ 789.792396][T22845] RDX: 000000000000001d RSI: ffffffff8110c6ee RDI: 00000000000000ec [ 789.815941][T22864] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 789.819851][T22845] RBP: ffffc90014bd7d20 R08: 0000000000000007 R09: 0000000000000000 12:14:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 789.888631][T22845] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88808b6f8000 [ 789.898971][T22845] R13: 0000000000000000 R14: 1ffff9200297af36 R15: dffffc0000000000 [ 789.917759][T22845] FS: 00007f2608144700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 789.948173][T22845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.955027][T22845] CR2: 00007ffe51e68bf8 CR3: 000000004ca79000 CR4: 00000000003526f0 [ 789.963622][T22845] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 789.965053][T22864] device bond249 entered promiscuous mode [ 789.973819][T22845] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 789.986437][T22845] Kernel panic - not syncing: Fatal exception [ 789.992770][T22845] Kernel Offset: disabled [ 789.997111][T22845] Rebooting in 86400 seconds..