(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x58, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ac}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb231}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x45) 06:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:05 executing program 2: unshare(0x6c060000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:05 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c653020282023200a8d2a8488725d00db40468c8ad123be87958e6191612d6a8cf75f27034cfb91fd8e014b8101c16753c2f92a95f440533f8c7c32ea09de4b905b9b4b381d79b87fe610bcb4e9bd0100000089fbb3bdff8e"], 0x60) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r3 = gettid() r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x2d}, &(0x7f0000000180)=""/124, 0x7c, &(0x7f0000000200)=""/215, &(0x7f0000000340)=[r1, r2, r1, r1, r3], 0x5, {r4}}, 0x58) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x80000000}, 0x40000, 0x200000000010000, 0x6, 0x7, 0x0, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:05 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000001140), 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) fcntl$addseals(r1, 0x409, 0xe) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000100)={r3}) 06:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) [ 2571.614531][T10064] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2571.627620][T10064] bond31 (uninitialized): Released all slaves [ 2571.711567][T10057] macsec0 speed is unknown, defaulting to 1000 06:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) [ 2571.753943][T10062] macsec0 speed is unknown, defaulting to 1000 06:46:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24044004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0xf0, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xed28820d8bc20c2c}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000005) (async) syz_clone3(&(0x7f0000000a00)={0x141004000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x2e}, &(0x7f0000000840)=""/198, 0xc6, &(0x7f0000000940)=""/157, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x58, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ac}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb231}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x45) 06:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 06:46:06 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2571.994515][T10082] macsec0 speed is unknown, defaulting to 1000 [ 2572.082194][T10087] macsec0 speed is unknown, defaulting to 1000 06:46:12 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x20000a80, 0x0, 0x110, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private, @multicast2}}}, {{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@empty, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="d3488ef2930f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) fcntl$setstatus(r0, 0x4, 0x4000) getsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000000100)=""/179, &(0x7f0000000080)=0xb3) 06:46:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24044004) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0xf0, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xed28820d8bc20c2c}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000005) (async) syz_clone3(&(0x7f0000000a00)={0x141004000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x2e}, &(0x7f0000000840)=""/198, 0xc6, &(0x7f0000000940)=""/157, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x58, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ac}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb231}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x45) 06:46:12 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:12 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c653020282023200a8d2a8488725d00db40468c8ad123be87958e6191612d6a8cf75f27034cfb91fd8e014b8101c16753c2f92a95f440533f8c7c32ea09de4b905b9b4b381d79b87fe610bcb4e9bd0100000089fbb3bdff8e"], 0x60) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r3 = gettid() r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x2d}, &(0x7f0000000180)=""/124, 0x7c, &(0x7f0000000200)=""/215, &(0x7f0000000340)=[r1, r2, r1, r1, r3], 0x5, {r4}}, 0x58) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x80000000}, 0x40000, 0x200000000010000, 0x6, 0x7, 0x0, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c653020282023200a8d2a8488725d00db40468c8ad123be87958e6191612d6a8cf75f27034cfb91fd8e014b8101c16753c2f92a95f440533f8c7c32ea09de4b905b9b4b381d79b87fe610bcb4e9bd0100000089fbb3bdff8e"], 0x60) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) (async) gettid() (async) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x2d}, &(0x7f0000000180)=""/124, 0x7c, &(0x7f0000000200)=""/215, &(0x7f0000000340)=[r1, r2, r1, r1, r3], 0x5, {r4}}, 0x58) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x80000000}, 0x40000, 0x200000000010000, 0x6, 0x7, 0x0, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 06:46:12 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000001140), 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) fcntl$addseals(r1, 0x409, 0xe) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000100)={r3}) 06:46:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "43fddfb0484672f7c6d8a9302b09863666868d919ad3566e5e719a7f764deb429946c64180875d08be32cac9a076388c1132706a87e1d2cdbf80c348f135468c285f0c10939d2be49d622f0c31102745c8278796b92a83155e1249b733606dd9c94566ee62f97b327816704776"}, 0x7f) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x11c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x59}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8a7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x76d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x48ba]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0x0, 0xfffff000, 0x1, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7cb}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000200)={{}, {0x9}, 0xc6, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)="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", 0x166, 0x0, &(0x7f0000000540)={0x2, 0x1c0, {0x1, 0xc, 0xb8, "79b3df3c26af05e9fbc4c1c13a3b94f1bd3d04c8ac000a58c1b45931ed567ddf8bb3e4936b0183634259bb1aab3653177b775d7fd2e7600bdc052aa05beeeebdbc30f53f29797b04cfe87892d4a90c5091fece5e64762c5ffe8e4edb7a392ceb22ad8c3b04309c656b2208950e35d9ea6653306adb4f9d081fd52543afc74cb8292788ef1b4c2eba03a4a9d859ba7536926762c473db5887192ed5a9f5be3ca68e132cff356b700cd7841d8fb2fabbff17eedd57107f69d1", 0xfb, "ed5647376ea0bf4bde3836ba526e6ba0269deee57039b7b89ac1fbb34548236ec4236a1908afa6ac9731c407e081be3a0f41e0383595215c207218e2a18a73e5e8f6e15c1de72e8fe05a80bec5b206f06c172368dbfa2c979b7317b396c623d2bbc8aef335e516e54f755149102b6a1ea443b7575c4750e683f2174de041e5e10724005f55f4b2e2d378cad9590172ad003ae3bb21d2115d7f8b11844310ea43270701c7690cfc7425e7b01fd5bed898668f81beb0dd2aadb64bbc96a10c5b576f8d982a59f204de41c82e3cb739e9853e5d543164536e43bbaadef065ce730a3d6c1cd717b7edaaff4a447a5e1c4fb55bbbb272acb6672c6642b8"}, 0xcb, "ca15efc1d76e18fdb19ee3aeb3d2affdb7072822f22651435fc1acacdb15fae98466a69cfdb5274dc258287cbe4c6a2052797a871015a16dd0b8df07f0a5b7e87f78f25886cc1e20c69781a6d3220ee58aa94f08bb64c69ffdb7ab8b2a70d087ddfaed723853969e1d7d9b57601d9fa4ae01e59cc2533a241786562c6ccc98d11561c47f8fd3782e8d526ac64354c6affc915a7269c7c1bb954237308ed53bf148006d6fd8cc1c749b86f09aa63a166d3ed5ab04624296b82749003dd1e7bb78977331c954e6fe9e3b900f"}, 0x297}) 06:46:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:12 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r1 = syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c653020282023200a8d2a8488725d00db40468c8ad123be87958e6191612d6a8cf75f27034cfb91fd8e014b8101c16753c2f92a95f440533f8c7c32ea09de4b905b9b4b381d79b87fe610bcb4e9bd0100000089fbb3bdff8e"], 0x60) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r3 = gettid() r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x2d}, &(0x7f0000000180)=""/124, 0x7c, &(0x7f0000000200)=""/215, &(0x7f0000000340)=[r1, r2, r1, r1, r3], 0x5, {r4}}, 0x58) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0xffffffffffff0001, 0x80000000}, 0x40000, 0x200000000010000, 0x6, 0x7, 0x0, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2578.920002][T10106] macsec0 speed is unknown, defaulting to 1000 06:46:13 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2579.082603][T10147] macsec0 speed is unknown, defaulting to 1000 06:46:21 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x20000a80, 0x0, 0x110, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private, @multicast2}}}, {{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@empty, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="d3488ef2930f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) fcntl$setstatus(r0, 0x4, 0x4000) getsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000000100)=""/179, &(0x7f0000000080)=0xb3) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x20000a80, 0x0, 0x110, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private, @multicast2}}}, {{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@empty, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="d3488ef2930f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) fcntl$setstatus(r0, 0x4, 0x4000) (async) getsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000000100)=""/179, &(0x7f0000000080)=0xb3) (async) 06:46:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "43fddfb0484672f7c6d8a9302b09863666868d919ad3566e5e719a7f764deb429946c64180875d08be32cac9a076388c1132706a87e1d2cdbf80c348f135468c285f0c10939d2be49d622f0c31102745c8278796b92a83155e1249b733606dd9c94566ee62f97b327816704776"}, 0x7f) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x11c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x59}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8a7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x76d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x48ba]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0x0, 0xfffff000, 0x1, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7cb}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000200)={{}, {0x9}, 0xc6, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)="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", 0x166, 0x0, &(0x7f0000000540)={0x2, 0x1c0, {0x1, 0xc, 0xb8, "79b3df3c26af05e9fbc4c1c13a3b94f1bd3d04c8ac000a58c1b45931ed567ddf8bb3e4936b0183634259bb1aab3653177b775d7fd2e7600bdc052aa05beeeebdbc30f53f29797b04cfe87892d4a90c5091fece5e64762c5ffe8e4edb7a392ceb22ad8c3b04309c656b2208950e35d9ea6653306adb4f9d081fd52543afc74cb8292788ef1b4c2eba03a4a9d859ba7536926762c473db5887192ed5a9f5be3ca68e132cff356b700cd7841d8fb2fabbff17eedd57107f69d1", 0xfb, "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"}, 0xcb, "ca15efc1d76e18fdb19ee3aeb3d2affdb7072822f22651435fc1acacdb15fae98466a69cfdb5274dc258287cbe4c6a2052797a871015a16dd0b8df07f0a5b7e87f78f25886cc1e20c69781a6d3220ee58aa94f08bb64c69ffdb7ab8b2a70d087ddfaed723853969e1d7d9b57601d9fa4ae01e59cc2533a241786562c6ccc98d11561c47f8fd3782e8d526ac64354c6affc915a7269c7c1bb954237308ed53bf148006d6fd8cc1c749b86f09aa63a166d3ed5ab04624296b82749003dd1e7bb78977331c954e6fe9e3b900f"}, 0x297}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "43fddfb0484672f7c6d8a9302b09863666868d919ad3566e5e719a7f764deb429946c64180875d08be32cac9a076388c1132706a87e1d2cdbf80c348f135468c285f0c10939d2be49d622f0c31102745c8278796b92a83155e1249b733606dd9c94566ee62f97b327816704776"}, 0x7f) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x11c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x59}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8a7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x76d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x48ba]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0x0, 0xfffff000, 0x1, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r5, r4, 0x0, 0x10000a006) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7cb}}, './file0\x00'}) (async) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000200)={{}, {0x9}, 0xc6, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)="155838223fdb12c9988150fa7a25d24f93d531036840ef006d1c619049c1731de793db8ce7c039d6f707ecb8fa5124271270899d1020115cf0ea856905c9715bd00d83e2debd819ead69e6b41ea19a665c1b4a0771a066d1fb0f426033e353a14f96d15aca95e6733e8f6ff3c0ffabe3271952bb5f92799ad741a54376b13e8a09bf8091706ff6eb4c84021b23191a77ed98c461679ce065693810819d07b61a9322eed518a0b80698c2447d5d41b61797e87f0683c4c89b2ce6097dee7ac09d5315b9f7605a08173db9de6503f69fccbfd67a9e7e4d35682705d00a0cf121ec60fddcc32e31f83afcd6173868511e71c4238b6f6c0d3156194bf13653c808395a5974f2e09ff7331d768b3de891015f4ab2b0f503e91fdc22d26de443e0d07dfb491550c91748e682cb3b733542826fc0c4aa88f1183ac1ca078a8c31e1a140461d56468704355a61ea8fc1d6300b19dfbf62ae611b50759162a2c15b3f4d854eba5d7117ef", 0x166, 0x0, &(0x7f0000000540)={0x2, 0x1c0, {0x1, 0xc, 0xb8, "79b3df3c26af05e9fbc4c1c13a3b94f1bd3d04c8ac000a58c1b45931ed567ddf8bb3e4936b0183634259bb1aab3653177b775d7fd2e7600bdc052aa05beeeebdbc30f53f29797b04cfe87892d4a90c5091fece5e64762c5ffe8e4edb7a392ceb22ad8c3b04309c656b2208950e35d9ea6653306adb4f9d081fd52543afc74cb8292788ef1b4c2eba03a4a9d859ba7536926762c473db5887192ed5a9f5be3ca68e132cff356b700cd7841d8fb2fabbff17eedd57107f69d1", 0xfb, "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"}, 0xcb, "ca15efc1d76e18fdb19ee3aeb3d2affdb7072822f22651435fc1acacdb15fae98466a69cfdb5274dc258287cbe4c6a2052797a871015a16dd0b8df07f0a5b7e87f78f25886cc1e20c69781a6d3220ee58aa94f08bb64c69ffdb7ab8b2a70d087ddfaed723853969e1d7d9b57601d9fa4ae01e59cc2533a241786562c6ccc98d11561c47f8fd3782e8d526ac64354c6affc915a7269c7c1bb954237308ed53bf148006d6fd8cc1c749b86f09aa63a166d3ed5ab04624296b82749003dd1e7bb78977331c954e6fe9e3b900f"}, 0x297}) (async) 06:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:21 executing program 2: unshare(0x6c060000) unshare(0x400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:21 executing program 0: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x0, 0xffffffffffffffff, 0xd0, 0x9, @scatter={0x6, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/216, 0xd8}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)=""/159, 0x9f}]}, &(0x7f00000005c0)="611a96135b20f4202b257c3a574c33cc19467cf514de4a15bab18266c9737cfba9a776fdf7d0264b50582e6e7fa86b63a16ab0567bfe8f6e55a044ec182ca7bcd1fb5542bc6c49297cafc9179e38aabad7f4e8cbfcfc4be045f99c029e78f97b7c78e38e0f321b005958720678ffd4a15347093314f3ad8b7db6096a9e8317921d5fd6ecf04dc99a952e352297d4092b222c725c464c26d426061ef2eafe631c883f5752bcb021cbb214f3f10cd156c5467ddd9fbf769e5ae44d19ae018050332599524f532a5eb072d76545b5078b49", &(0x7f00000006c0)=""/35, 0x3f, 0x10033, 0x2, &(0x7f0000000700)}) set_mempolicy(0x3, &(0x7f0000000040)=0xfffffffeffffffff, 0x6) set_mempolicy(0x1, &(0x7f00000007c0)=0x80, 0xffffffffffff2307) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 06:46:21 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x2, 0x41, 0x81, 0x0, 0x0, 0x10a00, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40c, 0x6, @perf_config_ext={0x7, 0x2}, 0x144, 0x5, 0xb19b, 0x9, 0x1, 0xf6e9, 0x5, 0x0, 0x888, 0x0, 0x35f0934e}, 0x0, 0xc, r0, 0x2) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2587.165274][T10162] macsec0 speed is unknown, defaulting to 1000 06:46:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "43fddfb0484672f7c6d8a9302b09863666868d919ad3566e5e719a7f764deb429946c64180875d08be32cac9a076388c1132706a87e1d2cdbf80c348f135468c285f0c10939d2be49d622f0c31102745c8278796b92a83155e1249b733606dd9c94566ee62f97b327816704776"}, 0x7f) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x11c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x59}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8a7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x76d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x48ba]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0x0, 0xfffff000, 0x1, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7cb}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000200)={{}, {0x9}, 0xc6, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)="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", 0x166, 0x0, &(0x7f0000000540)={0x2, 0x1c0, {0x1, 0xc, 0xb8, "79b3df3c26af05e9fbc4c1c13a3b94f1bd3d04c8ac000a58c1b45931ed567ddf8bb3e4936b0183634259bb1aab3653177b775d7fd2e7600bdc052aa05beeeebdbc30f53f29797b04cfe87892d4a90c5091fece5e64762c5ffe8e4edb7a392ceb22ad8c3b04309c656b2208950e35d9ea6653306adb4f9d081fd52543afc74cb8292788ef1b4c2eba03a4a9d859ba7536926762c473db5887192ed5a9f5be3ca68e132cff356b700cd7841d8fb2fabbff17eedd57107f69d1", 0xfb, "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"}, 0xcb, "ca15efc1d76e18fdb19ee3aeb3d2affdb7072822f22651435fc1acacdb15fae98466a69cfdb5274dc258287cbe4c6a2052797a871015a16dd0b8df07f0a5b7e87f78f25886cc1e20c69781a6d3220ee58aa94f08bb64c69ffdb7ab8b2a70d087ddfaed723853969e1d7d9b57601d9fa4ae01e59cc2533a241786562c6ccc98d11561c47f8fd3782e8d526ac64354c6affc915a7269c7c1bb954237308ed53bf148006d6fd8cc1c749b86f09aa63a166d3ed5ab04624296b82749003dd1e7bb78977331c954e6fe9e3b900f"}, 0x297}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "43fddfb0484672f7c6d8a9302b09863666868d919ad3566e5e719a7f764deb429946c64180875d08be32cac9a076388c1132706a87e1d2cdbf80c348f135468c285f0c10939d2be49d622f0c31102745c8278796b92a83155e1249b733606dd9c94566ee62f97b327816704776"}, 0x7f) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01bade000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x11c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x59}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8a7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x76d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x48ba]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0x0, 0xfffff000, 0x1, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r5, r4, 0x0, 0x10000a006) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7cb}}, './file0\x00'}) (async) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000200)={{}, {0x9}, 0xc6, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)="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", 0x166, 0x0, &(0x7f0000000540)={0x2, 0x1c0, {0x1, 0xc, 0xb8, "79b3df3c26af05e9fbc4c1c13a3b94f1bd3d04c8ac000a58c1b45931ed567ddf8bb3e4936b0183634259bb1aab3653177b775d7fd2e7600bdc052aa05beeeebdbc30f53f29797b04cfe87892d4a90c5091fece5e64762c5ffe8e4edb7a392ceb22ad8c3b04309c656b2208950e35d9ea6653306adb4f9d081fd52543afc74cb8292788ef1b4c2eba03a4a9d859ba7536926762c473db5887192ed5a9f5be3ca68e132cff356b700cd7841d8fb2fabbff17eedd57107f69d1", 0xfb, "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"}, 0xcb, "ca15efc1d76e18fdb19ee3aeb3d2affdb7072822f22651435fc1acacdb15fae98466a69cfdb5274dc258287cbe4c6a2052797a871015a16dd0b8df07f0a5b7e87f78f25886cc1e20c69781a6d3220ee58aa94f08bb64c69ffdb7ab8b2a70d087ddfaed723853969e1d7d9b57601d9fa4ae01e59cc2533a241786562c6ccc98d11561c47f8fd3782e8d526ac64354c6affc915a7269c7c1bb954237308ed53bf148006d6fd8cc1c749b86f09aa63a166d3ed5ab04624296b82749003dd1e7bb78977331c954e6fe9e3b900f"}, 0x297}) (async) 06:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:21 executing program 2: unshare(0x6c060000) unshare(0x400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) dup3(r3, r2, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0xe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x6, r5, &(0x7f00000006c0)="fe58cd33c8b6d88baac47f86177707e772ca33184f28fc30819a51fc89ae0dee6a46a99c9863012dd27a0970e49e7b4c75c6e526be389fb713f54923940b545cadb5341d52b34c4cec", 0x49, 0x3f, 0x0, 0x2, r1}]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) [ 2587.360361][T10195] macsec0 speed is unknown, defaulting to 1000 06:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:27 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) dup3(r3, r2, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0xe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x6, r5, &(0x7f00000006c0)="fe58cd33c8b6d88baac47f86177707e772ca33184f28fc30819a51fc89ae0dee6a46a99c9863012dd27a0970e49e7b4c75c6e526be389fb713f54923940b545cadb5341d52b34c4cec", 0x49, 0x3f, 0x0, 0x2, r1}]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) (async) sendto$inet(r3, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) (async) dup3(r3, r2, 0x0) (async) io_setup(0x40000000008, &(0x7f0000000240)) (async) io_submit(r4, 0xe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) (async) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x6, r5, &(0x7f00000006c0)="fe58cd33c8b6d88baac47f86177707e772ca33184f28fc30819a51fc89ae0dee6a46a99c9863012dd27a0970e49e7b4c75c6e526be389fb713f54923940b545cadb5341d52b34c4cec", 0x49, 0x3f, 0x0, 0x2, r1}]) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) 06:46:27 executing program 2: unshare(0x6c060000) unshare(0x400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:27 executing program 0: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) (async, rerun: 32) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x0, 0xffffffffffffffff, 0xd0, 0x9, @scatter={0x6, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/216, 0xd8}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)=""/159, 0x9f}]}, &(0x7f00000005c0)="611a96135b20f4202b257c3a574c33cc19467cf514de4a15bab18266c9737cfba9a776fdf7d0264b50582e6e7fa86b63a16ab0567bfe8f6e55a044ec182ca7bcd1fb5542bc6c49297cafc9179e38aabad7f4e8cbfcfc4be045f99c029e78f97b7c78e38e0f321b005958720678ffd4a15347093314f3ad8b7db6096a9e8317921d5fd6ecf04dc99a952e352297d4092b222c725c464c26d426061ef2eafe631c883f5752bcb021cbb214f3f10cd156c5467ddd9fbf769e5ae44d19ae018050332599524f532a5eb072d76545b5078b49", &(0x7f00000006c0)=""/35, 0x3f, 0x10033, 0x2, &(0x7f0000000700)}) (rerun: 32) set_mempolicy(0x3, &(0x7f0000000040)=0xfffffffeffffffff, 0x6) (async) set_mempolicy(0x1, &(0x7f00000007c0)=0x80, 0xffffffffffff2307) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 06:46:27 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x2, 0x41, 0x81, 0x0, 0x0, 0x10a00, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40c, 0x6, @perf_config_ext={0x7, 0x2}, 0x144, 0x5, 0xb19b, 0x9, 0x1, 0xf6e9, 0x5, 0x0, 0x888, 0x0, 0x35f0934e}, 0x0, 0xc, r0, 0x2) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r1 = syz_clone3(0x0, 0x0) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1a) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:27 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) dup3(r3, r2, 0x0) (async) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0xe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) (async) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x6, r5, &(0x7f00000006c0)="fe58cd33c8b6d88baac47f86177707e772ca33184f28fc30819a51fc89ae0dee6a46a99c9863012dd27a0970e49e7b4c75c6e526be389fb713f54923940b545cadb5341d52b34c4cec", 0x49, 0x3f, 0x0, 0x2, r1}]) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) [ 2593.333118][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 06:46:27 executing program 4: mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='xfs\x00', 0x200000, &(0x7f0000000480)='\xc0\x00') syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="71756912cb2865742c000a98fc2aab17a0bebc2683ac9372aeb3adf88b342f17387a00f86d5821d85a675ebfedc47fbe4ec69cfb3096078d0104d115d325de2a58674404b0e2c28b230fdda7a6ecd1efcb4593a25952f27795d4f58bfffddb32ee2a9ae808a3dbf27f61ada637893f38384fed7a57f46d2ce3f292606300000000000000950b77"]) r0 = syz_io_uring_complete(0x0) mkdir(&(0x7f00000005c0)='./file0/file0\x00', 0x100) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={{}, {r1, r2/1000+10000}}, 0x0) syz_io_uring_setup(0x1a6d, &(0x7f0000000240)={0x0, 0xefc0, 0x10, 0x1, 0x84, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000002c0)=0x0) rename(&(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000640)='./file0/file0\x00') quotactl(0x1, &(0x7f00000004c0)='./file0\x00', 0xee00, &(0x7f0000000500)="6ca1a9c808ca2f7d7c646e5d2cc371ce24095186890b31f7b85dea353e0101e53373fe522d189342e65998a89e33cc789f3f50b31078b555c5e30e23174e702bf3d5f470f2f17e6ea9aeae8bfa7c56d83293deb4c75c978b8f7112902c5827be44d1ebfce1d24f5afdf1e28492677f8086edec9703dbe30977f69f01e0064a30a9815bea951fae839f19c3c9075bab866d1d") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000340)={r4, r5+60000000}, 0x1, 0x1, 0x1, {0x0, r6}}, 0xd1) 06:46:27 executing program 4: mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='xfs\x00', 0x200000, &(0x7f0000000480)='\xc0\x00') (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="71756912cb2865742c000a98fc2aab17a0bebc2683ac9372aeb3adf88b342f17387a00f86d5821d85a675ebfedc47fbe4ec69cfb3096078d0104d115d325de2a58674404b0e2c28b230fdda7a6ecd1efcb4593a25952f27795d4f58bfffddb32ee2a9ae808a3dbf27f61ada637893f38384fed7a57f46d2ce3f292606300000000000000950b77"]) (async) r0 = syz_io_uring_complete(0x0) (async) mkdir(&(0x7f00000005c0)='./file0/file0\x00', 0x100) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={{}, {r1, r2/1000+10000}}, 0x0) syz_io_uring_setup(0x1a6d, &(0x7f0000000240)={0x0, 0xefc0, 0x10, 0x1, 0x84, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000002c0)=0x0) (async) rename(&(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000640)='./file0/file0\x00') quotactl(0x1, &(0x7f00000004c0)='./file0\x00', 0xee00, &(0x7f0000000500)="6ca1a9c808ca2f7d7c646e5d2cc371ce24095186890b31f7b85dea353e0101e53373fe522d189342e65998a89e33cc789f3f50b31078b555c5e30e23174e702bf3d5f470f2f17e6ea9aeae8bfa7c56d83293deb4c75c978b8f7112902c5827be44d1ebfce1d24f5afdf1e28492677f8086edec9703dbe30977f69f01e0064a30a9815bea951fae839f19c3c9075bab866d1d") (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000340)={r4, r5+60000000}, 0x1, 0x1, 0x1, {0x0, r6}}, 0xd1) 06:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2593.405382][T10255] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value [ 2593.413916][T10224] macsec0 speed is unknown, defaulting to 1000 [ 2593.472731][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2593.482737][T10260] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:27 executing program 4: mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='xfs\x00', 0x200000, &(0x7f0000000480)='\xc0\x00') (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="71756912cb2865742c000a98fc2aab17a0bebc2683ac9372aeb3adf88b342f17387a00f86d5821d85a675ebfedc47fbe4ec69cfb3096078d0104d115d325de2a58674404b0e2c28b230fdda7a6ecd1efcb4593a25952f27795d4f58bfffddb32ee2a9ae808a3dbf27f61ada637893f38384fed7a57f46d2ce3f292606300000000000000950b77"]) (async, rerun: 64) r0 = syz_io_uring_complete(0x0) (async, rerun: 64) mkdir(&(0x7f00000005c0)='./file0/file0\x00', 0x100) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={{}, {r1, r2/1000+10000}}, 0x0) syz_io_uring_setup(0x1a6d, &(0x7f0000000240)={0x0, 0xefc0, 0x10, 0x1, 0x84, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000002c0)=0x0) rename(&(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000640)='./file0/file0\x00') (async) quotactl(0x1, &(0x7f00000004c0)='./file0\x00', 0xee00, &(0x7f0000000500)="6ca1a9c808ca2f7d7c646e5d2cc371ce24095186890b31f7b85dea353e0101e53373fe522d189342e65998a89e33cc789f3f50b31078b555c5e30e23174e702bf3d5f470f2f17e6ea9aeae8bfa7c56d83293deb4c75c978b8f7112902c5827be44d1ebfce1d24f5afdf1e28492677f8086edec9703dbe30977f69f01e0064a30a9815bea951fae839f19c3c9075bab866d1d") (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000340)={r4, r5+60000000}, 0x1, 0x1, 0x1, {0x0, r6}}, 0xd1) 06:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2593.546074][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2593.597401][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2593.599853][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value [ 2593.663352][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2593.710148][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value [ 2593.766580][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2593.790075][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2593.850277][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2593.910168][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value [ 2593.936464][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2593.969972][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value [ 2594.030261][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value [ 2594.067625][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:28 executing program 0: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x0, 0xffffffffffffffff, 0xd0, 0x9, @scatter={0x6, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/216, 0xd8}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)=""/159, 0x9f}]}, &(0x7f00000005c0)="611a96135b20f4202b257c3a574c33cc19467cf514de4a15bab18266c9737cfba9a776fdf7d0264b50582e6e7fa86b63a16ab0567bfe8f6e55a044ec182ca7bcd1fb5542bc6c49297cafc9179e38aabad7f4e8cbfcfc4be045f99c029e78f97b7c78e38e0f321b005958720678ffd4a15347093314f3ad8b7db6096a9e8317921d5fd6ecf04dc99a952e352297d4092b222c725c464c26d426061ef2eafe631c883f5752bcb021cbb214f3f10cd156c5467ddd9fbf769e5ae44d19ae018050332599524f532a5eb072d76545b5078b49", &(0x7f00000006c0)=""/35, 0x3f, 0x10033, 0x2, &(0x7f0000000700)}) (async) set_mempolicy(0x3, &(0x7f0000000040)=0xfffffffeffffffff, 0x6) set_mempolicy(0x1, &(0x7f00000007c0)=0x80, 0xffffffffffff2307) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 06:46:28 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x2, 0x41, 0x81, 0x0, 0x0, 0x10a00, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40c, 0x6, @perf_config_ext={0x7, 0x2}, 0x144, 0x5, 0xb19b, 0x9, 0x1, 0xf6e9, 0x5, 0x0, 0x888, 0x0, 0x35f0934e}, 0x0, 0xc, r0, 0x2) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x2, 0x41, 0x81, 0x0, 0x0, 0x10a00, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40c, 0x6, @perf_config_ext={0x7, 0x2}, 0x144, 0x5, 0xb19b, 0x9, 0x1, 0xf6e9, 0x5, 0x0, 0x888, 0x0, 0x35f0934e}, 0x0, 0xc, r0, 0x2) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1a) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 06:46:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2594.150035][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value [ 2594.201689][T10292] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2594.218640][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:28 executing program 2: unshare(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:28 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x1001, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0xffffffffffffffff, r1, 0xd, r0, 0x1) mbind(&(0x7f0000497000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x8, 0x8, 0x0) [ 2594.281552][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x80) 06:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2594.350923][T10265] FAT-fs (loop4): Unrecognized mount option "quiË(et" or missing value 06:46:28 executing program 2: unshare(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2594.415287][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 06:46:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x80) (async) 06:46:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x80) 06:46:28 executing program 2: unshare(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:29 executing program 0: ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000080)={{}, 0x4, &(0x7f0000000040)=[0x200003, 0x7, 0x0, 0x3], 0x5}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000016c00)=""/99, 0x63}, {&(0x7f0000016c80)=""/234, 0xea}], 0x2, 0x0, 0xfffffffa) socket$inet6(0xa, 0x809, 0xca27) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000100)={0xf1e, 0x7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 06:46:29 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000001540)="eb3c8f00002ba979236174bd5041e13787b4a8891df48bde0101000240008080f801000000000000000000008985c3006fa2af3f4ac7", 0x36}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000001800)=ANY=[@ANYRESOCT, @ANYBLOB="9eed8f52e6e079c2639e8b1565b3929b0a9b043b496db472a4bea367835bdc75024ccb2647084b4dc1806d057e03456ebd08d47c5e0b038dd9f21836b1a664ba3ccc5a626b7e3e67bd0ccc776db1bfbed958bebea5aebd0af155d1196b86d927c16f8bdfbf723f551a7f14b81a1f9c4467091bc3473fbcef0750a15fa289c9342e9840a61e3234a57b9e1438a588a832b078151ececc83f2f13c7be38550d9783ff483da816a3b", @ANYBLOB="87a2c8a9b21c0f4e3ba82b69a64094ee600307aebb3d8ae52be24fd4bb48870165af683bcf0e90f093e275929f564b7a8724e27ba79711896892cb26ddf0f49ce3e8a180ea44fdf31b94d391cac830da4a5f57bc78b555617571f5c4dc67b78307598759660c86f7ea7803fb46", @ANYRESOCT=0x0, @ANYRESHEX]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000f2cff4)={0x77540947ad9a168d}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000002580)=ANY=[], 0x16) sendmsg$nl_route(r1, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@ipv4_getnexthop={0x20, 0x6a, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x50845}, 0x4000000) sendfile(r6, r6, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) 06:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:29 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2595.046374][T10331] loop4: detected capacity change from 0 to 262160 [ 2595.054608][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2595.076540][T10331] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777žíRæàyÂcž‹e³’› [ 2595.076540][T10331] ›;Im´r¤¾£gƒ[ÜuLË&GKMÁ€m~En½Ô|^ Ùò6±¦dº<ÌZbk~>g½ Ìwm±¿¾ÙX¾¾¥®½ 06:46:29 executing program 0: ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000080)={{}, 0x4, &(0x7f0000000040)=[0x200003, 0x7, 0x0, 0x3], 0x5}) (async) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000016c00)=""/99, 0x63}, {&(0x7f0000016c80)=""/234, 0xea}], 0x2, 0x0, 0xfffffffa) (async) socket$inet6(0xa, 0x809, 0xca27) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000100)={0xf1e, 0x7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) [ 2595.076540][T10331] ñUÑk†Ù'Áo‹ß¿r?U¸œDg ÃG?¼ïP¡_¢‰É4.˜@¦24¥{ž8¥ˆ¨2°xÎ̃òñ<{ã…PÙx?ôƒÚj;‡¢È©²N;¨+i¦@”î`®»=Šå+âOÔ»H‡e¯" or missing value 06:46:29 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async, rerun: 64) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x1001, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) perf_event_open(0xffffffffffffffff, r1, 0xd, r0, 0x1) (async) mbind(&(0x7f0000497000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x8, 0x8, 0x0) 06:46:29 executing program 0: ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000080)={{}, 0x4, &(0x7f0000000040)=[0x200003, 0x7, 0x0, 0x3], 0x5}) (async) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000016c00)=""/99, 0x63}, {&(0x7f0000016c80)=""/234, 0xea}], 0x2, 0x0, 0xfffffffa) socket$inet6(0xa, 0x809, 0xca27) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000100)={0xf1e, 0x7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 06:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2595.180316][T10330] macsec0 speed is unknown, defaulting to 1000 06:46:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2595.233124][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2595.258632][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2595.282951][T10355] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:46:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2595.436162][T10359] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:46:29 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2595.503750][T10362] 8021q: adding VLAN 0 to HW filter on device bond31 [ 2595.528156][T10362] bond31: (slave bridge45): Enslaving as an active interface with an up link [ 2595.537429][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): bond31: link becomes ready 06:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2595.574919][T10367] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2595.614381][T10370] 8021q: adding VLAN 0 to HW filter on device bond32 [ 2595.664823][T10370] bond32: (slave bridge46): Enslaving as an active interface with an up link [ 2595.673796][T11905] IPv6: ADDRCONF(NETDEV_CHANGE): bond32: link becomes ready [ 2595.712851][T10365] macsec0 speed is unknown, defaulting to 1000 06:46:29 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000001540)="eb3c8f00002ba979236174bd5041e13787b4a8891df48bde0101000240008080f801000000000000000000008985c3006fa2af3f4ac7", 0x36}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000001800)=ANY=[@ANYRESOCT, @ANYBLOB="9eed8f52e6e079c2639e8b1565b3929b0a9b043b496db472a4bea367835bdc75024ccb2647084b4dc1806d057e03456ebd08d47c5e0b038dd9f21836b1a664ba3ccc5a626b7e3e67bd0ccc776db1bfbed958bebea5aebd0af155d1196b86d927c16f8bdfbf723f551a7f14b81a1f9c4467091bc3473fbcef0750a15fa289c9342e9840a61e3234a57b9e1438a588a832b078151ececc83f2f13c7be38550d9783ff483da816a3b", @ANYBLOB="87a2c8a9b21c0f4e3ba82b69a64094ee600307aebb3d8ae52be24fd4bb48870165af683bcf0e90f093e275929f564b7a8724e27ba79711896892cb26ddf0f49ce3e8a180ea44fdf31b94d391cac830da4a5f57bc78b555617571f5c4dc67b78307598759660c86f7ea7803fb46", @ANYRESOCT=0x0, @ANYRESHEX]) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) (async) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000f2cff4)={0x77540947ad9a168d}) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r5, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)) (rerun: 32) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000002580)=ANY=[], 0x16) (async) sendmsg$nl_route(r1, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@ipv4_getnexthop={0x20, 0x6a, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x50845}, 0x4000000) (async) sendfile(r6, r6, &(0x7f0000000240), 0x7fff) (async) sendfile(r0, r1, 0x0, 0x8000000a) 06:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2595.911606][T10377] loop4: detected capacity change from 0 to 262160 [ 2595.923955][T10384] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2595.932919][T10377] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777žíRæàyÂcž‹e³’› [ 2595.932919][T10377] ›;Im´r¤¾£gƒ[ÜuLË&GKMÁ€m~En½Ô|^ Ùò6±¦dº<ÌZbk~>g½ Ìwm±¿¾ÙX¾¾¥®½ [ 2595.932919][T10377] ñUÑk†Ù'Áo‹ß¿r?U¸œDg ÃG?¼ïP¡_¢‰É4.˜@¦24¥{ž8¥ˆ¨2°xÎ̃òñ<{ã…PÙx?ôƒÚj;‡¢È©²N;¨+i¦@”î`®»=Šå+âOÔ»H‡e¯" or missing value 06:46:30 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x1001, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0xffffffffffffffff, r1, 0xd, r0, 0x1) mbind(&(0x7f0000497000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x8, 0x8, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x1001, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) perf_event_open(0xffffffffffffffff, r1, 0xd, r0, 0x1) (async) mbind(&(0x7f0000497000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x8, 0x8, 0x0) (async) [ 2596.027895][T10376] 8021q: adding VLAN 0 to HW filter on device bond33 [ 2596.064636][T10387] bond33: (slave bridge47): Enslaving as an active interface with an up link 06:46:30 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:30 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000001540)="eb3c8f00002ba979236174bd5041e13787b4a8891df48bde0101000240008080f801000000000000000000008985c3006fa2af3f4ac7", 0x36}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000001800)=ANY=[@ANYRESOCT, @ANYBLOB="9eed8f52e6e079c2639e8b1565b3929b0a9b043b496db472a4bea367835bdc75024ccb2647084b4dc1806d057e03456ebd08d47c5e0b038dd9f21836b1a664ba3ccc5a626b7e3e67bd0ccc776db1bfbed958bebea5aebd0af155d1196b86d927c16f8bdfbf723f551a7f14b81a1f9c4467091bc3473fbcef0750a15fa289c9342e9840a61e3234a57b9e1438a588a832b078151ececc83f2f13c7be38550d9783ff483da816a3b", @ANYBLOB="87a2c8a9b21c0f4e3ba82b69a64094ee600307aebb3d8ae52be24fd4bb48870165af683bcf0e90f093e275929f564b7a8724e27ba79711896892cb26ddf0f49ce3e8a180ea44fdf31b94d391cac830da4a5f57bc78b555617571f5c4dc67b78307598759660c86f7ea7803fb46", @ANYRESOCT=0x0, @ANYRESHEX]) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000f2cff4)={0x77540947ad9a168d}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000002580)=ANY=[], 0x16) (async) sendmsg$nl_route(r1, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@ipv4_getnexthop={0x20, 0x6a, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x50845}, 0x4000000) sendfile(r6, r6, &(0x7f0000000240), 0x7fff) (async) sendfile(r0, r1, 0x0, 0x8000000a) [ 2596.073636][T23147] IPv6: ADDRCONF(NETDEV_CHANGE): bond33: link becomes ready 06:46:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2596.131570][T10394] loop4: detected capacity change from 0 to 262160 06:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2596.191532][T10409] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2596.246467][T10412] 8021q: adding VLAN 0 to HW filter on device bond34 06:46:30 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) syz_clone3(&(0x7f00000003c0)={0x20280000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x24}, &(0x7f0000000180)=""/218, 0xda, &(0x7f0000000280)=""/232, &(0x7f0000000380)=[0x0, r1, r0, r0, r3, r0], 0x6}, 0x58) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2596.307723][T10414] bond34: (slave bridge48): Enslaving as an active interface with an up link [ 2596.316922][T10373] IPv6: ADDRCONF(NETDEV_CHANGE): bond34: link becomes ready [ 2596.331891][T10393] macsec0 speed is unknown, defaulting to 1000 06:46:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) socket$inet6(0xa, 0x800, 0x6) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x3) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0x1) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r4 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0xffffffff, 0x0, 0x1, 0x3}, 0x20) splice(r3, &(0x7f0000000100)=0x9, r4, &(0x7f0000000180), 0x0, 0x8) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x1000, 0x0) [ 2596.408120][T10418] 8021q: adding VLAN 0 to HW filter on device bond35 06:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2596.464868][T10418] bond35: (slave bridge49): Enslaving as an active interface with an up link [ 2596.473818][T23147] IPv6: ADDRCONF(NETDEV_CHANGE): bond35: link becomes ready [ 2596.492672][T10422] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2596.555635][T10429] 8021q: adding VLAN 0 to HW filter on device bond36 [ 2596.602762][T10429] bond36: (slave bridge50): Enslaving as an active interface with an up link [ 2596.611760][ T1409] IPv6: ADDRCONF(NETDEV_CHANGE): bond36: link becomes ready 06:46:30 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2596.682695][T10434] 8021q: adding VLAN 0 to HW filter on device ipvlan2 06:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2596.724696][T10434] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2596.763043][T10437] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:46:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2596.798236][T10437] 8021q: adding VLAN 0 to HW filter on device bond37 06:46:30 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000517c0)={0x661, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r8}, {}, {r10, r13}], 0x20, "0550467e37b0a4"}) r14 = dup2(r3, r1) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xc5, &(0x7f0000000200)=""/197, 0x41000, 0x18, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xd, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r14, r0, r2, r14, 0x1, r0, r14]}, 0x80) ppoll(&(0x7f0000000100)=[{r0, 0xd401}, {r0, 0x2000}, {r0, 0x10}, {r1, 0xa00e}, {r3}, {r15, 0xb0}, {r4, 0x4113}, {r5, 0x88}, {r14, 0x500}], 0x9, 0x0, 0x0, 0x0) 06:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2596.876591][T10439] bond37: (slave bridge51): Enslaving as an active interface with an up link [ 2596.888378][T10441] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2596.905628][T10441] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2596.929852][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): bond37: link becomes ready [ 2596.939395][T10432] macsec0 speed is unknown, defaulting to 1000 [ 2596.940819][T10444] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:46:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2596.977708][T10444] 8021q: adding VLAN 0 to HW filter on device bond38 [ 2596.995843][T10446] bond38: (slave bridge52): Enslaving as an active interface with an up link [ 2597.004801][T23147] IPv6: ADDRCONF(NETDEV_CHANGE): bond38: link becomes ready 06:46:31 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async, rerun: 64) r0 = syz_clone3(0x0, 0x0) (async, rerun: 64) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) (async) ptrace(0x4207, r1) (async, rerun: 64) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) (async, rerun: 64) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) (async) ptrace(0x4207, r3) (async) ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) (async) syz_clone3(&(0x7f00000003c0)={0x20280000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x24}, &(0x7f0000000180)=""/218, 0xda, &(0x7f0000000280)=""/232, &(0x7f0000000380)=[0x0, r1, r0, r0, r3, r0], 0x6}, 0x58) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:31 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) (async) socket$inet6(0xa, 0x800, 0x6) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x3) (async) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0x1) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r4 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0xffffffff, 0x0, 0x1, 0x3}, 0x20) (async) splice(r3, &(0x7f0000000100)=0x9, r4, &(0x7f0000000180), 0x0, 0x8) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x1000, 0x0) 06:46:31 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2597.203759][T10450] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2597.217362][T10450] 8021q: adding VLAN 0 to HW filter on device bond39 [ 2597.232786][T10450] bond39: (slave bridge53): Enslaving as an active interface with an up link [ 2597.241712][T23147] IPv6: ADDRCONF(NETDEV_CHANGE): bond39: link becomes ready 06:46:31 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:31 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2597.284678][T10467] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2597.308080][T10467] 8021q: adding VLAN 0 to HW filter on device bond40 [ 2597.328068][T10467] bond40: (slave bridge54): Enslaving as an active interface with an up link [ 2597.344639][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): bond40: link becomes ready [ 2597.377166][T10465] macsec0 speed is unknown, defaulting to 1000 06:46:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:37 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:37 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) (async) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) (async) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) (async) ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) (async) syz_clone3(&(0x7f00000003c0)={0x20280000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x24}, &(0x7f0000000180)=""/218, 0xda, &(0x7f0000000280)=""/232, &(0x7f0000000380)=[0x0, r1, r0, r0, r3, r0], 0x6}, 0x58) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:37 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) socket$inet6(0xa, 0x800, 0x6) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x3) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0x1) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r4 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0xffffffff, 0x0, 0x1, 0x3}, 0x20) splice(r3, &(0x7f0000000100)=0x9, r4, &(0x7f0000000180), 0x0, 0x8) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x1000, 0x0) pipe(&(0x7f0000000000)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) (async) socket$inet6(0xa, 0x800, 0x6) (async) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x3) (async) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0x1) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0xffffffff, 0x0, 0x1, 0x3}, 0x20) (async) splice(r3, &(0x7f0000000100)=0x9, r4, &(0x7f0000000180), 0x0, 0x8) (async) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) splice(r0, 0x0, r2, 0x0, 0x1000, 0x0) (async) 06:46:37 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000517c0)={0x661, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r8}, {}, {r10, r13}], 0x20, "0550467e37b0a4"}) r14 = dup2(r3, r1) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xc5, &(0x7f0000000200)=""/197, 0x41000, 0x18, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xd, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r14, r0, r2, r14, 0x1, r0, r14]}, 0x80) ppoll(&(0x7f0000000100)=[{r0, 0xd401}, {r0, 0x2000}, {r0, 0x10}, {r1, 0xa00e}, {r3}, {r15, 0xb0}, {r4, 0x4113}, {r5, 0x88}, {r14, 0x500}], 0x9, 0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) pipe2(&(0x7f0000000080), 0x4000) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x1, "2156816c73038c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x1, "2156816c73038c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x1, "2156816c73038c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x1, "2156816c73038c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000517c0)={0x661, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r8}, {}, {r10, r13}], 0x20, "0550467e37b0a4"}) (async) dup2(r3, r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="526dab5d33082acdbb7e3401a5b617ad239035e2ac6130edb75097fe6b920000000000000c00b6693931ff09e48db1af2bd229f94d7fa04fd45760bdaaa9e20eb2ac7b5f5e527f637b9dc0f26ceb6fba1256c8abb9394e2658d6ad266bef568bd247b0c151d97dee7a6bc8439c6ae69bc344c30680645b6d686572f3d8bf5cc4db5014f449d0bd852f3f062bbd87d782484d3d6ca5f552ddcf735a4a2d5a8e708d368878844de5d4483fd15888235a8b7872c6f4b4816ea5de795d38399630faf0ab15f0e13bbef6a33b4430d4838f1ac663cefd59a476d08c688781b9f0520d17bf89b8db7fb586ad9b82c8b472d3b7162de78adc7c1cbdcc259b986af850c37c4535b33ec4b945151f34cdaad37b0ab5682f59b8f2dc7f6d9fc24427d046b79129249f6d05"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xc5, &(0x7f0000000200)=""/197, 0x41000, 0x18, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xd, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r14, r0, r2, r14, 0x1, r0, r14]}, 0x80) (async) ppoll(&(0x7f0000000100)=[{r0, 0xd401}, {r0, 0x2000}, {r0, 0x10}, {r1, 0xa00e}, {r3}, {r15, 0xb0}, {r4, 0x4113}, {r5, 0x88}, {r14, 0x500}], 0x9, 0x0, 0x0, 0x0) (async) 06:46:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 06:46:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 06:46:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 2603.094855][T10495] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2603.124757][T10495] 8021q: adding VLAN 0 to HW filter on device bond41 06:46:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x100000000000000}, 0x0) 06:46:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x100000000000000}, 0x0) 06:46:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2603.154744][T10495] bond41: (slave bridge55): Enslaving as an active interface with an up link [ 2603.166334][T23147] IPv6: ADDRCONF(NETDEV_CHANGE): bond41: link becomes ready 06:46:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x100000000000000}, 0x0) [ 2603.199182][T10492] macsec0 speed is unknown, defaulting to 1000 [ 2603.211104][T10529] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2603.241415][T10529] 8021q: adding VLAN 0 to HW filter on device bond42 [ 2603.248894][T10531] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2603.263374][T10531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2603.282982][T10531] bond1: (slave bridge1): Enslaving as an active interface with an up link 06:46:37 executing program 2: unshare(0x6c060000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2603.300412][T10529] bond42: (slave bridge56): Enslaving as an active interface with an up link [ 2603.316151][ T1409] IPv6: ADDRCONF(NETDEV_CHANGE): bond42: link becomes ready [ 2603.324901][ T1409] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 2603.401447][T10537] macsec0 speed is unknown, defaulting to 1000 06:46:37 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x6, 0x0, 0x4, 0x0, 0x5, 0x40841, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0xc000, 0x9, 0x800, 0x6, 0xfffffffffffffff8, 0x96d, 0x9, 0x0, 0x200, 0x0, 0x9}, r0, 0xa, 0xffffffffffffffff, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:46 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async, rerun: 32) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async, rerun: 64) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (async, rerun: 64) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x1, "2156816c73038c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x1, "2156816c73038c"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000517c0)={0x661, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r8}, {}, {r10, r13}], 0x20, "0550467e37b0a4"}) (async, rerun: 32) r14 = dup2(r3, r1) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xc5, &(0x7f0000000200)=""/197, 0x41000, 0x18, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xd, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r14, r0, r2, r14, 0x1, r0, r14]}, 0x80) ppoll(&(0x7f0000000100)=[{r0, 0xd401}, {r0, 0x2000}, {r0, 0x10}, {r1, 0xa00e}, {r3}, {r15, 0xb0}, {r4, 0x4113}, {r5, 0x88}, {r14, 0x500}], 0x9, 0x0, 0x0, 0x0) 06:46:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:46 executing program 2: unshare(0x6c060000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:46 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x6, 0x0, 0x4, 0x0, 0x5, 0x40841, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0xc000, 0x9, 0x800, 0x6, 0xfffffffffffffff8, 0x96d, 0x9, 0x0, 0x200, 0x0, 0x9}, r0, 0xa, 0xffffffffffffffff, 0x2) (async, rerun: 64) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2612.400419][T10552] __nla_validate_parse: 7 callbacks suppressed [ 2612.400434][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2612.415923][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:46:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2612.466100][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2612.479470][T10565] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2612.490125][T10560] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2612.506336][T10560] 8021q: adding VLAN 0 to HW filter on device bond2 06:46:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2612.514181][T10553] macsec0 speed is unknown, defaulting to 1000 [ 2612.533443][T10571] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 2612.542301][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2612.567439][T10572] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 2612.575873][T23147] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 2612.586653][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 06:46:52 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x9, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x3f, 0x43, 0x6e, 0x1f, 0x0, 0x4a6, 0x40, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x4000, 0x0, 0x3, 0x0, 0xff, 0x1f, 0xfff8, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r0, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0xff, 0xfd, 0x6, 0x0, 0x4, 0x41081, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x1000, 0x1f}, 0x400, 0x8, 0xfff, 0x3, 0x7, 0x0, 0x7ff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x3, 0x2, 0xaffc, 0x40, 0x2, 0x4}) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x100a}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r5 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) tee(r4, r5, 0x0, 0xc) 06:46:52 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000e8000000000000ff000002850000000e000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_journal_start\x00', r2}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) write$binfmt_script(r4, &(0x7f0000000980)={'#! ', './file0', [{0x20, 'ext4_journal_start\x00'}], 0xa, "e602660efbf913fa296802e0afcdeb7f88ea46c373c7b1c552119df6c635bfd9e7b7348739f8331fb7248ab2edc8c56e406f7d8470b67a3af1c1a5a6599d5959e31e9bb34c30f749d7977c3595afdad4f2605fe087db494745de6c38d2266602d52315db78eb286273f4197c802e4c977c18cb0e59b71ea49732acd48237751533337b5d0f79b523d3c8b78057fc26b31d0f6205bcbeb0e3f7cb505a665b7f1efc92f56c83bbfdc7464dd12a2ce4130fb7ec1f67466ef2405c7dfbddfcd84b5d378cc4c9"}, 0xe3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r3, 0x0, 0x421, &(0x7f0000000540)='bdev!)-%+wl`n\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;B\xe3\x1a\x17f\xb2@\x8a\x8b6\xff\xff\xff\x01fE\xaea\x10{\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xb6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d*\b\xe4\"\x1e\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8byx/J\xb3\xaa\xd4W\xd2\xedN\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj \xaf<\xf1\xbe`4,q[M\xb0-\xd0\x8cloB\x91&\xf3\x97\xd7-\xb78\\\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k|\x8d\xc7x\x01\x0e\xb4~\xb2\xdeQ\xdf\x8c\x1dTi\xafq\xde\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xe25\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\x00\x00\x00\x00\x00\x00\x00\x00\xc1b\xbc\\l$+ne\x8a\xa3\xcc\x88\xda\xea\x9f\xc4\x17{=2{2\xf9i\x06\x06u\xe6&\x90\bu\x00\x00\x00\x00\x00\x00\n\xf07~\xa8\xc5\x05\xa5\x03\xc0\xb5r$q@\xe4\xc7\xa1B>\xfe\x03s\a\x1b4k\x80\x1e\xe1\x87\xb0\x9b\xb7aS\x9b\x04x\xb2\x1f\xa2\x00\x1f\x80R\xf2b\xc9+\xe6\x88\xf5\xff\x88#\xd0\xe4\xf5z\xa7#c\xe4!4N\xbf\x8ar\x8e\x1c\x11=\x8b\xf8G\xfc )\r\xbe\x1e\xae\x14@\xa9\x94\xa95i\x91\x87\x10\x18\x92UMW\xc6\xd4n\xa1\x1a\xdf\xe6H\x1b\xae\x02S\v\xb9A\xd3\xee\x9f\xd3{\xd1v\x06\xaa\xaa.\b\xef\x86\x17\x1c\x80\xa4\v\xf4\xe6:\xf4\xab\x1f\xb1\xf9\xdf\xab\xc5I \xc9v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\xe7\xb6\xc2>\xc3\xa4@\xbb\xb3\xed\xba\rr\xf05\xd4\xfep{\xc58\x95\xdf\x06v\xd8\xea\xac{Q\x8f\xa9\x0e\x12\xd3%u\x1f;\xb6\x88\xe8\xf6\xe4$%\x8b\x00Uw\x8b\xed\xbf\xbb)\xb0\xfbk\x95\xeag{\xa9\x82\r\xc3\xf4&\xc6\x82\xd2\x1a\xa7\x8e\xff\x1c4\x90\xd3\xea\xb2!m\x98\x95x>\xcb\xe9\xa5\x92\x84g\n\xef$\\\xe7Y\x82B\xcch\x06\x17\x82\x11A\xaab\xf6h\xde\x87O\xf2w\x94\xbb1\xb0\xe9\x80\xf0\x85\xb8\xeb\x19v\xe0\xcb\xf6\xcd@%I\x03n\xe3\xf5\xa6\x8c\x1d\xf1\xc1\xb1\x7f=\'\xd3\xec;|\x04>z\xf6}\x01\xa8\xd8k\xed\xd5\b\xd9i\xcb\x12\x96}\xd4\xb2\xd0\xc8\xf1\xf4\xc4\xb0(\xd0\xf3\t#e\xd1\r:\xef\xec\n\xc3\xad<\"\xa8\x0e\x98\xc9\x97\"\xb1\xd4G\xc5~C\x98\x04\xe2\xec\x98\xf4\x11\x81\ag`\x88^6i}\xc4\xbduI\xf9\xbb\xcc\xac\xcd\x1a\xc2\xbe$\xb58\xc3v|\xbf\rx\xf4\xe1\xa57P\xb24\xa1}\x8e\xaaC\xd3\xdb\x93\xee\xb1y\xc1\xfb\x9b\x02\xdd\"\xdf\xb2P\x0f1\xcf\xf3/cl\x85K\xa2\xc8om\"\x80vh~\xd4\n\xa2\x02\xea+B\x8a+#n\x8fGP\xa8Vj\xa9\x00\xcf\xac\x17\xe0]\\\x9b\xcbiU\x88\xef\x98\xba\xb0xLb\x12\x934\x0f\x98\"o\x1d\xa0J\x87y8oW\xeeE\xf1\xdf0U\xad\xae\x9e\\f\xd7\x8b\x14\x971Q\xc4\xd7\x16\x9cZD\xfc\xf4y\xfe<\xb0\xban\xde\xa0\xaf\x02eC\xad\xcf\xb7x\x10T\x9a\xca\x12\xb7\xe8J@\xcd\xef\xea\x88\x8c\xd2\x15N\x18UK\xe5i\xd9\x8b\xe2\xc6\xf00\xdfd\xfd7\xb3\xd9\xd3l\x00'/1057}, 0x13) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x6, 0x0, 0x0, 0x80, 0x0, 0x2aad, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x7319}, 0x4006, 0x4a, 0x7, 0x5, 0x1632, 0x1, 0x3f, 0x0, 0x400, 0x0, 0x7}, r5, 0x1, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001c40)={0x4, 0x80, 0x9, 0x2, 0x7, 0x4, 0x0, 0x1, 0x40010, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x221, 0x600000000000, 0x1f, 0x5, 0x80000001, 0x10001, 0x2, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x3d, 0x0, 0x0, 0x1, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0xf, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x1, 0x1, 0xb, 0x3, 0x100, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x7, 0x4, 0x1, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x1, 0x6, 0x7, 0x3, 0x80, 0x10}, @map_fd={0x18, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @ldst={0x0, 0x3, 0x2, 0x9, 0xa, 0x8, 0xfffffffffffffffc}, @generic={0x9, 0x3, 0x9, 0x7, 0x1f}, @call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000380)='GPL\x00', 0x7f99, 0x1000, &(0x7f0000000b00)=""/4096, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0x8, 0x7fffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[r1, r1, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 06:46:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:52 executing program 2: unshare(0x6c060000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:46:52 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x6, 0x0, 0x4, 0x0, 0x5, 0x40841, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0xc000, 0x9, 0x800, 0x6, 0xfffffffffffffff8, 0x96d, 0x9, 0x0, 0x200, 0x0, 0x9}, r0, 0xa, 0xffffffffffffffff, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x6, 0x0, 0x4, 0x0, 0x5, 0x40841, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0xc000, 0x9, 0x800, 0x6, 0xfffffffffffffff8, 0x96d, 0x9, 0x0, 0x200, 0x0, 0x9}, r0, 0xa, 0xffffffffffffffff, 0x2) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 06:46:52 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) (async) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000e8000000000000ff000002850000000e000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_journal_start\x00', r2}, 0x10) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) write$binfmt_script(r4, &(0x7f0000000980)={'#! ', './file0', [{0x20, 'ext4_journal_start\x00'}], 0xa, "e602660efbf913fa296802e0afcdeb7f88ea46c373c7b1c552119df6c635bfd9e7b7348739f8331fb7248ab2edc8c56e406f7d8470b67a3af1c1a5a6599d5959e31e9bb34c30f749d7977c3595afdad4f2605fe087db494745de6c38d2266602d52315db78eb286273f4197c802e4c977c18cb0e59b71ea49732acd48237751533337b5d0f79b523d3c8b78057fc26b31d0f6205bcbeb0e3f7cb505a665b7f1efc92f56c83bbfdc7464dd12a2ce4130fb7ec1f67466ef2405c7dfbddfcd84b5d378cc4c9"}, 0xe3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r3, 0x0, 0x421, &(0x7f0000000540)='bdev!)-%+wl`n\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;B\xe3\x1a\x17f\xb2@\x8a\x8b6\xff\xff\xff\x01fE\xaea\x10{\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xb6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d*\b\xe4\"\x1e\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8byx/J\xb3\xaa\xd4W\xd2\xedN\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj \xaf<\xf1\xbe`4,q[M\xb0-\xd0\x8cloB\x91&\xf3\x97\xd7-\xb78\\\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k|\x8d\xc7x\x01\x0e\xb4~\xb2\xdeQ\xdf\x8c\x1dTi\xafq\xde\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xe25\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\x00\x00\x00\x00\x00\x00\x00\x00\xc1b\xbc\\l$+ne\x8a\xa3\xcc\x88\xda\xea\x9f\xc4\x17{=2{2\xf9i\x06\x06u\xe6&\x90\bu\x00\x00\x00\x00\x00\x00\n\xf07~\xa8\xc5\x05\xa5\x03\xc0\xb5r$q@\xe4\xc7\xa1B>\xfe\x03s\a\x1b4k\x80\x1e\xe1\x87\xb0\x9b\xb7aS\x9b\x04x\xb2\x1f\xa2\x00\x1f\x80R\xf2b\xc9+\xe6\x88\xf5\xff\x88#\xd0\xe4\xf5z\xa7#c\xe4!4N\xbf\x8ar\x8e\x1c\x11=\x8b\xf8G\xfc )\r\xbe\x1e\xae\x14@\xa9\x94\xa95i\x91\x87\x10\x18\x92UMW\xc6\xd4n\xa1\x1a\xdf\xe6H\x1b\xae\x02S\v\xb9A\xd3\xee\x9f\xd3{\xd1v\x06\xaa\xaa.\b\xef\x86\x17\x1c\x80\xa4\v\xf4\xe6:\xf4\xab\x1f\xb1\xf9\xdf\xab\xc5I \xc9v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\xe7\xb6\xc2>\xc3\xa4@\xbb\xb3\xed\xba\rr\xf05\xd4\xfep{\xc58\x95\xdf\x06v\xd8\xea\xac{Q\x8f\xa9\x0e\x12\xd3%u\x1f;\xb6\x88\xe8\xf6\xe4$%\x8b\x00Uw\x8b\xed\xbf\xbb)\xb0\xfbk\x95\xeag{\xa9\x82\r\xc3\xf4&\xc6\x82\xd2\x1a\xa7\x8e\xff\x1c4\x90\xd3\xea\xb2!m\x98\x95x>\xcb\xe9\xa5\x92\x84g\n\xef$\\\xe7Y\x82B\xcch\x06\x17\x82\x11A\xaab\xf6h\xde\x87O\xf2w\x94\xbb1\xb0\xe9\x80\xf0\x85\xb8\xeb\x19v\xe0\xcb\xf6\xcd@%I\x03n\xe3\xf5\xa6\x8c\x1d\xf1\xc1\xb1\x7f=\'\xd3\xec;|\x04>z\xf6}\x01\xa8\xd8k\xed\xd5\b\xd9i\xcb\x12\x96}\xd4\xb2\xd0\xc8\xf1\xf4\xc4\xb0(\xd0\xf3\t#e\xd1\r:\xef\xec\n\xc3\xad<\"\xa8\x0e\x98\xc9\x97\"\xb1\xd4G\xc5~C\x98\x04\xe2\xec\x98\xf4\x11\x81\ag`\x88^6i}\xc4\xbduI\xf9\xbb\xcc\xac\xcd\x1a\xc2\xbe$\xb58\xc3v|\xbf\rx\xf4\xe1\xa57P\xb24\xa1}\x8e\xaaC\xd3\xdb\x93\xee\xb1y\xc1\xfb\x9b\x02\xdd\"\xdf\xb2P\x0f1\xcf\xf3/cl\x85K\xa2\xc8om\"\x80vh~\xd4\n\xa2\x02\xea+B\x8a+#n\x8fGP\xa8Vj\xa9\x00\xcf\xac\x17\xe0]\\\x9b\xcbiU\x88\xef\x98\xba\xb0xLb\x12\x934\x0f\x98\"o\x1d\xa0J\x87y8oW\xeeE\xf1\xdf0U\xad\xae\x9e\\f\xd7\x8b\x14\x971Q\xc4\xd7\x16\x9cZD\xfc\xf4y\xfe<\xb0\xban\xde\xa0\xaf\x02eC\xad\xcf\xb7x\x10T\x9a\xca\x12\xb7\xe8J@\xcd\xef\xea\x88\x8c\xd2\x15N\x18UK\xe5i\xd9\x8b\xe2\xc6\xf00\xdfd\xfd7\xb3\xd9\xd3l\x00'/1057}, 0x13) (async, rerun: 64) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x6, 0x0, 0x0, 0x80, 0x0, 0x2aad, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x7319}, 0x4006, 0x4a, 0x7, 0x5, 0x1632, 0x1, 0x3f, 0x0, 0x400, 0x0, 0x7}, r5, 0x1, 0xffffffffffffffff, 0x4) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001c40)={0x4, 0x80, 0x9, 0x2, 0x7, 0x4, 0x0, 0x1, 0x40010, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x221, 0x600000000000, 0x1f, 0x5, 0x80000001, 0x10001, 0x2, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x3d, 0x0, 0x0, 0x1, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0xf, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x1, 0x1, 0xb, 0x3, 0x100, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x7, 0x4, 0x1, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x1, 0x6, 0x7, 0x3, 0x80, 0x10}, @map_fd={0x18, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @ldst={0x0, 0x3, 0x2, 0x9, 0xa, 0x8, 0xfffffffffffffffc}, @generic={0x9, 0x3, 0x9, 0x7, 0x1f}, @call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000380)='GPL\x00', 0x7f99, 0x1000, &(0x7f0000000b00)=""/4096, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0x8, 0x7fffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[r1, r1, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 06:46:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2618.787541][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2618.807500][T10584] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 2618.816027][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 06:46:52 executing program 5: connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x4}, 0x3}, 0x18) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x3, 0x7, 0x4, 0x1, 0x7, 0x0, 0x1871, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:46:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:46:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:46:53 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000e8000000000000ff000002850000000e000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_journal_start\x00', r2}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) write$binfmt_script(r4, &(0x7f0000000980)={'#! ', './file0', [{0x20, 'ext4_journal_start\x00'}], 0xa, "e602660efbf913fa296802e0afcdeb7f88ea46c373c7b1c552119df6c635bfd9e7b7348739f8331fb7248ab2edc8c56e406f7d8470b67a3af1c1a5a6599d5959e31e9bb34c30f749d7977c3595afdad4f2605fe087db494745de6c38d2266602d52315db78eb286273f4197c802e4c977c18cb0e59b71ea49732acd48237751533337b5d0f79b523d3c8b78057fc26b31d0f6205bcbeb0e3f7cb505a665b7f1efc92f56c83bbfdc7464dd12a2ce4130fb7ec1f67466ef2405c7dfbddfcd84b5d378cc4c9"}, 0xe3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r3, 0x0, 0x421, &(0x7f0000000540)='bdev!)-%+wl`n\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;B\xe3\x1a\x17f\xb2@\x8a\x8b6\xff\xff\xff\x01fE\xaea\x10{\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xb6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d*\b\xe4\"\x1e\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8byx/J\xb3\xaa\xd4W\xd2\xedN\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj \xaf<\xf1\xbe`4,q[M\xb0-\xd0\x8cloB\x91&\xf3\x97\xd7-\xb78\\\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k|\x8d\xc7x\x01\x0e\xb4~\xb2\xdeQ\xdf\x8c\x1dTi\xafq\xde\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xe25\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\x00\x00\x00\x00\x00\x00\x00\x00\xc1b\xbc\\l$+ne\x8a\xa3\xcc\x88\xda\xea\x9f\xc4\x17{=2{2\xf9i\x06\x06u\xe6&\x90\bu\x00\x00\x00\x00\x00\x00\n\xf07~\xa8\xc5\x05\xa5\x03\xc0\xb5r$q@\xe4\xc7\xa1B>\xfe\x03s\a\x1b4k\x80\x1e\xe1\x87\xb0\x9b\xb7aS\x9b\x04x\xb2\x1f\xa2\x00\x1f\x80R\xf2b\xc9+\xe6\x88\xf5\xff\x88#\xd0\xe4\xf5z\xa7#c\xe4!4N\xbf\x8ar\x8e\x1c\x11=\x8b\xf8G\xfc )\r\xbe\x1e\xae\x14@\xa9\x94\xa95i\x91\x87\x10\x18\x92UMW\xc6\xd4n\xa1\x1a\xdf\xe6H\x1b\xae\x02S\v\xb9A\xd3\xee\x9f\xd3{\xd1v\x06\xaa\xaa.\b\xef\x86\x17\x1c\x80\xa4\v\xf4\xe6:\xf4\xab\x1f\xb1\xf9\xdf\xab\xc5I \xc9v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\xe7\xb6\xc2>\xc3\xa4@\xbb\xb3\xed\xba\rr\xf05\xd4\xfep{\xc58\x95\xdf\x06v\xd8\xea\xac{Q\x8f\xa9\x0e\x12\xd3%u\x1f;\xb6\x88\xe8\xf6\xe4$%\x8b\x00Uw\x8b\xed\xbf\xbb)\xb0\xfbk\x95\xeag{\xa9\x82\r\xc3\xf4&\xc6\x82\xd2\x1a\xa7\x8e\xff\x1c4\x90\xd3\xea\xb2!m\x98\x95x>\xcb\xe9\xa5\x92\x84g\n\xef$\\\xe7Y\x82B\xcch\x06\x17\x82\x11A\xaab\xf6h\xde\x87O\xf2w\x94\xbb1\xb0\xe9\x80\xf0\x85\xb8\xeb\x19v\xe0\xcb\xf6\xcd@%I\x03n\xe3\xf5\xa6\x8c\x1d\xf1\xc1\xb1\x7f=\'\xd3\xec;|\x04>z\xf6}\x01\xa8\xd8k\xed\xd5\b\xd9i\xcb\x12\x96}\xd4\xb2\xd0\xc8\xf1\xf4\xc4\xb0(\xd0\xf3\t#e\xd1\r:\xef\xec\n\xc3\xad<\"\xa8\x0e\x98\xc9\x97\"\xb1\xd4G\xc5~C\x98\x04\xe2\xec\x98\xf4\x11\x81\ag`\x88^6i}\xc4\xbduI\xf9\xbb\xcc\xac\xcd\x1a\xc2\xbe$\xb58\xc3v|\xbf\rx\xf4\xe1\xa57P\xb24\xa1}\x8e\xaaC\xd3\xdb\x93\xee\xb1y\xc1\xfb\x9b\x02\xdd\"\xdf\xb2P\x0f1\xcf\xf3/cl\x85K\xa2\xc8om\"\x80vh~\xd4\n\xa2\x02\xea+B\x8a+#n\x8fGP\xa8Vj\xa9\x00\xcf\xac\x17\xe0]\\\x9b\xcbiU\x88\xef\x98\xba\xb0xLb\x12\x934\x0f\x98\"o\x1d\xa0J\x87y8oW\xeeE\xf1\xdf0U\xad\xae\x9e\\f\xd7\x8b\x14\x971Q\xc4\xd7\x16\x9cZD\xfc\xf4y\xfe<\xb0\xban\xde\xa0\xaf\x02eC\xad\xcf\xb7x\x10T\x9a\xca\x12\xb7\xe8J@\xcd\xef\xea\x88\x8c\xd2\x15N\x18UK\xe5i\xd9\x8b\xe2\xc6\xf00\xdfd\xfd7\xb3\xd9\xd3l\x00'/1057}, 0x13) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x6, 0x0, 0x0, 0x80, 0x0, 0x2aad, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x7319}, 0x4006, 0x4a, 0x7, 0x5, 0x1632, 0x1, 0x3f, 0x0, 0x400, 0x0, 0x7}, r5, 0x1, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001c40)={0x4, 0x80, 0x9, 0x2, 0x7, 0x4, 0x0, 0x1, 0x40010, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x221, 0x600000000000, 0x1f, 0x5, 0x80000001, 0x10001, 0x2, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x3d, 0x0, 0x0, 0x1, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0xf, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x1, 0x1, 0xb, 0x3, 0x100, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x7, 0x4, 0x1, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x1, 0x6, 0x7, 0x3, 0x80, 0x10}, @map_fd={0x18, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @ldst={0x0, 0x3, 0x2, 0x9, 0xa, 0x8, 0xfffffffffffffffc}, @generic={0x9, 0x3, 0x9, 0x7, 0x1f}, @call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000380)='GPL\x00', 0x7f99, 0x1000, &(0x7f0000000b00)=""/4096, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0x8, 0x7fffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[r1, r1, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000e8000000000000ff000002850000000e000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_journal_start\x00', r2}, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000980)={'#! ', './file0', [{0x20, 'ext4_journal_start\x00'}], 0xa, "e602660efbf913fa296802e0afcdeb7f88ea46c373c7b1c552119df6c635bfd9e7b7348739f8331fb7248ab2edc8c56e406f7d8470b67a3af1c1a5a6599d5959e31e9bb34c30f749d7977c3595afdad4f2605fe087db494745de6c38d2266602d52315db78eb286273f4197c802e4c977c18cb0e59b71ea49732acd48237751533337b5d0f79b523d3c8b78057fc26b31d0f6205bcbeb0e3f7cb505a665b7f1efc92f56c83bbfdc7464dd12a2ce4130fb7ec1f67466ef2405c7dfbddfcd84b5d378cc4c9"}, 0xe3) (async) getpid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r3, 0x0, 0x421, &(0x7f0000000540)='bdev!)-%+wl`n\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;B\xe3\x1a\x17f\xb2@\x8a\x8b6\xff\xff\xff\x01fE\xaea\x10{\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xb6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d*\b\xe4\"\x1e\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8byx/J\xb3\xaa\xd4W\xd2\xedN\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj \xaf<\xf1\xbe`4,q[M\xb0-\xd0\x8cloB\x91&\xf3\x97\xd7-\xb78\\\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k|\x8d\xc7x\x01\x0e\xb4~\xb2\xdeQ\xdf\x8c\x1dTi\xafq\xde\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xe25\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\x00\x00\x00\x00\x00\x00\x00\x00\xc1b\xbc\\l$+ne\x8a\xa3\xcc\x88\xda\xea\x9f\xc4\x17{=2{2\xf9i\x06\x06u\xe6&\x90\bu\x00\x00\x00\x00\x00\x00\n\xf07~\xa8\xc5\x05\xa5\x03\xc0\xb5r$q@\xe4\xc7\xa1B>\xfe\x03s\a\x1b4k\x80\x1e\xe1\x87\xb0\x9b\xb7aS\x9b\x04x\xb2\x1f\xa2\x00\x1f\x80R\xf2b\xc9+\xe6\x88\xf5\xff\x88#\xd0\xe4\xf5z\xa7#c\xe4!4N\xbf\x8ar\x8e\x1c\x11=\x8b\xf8G\xfc )\r\xbe\x1e\xae\x14@\xa9\x94\xa95i\x91\x87\x10\x18\x92UMW\xc6\xd4n\xa1\x1a\xdf\xe6H\x1b\xae\x02S\v\xb9A\xd3\xee\x9f\xd3{\xd1v\x06\xaa\xaa.\b\xef\x86\x17\x1c\x80\xa4\v\xf4\xe6:\xf4\xab\x1f\xb1\xf9\xdf\xab\xc5I \xc9v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\xe7\xb6\xc2>\xc3\xa4@\xbb\xb3\xed\xba\rr\xf05\xd4\xfep{\xc58\x95\xdf\x06v\xd8\xea\xac{Q\x8f\xa9\x0e\x12\xd3%u\x1f;\xb6\x88\xe8\xf6\xe4$%\x8b\x00Uw\x8b\xed\xbf\xbb)\xb0\xfbk\x95\xeag{\xa9\x82\r\xc3\xf4&\xc6\x82\xd2\x1a\xa7\x8e\xff\x1c4\x90\xd3\xea\xb2!m\x98\x95x>\xcb\xe9\xa5\x92\x84g\n\xef$\\\xe7Y\x82B\xcch\x06\x17\x82\x11A\xaab\xf6h\xde\x87O\xf2w\x94\xbb1\xb0\xe9\x80\xf0\x85\xb8\xeb\x19v\xe0\xcb\xf6\xcd@%I\x03n\xe3\xf5\xa6\x8c\x1d\xf1\xc1\xb1\x7f=\'\xd3\xec;|\x04>z\xf6}\x01\xa8\xd8k\xed\xd5\b\xd9i\xcb\x12\x96}\xd4\xb2\xd0\xc8\xf1\xf4\xc4\xb0(\xd0\xf3\t#e\xd1\r:\xef\xec\n\xc3\xad<\"\xa8\x0e\x98\xc9\x97\"\xb1\xd4G\xc5~C\x98\x04\xe2\xec\x98\xf4\x11\x81\ag`\x88^6i}\xc4\xbduI\xf9\xbb\xcc\xac\xcd\x1a\xc2\xbe$\xb58\xc3v|\xbf\rx\xf4\xe1\xa57P\xb24\xa1}\x8e\xaaC\xd3\xdb\x93\xee\xb1y\xc1\xfb\x9b\x02\xdd\"\xdf\xb2P\x0f1\xcf\xf3/cl\x85K\xa2\xc8om\"\x80vh~\xd4\n\xa2\x02\xea+B\x8a+#n\x8fGP\xa8Vj\xa9\x00\xcf\xac\x17\xe0]\\\x9b\xcbiU\x88\xef\x98\xba\xb0xLb\x12\x934\x0f\x98\"o\x1d\xa0J\x87y8oW\xeeE\xf1\xdf0U\xad\xae\x9e\\f\xd7\x8b\x14\x971Q\xc4\xd7\x16\x9cZD\xfc\xf4y\xfe<\xb0\xban\xde\xa0\xaf\x02eC\xad\xcf\xb7x\x10T\x9a\xca\x12\xb7\xe8J@\xcd\xef\xea\x88\x8c\xd2\x15N\x18UK\xe5i\xd9\x8b\xe2\xc6\xf00\xdfd\xfd7\xb3\xd9\xd3l\x00'/1057}, 0x13) (async) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x6, 0x0, 0x0, 0x80, 0x0, 0x2aad, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x7319}, 0x4006, 0x4a, 0x7, 0x5, 0x1632, 0x1, 0x3f, 0x0, 0x400, 0x0, 0x7}, r5, 0x1, 0xffffffffffffffff, 0x4) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001c40)={0x4, 0x80, 0x9, 0x2, 0x7, 0x4, 0x0, 0x1, 0x40010, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x221, 0x600000000000, 0x1f, 0x5, 0x80000001, 0x10001, 0x2, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x3d, 0x0, 0x0, 0x1, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0xf, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x1, 0x1, 0xb, 0x3, 0x100, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x7, 0x4, 0x1, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x1, 0x6, 0x7, 0x3, 0x80, 0x10}, @map_fd={0x18, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @ldst={0x0, 0x3, 0x2, 0x9, 0xa, 0x8, 0xfffffffffffffffc}, @generic={0x9, 0x3, 0x9, 0x7, 0x1f}, @call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000380)='GPL\x00', 0x7f99, 0x1000, &(0x7f0000000b00)=""/4096, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0x8, 0x7fffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[r1, r1, 0xffffffffffffffff]}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) (async) [ 2618.891969][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2618.901258][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2618.913693][T10609] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 2618.921889][T10586] macsec0 speed is unknown, defaulting to 1000 [ 2618.950948][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2618.960243][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2618.982771][T10613] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 2618.993032][T10617] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2619.005114][T10617] bond43 (uninitialized): Released all slaves 06:47:02 executing program 4: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x4, 0x40, 0x9, 0x0, 0x5, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8000, 0xaac4, 0x9}}) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000710600000000020000dbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c000180050006001f0000000c0001800500060006000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000a004) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964676512a6742741ffb8b8408fc4196819d463b0f53c9fb70fd4f46a28326e11d0f0e30550d5447e8e4aee35a6a6b662858011f64c22c36a584c2a3092001fb427971852c6c0db43ed9e35919b71f9c3238bb2f6d90e14667d6881732554ad797cac36e1d51e13a3b5b3fb1fa5a16e3224df957431fd5623fa2e610ea310d3c2d8bfdbd5af1adcb069e2f388c128e853e6b41b909cc620afcac1c0f5cdd06c3e9afab82ee184de9a03e4d1e0e58ad0dca8d9b1f8"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8800800024000b196c00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffa6979e3400000a0001006e6574656d0000005800020000000000ffffff7f000000000000000000000000000000001c0005801800010000000000000000000000000000000000000000000c418ea67714000600000000000000000001000000000000000000000000000049cfa4674bd96b698b0d24b8ae97a2ad5e63197d95299be41586048398361ead8002437153490e6b75ed4695ea5df0919b2625b3599456b04207b2e9ceb938b308e5d74e3583f9b98f296fc5808772162caf4574c2168425f8ab1e1fa1de6f288a5a41e03b1bda74eb50574eafff95d12eabeb54dbdd8399745c83be2abad618a9a1"], 0x88}}, 0x24000400) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x20040080, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bind(r2, &(0x7f0000000180)=@in={0x2, 0x4e23, @empty}, 0x80) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7400ffdbdf250a0073abf2d677dc4000513dc72d76853edc885e8d72d2a59d1313bf706d9af39241abeb77221a55679b092b6eea01c7524f41b102ced7434123bdae7a09ffac646b647a56acd0fae994e52ed4897de33ec43d37f0edad77d4858c5692093e7ec01777f335e136975475082b65e949345efac563d449cf6f131f09c8dfc886990056d62a", @ANYRES32=0x0, @ANYBLOB="0200000014000100fc00000000000000000000000000000114000100fc02000000000000000000000000000014000100fc020000000000000000000000000001080002000400000014000100fe880000000000000000000000000101"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYRES64=r8], 0x48}}, 0x0) 06:47:02 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x9, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x3f, 0x43, 0x6e, 0x1f, 0x0, 0x4a6, 0x40, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x4000, 0x0, 0x3, 0x0, 0xff, 0x1f, 0xfff8, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r0, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0xff, 0xfd, 0x6, 0x0, 0x4, 0x41081, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x1000, 0x1f}, 0x400, 0x8, 0xfff, 0x3, 0x7, 0x0, 0x7ff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x3, 0x2, 0xaffc, 0x40, 0x2, 0x4}) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x100a}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r5 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) tee(r4, r5, 0x0, 0xc) syz_open_dev$vcsa(&(0x7f0000000280), 0x9, 0x1) (async) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x3f, 0x43, 0x6e, 0x1f, 0x0, 0x4a6, 0x40, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x4000, 0x0, 0x3, 0x0, 0xff, 0x1f, 0xfff8, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r0, 0x8) (async) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) (async) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0xff, 0xfd, 0x6, 0x0, 0x4, 0x41081, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x1000, 0x1f}, 0x400, 0x8, 0xfff, 0x3, 0x7, 0x0, 0x7ff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) (async) fcntl$setown(r2, 0x8, 0xffffffffffffffff) (async) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x3, 0x2, 0xaffc, 0x40, 0x2, 0x4}) (async) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r3, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) tee(r4, r5, 0x0, 0xc) (async) 06:47:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:02 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:02 executing program 5: connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x4}, 0x3}, 0x18) (async, rerun: 64) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r1 = syz_clone3(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x3, 0x7, 0x4, 0x1, 0x7, 0x0, 0x1871, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2627.998682][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.007991][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.020256][T10637] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 2628.028018][T10643] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2628.037184][T10643] bond43 (uninitialized): Released all slaves 06:47:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2628.045903][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.046643][T10652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1649 sclass=netlink_route_socket pid=10652 comm=syz-executor.4 [ 2628.055170][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.060851][T10651] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 2628.139993][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2628.149416][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.158695][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.170518][T10655] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 2628.178775][T10640] macsec0 speed is unknown, defaulting to 1000 06:47:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:02 executing program 4: r0 = socket(0x200000100000011, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x4, 0x40, 0x9, 0x0, 0x5, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8000, 0xaac4, 0x9}}) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000710600000000020000dbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c000180050006001f0000000c0001800500060006000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000a004) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964676512a6742741ffb8b8408fc4196819d463b0f53c9fb70fd4f46a28326e11d0f0e30550d5447e8e4aee35a6a6b662858011f64c22c36a584c2a3092001fb427971852c6c0db43ed9e35919b71f9c3238bb2f6d90e14667d6881732554ad797cac36e1d51e13a3b5b3fb1fa5a16e3224df957431fd5623fa2e610ea310d3c2d8bfdbd5af1adcb069e2f388c128e853e6b41b909cc620afcac1c0f5cdd06c3e9afab82ee184de9a03e4d1e0e58ad0dca8d9b1f8"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8800800024000b196c00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffa6979e3400000a0001006e6574656d0000005800020000000000ffffff7f000000000000000000000000000000001c0005801800010000000000000000000000000000000000000000000c418ea67714000600000000000000000001000000000000000000000000000049cfa4674bd96b698b0d24b8ae97a2ad5e63197d95299be41586048398361ead8002437153490e6b75ed4695ea5df0919b2625b3599456b04207b2e9ceb938b308e5d74e3583f9b98f296fc5808772162caf4574c2168425f8ab1e1fa1de6f288a5a41e03b1bda74eb50574eafff95d12eabeb54dbdd8399745c83be2abad618a9a1"], 0x88}}, 0x24000400) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x20040080, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind(r2, &(0x7f0000000180)=@in={0x2, 0x4e23, @empty}, 0x80) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7400ffdbdf250a0073abf2d677dc4000513dc72d76853edc885e8d72d2a59d1313bf706d9af39241abeb77221a55679b092b6eea01c7524f41b102ced7434123bdae7a09ffac646b647a56acd0fae994e52ed4897de33ec43d37f0edad77d4858c5692093e7ec01777f335e136975475082b65e949345efac563d449cf6f131f09c8dfc886990056d62a", @ANYRES32=0x0, @ANYBLOB="0200000014000100fc00000000000000000000000000000114000100fc02000000000000000000000000000014000100fc020000000000000000000000000001080002000400000014000100fe880000000000000000000000000101"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYRES64=r8], 0x48}}, 0x0) 06:47:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2628.185204][T10657] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 06:47:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2628.218621][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.228039][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2628.241148][T10659] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 2628.249323][T10662] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2628.257887][T10662] bond43 (uninitialized): Released all slaves 06:47:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2628.270534][T10670] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 2628.278969][T10664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1649 sclass=netlink_route_socket pid=10664 comm=syz-executor.4 [ 2628.348229][T10673] 8021q: adding VLAN 0 to HW filter on device ipvlan12 06:47:09 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x9, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x3f, 0x43, 0x6e, 0x1f, 0x0, 0x4a6, 0x40, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x4000, 0x0, 0x3, 0x0, 0xff, 0x1f, 0xfff8, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r0, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0xff, 0xfd, 0x6, 0x0, 0x4, 0x41081, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x1000, 0x1f}, 0x400, 0x8, 0xfff, 0x3, 0x7, 0x0, 0x7ff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x3, 0x2, 0xaffc, 0x40, 0x2, 0x4}) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x100a}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r5 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) tee(r4, r5, 0x0, 0xc) 06:47:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:09 executing program 4: r0 = socket(0x200000100000011, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x4, 0x40, 0x9, 0x0, 0x5, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8000, 0xaac4, 0x9}}) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000710600000000020000dbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c000180050006001f0000000c0001800500060006000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000a004) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964676512a6742741ffb8b8408fc4196819d463b0f53c9fb70fd4f46a28326e11d0f0e30550d5447e8e4aee35a6a6b662858011f64c22c36a584c2a3092001fb427971852c6c0db43ed9e35919b71f9c3238bb2f6d90e14667d6881732554ad797cac36e1d51e13a3b5b3fb1fa5a16e3224df957431fd5623fa2e610ea310d3c2d8bfdbd5af1adcb069e2f388c128e853e6b41b909cc620afcac1c0f5cdd06c3e9afab82ee184de9a03e4d1e0e58ad0dca8d9b1f8"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8800800024000b196c00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffa6979e3400000a0001006e6574656d0000005800020000000000ffffff7f000000000000000000000000000000001c0005801800010000000000000000000000000000000000000000000c418ea67714000600000000000000000001000000000000000000000000000049cfa4674bd96b698b0d24b8ae97a2ad5e63197d95299be41586048398361ead8002437153490e6b75ed4695ea5df0919b2625b3599456b04207b2e9ceb938b308e5d74e3583f9b98f296fc5808772162caf4574c2168425f8ab1e1fa1de6f288a5a41e03b1bda74eb50574eafff95d12eabeb54dbdd8399745c83be2abad618a9a1"], 0x88}}, 0x24000400) (async) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x20040080, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bind(r2, &(0x7f0000000180)=@in={0x2, 0x4e23, @empty}, 0x80) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7400ffdbdf250a0073abf2d677dc4000513dc72d76853edc885e8d72d2a59d1313bf706d9af39241abeb77221a55679b092b6eea01c7524f41b102ced7434123bdae7a09ffac646b647a56acd0fae994e52ed4897de33ec43d37f0edad77d4858c5692093e7ec01777f335e136975475082b65e949345efac563d449cf6f131f09c8dfc886990056d62a", @ANYRES32=0x0, @ANYBLOB="0200000014000100fc00000000000000000000000000000114000100fc02000000000000000000000000000014000100fc020000000000000000000000000001080002000400000014000100fe880000000000000000000000000101"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYRES64=r8], 0x48}}, 0x0) 06:47:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:09 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:09 executing program 5: connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x4}, 0x3}, 0x18) (async) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async, rerun: 32) r1 = syz_clone3(0x0, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) (async, rerun: 64) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x3, 0x7, 0x4, 0x1, 0x7, 0x0, 0x1871, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2635.031445][T10697] __nla_validate_parse: 3 callbacks suppressed [ 2635.031462][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2635.032972][T10698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1649 sclass=netlink_route_socket pid=10698 comm=syz-executor.4 [ 2635.050390][T10697] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 2635.120113][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2635.129601][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2635.141431][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2635.154923][T10705] 8021q: adding VLAN 0 to HW filter on device ipvlan14 06:47:09 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40400, 0x188, 0x8}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007fc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x44, 0x31, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x4c}, [{0x30, 0x1, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x44}}, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, r0, 0x2) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/36, 0x200000a4) r2 = socket$inet6(0xa, 0x3, 0xa) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="6401f400", @ANYRES16=r4, @ANYBLOB="080027bd7000fcdbdf25020000003800058007000100696200002c000280080001001e00000008000100000000000800020009000000080002000600000008000300ffffff7f600001800800030008000000540002800800040007000000080003000200000008000400010000000800020005000000080004000000000008000400ffffffff0800020002000000080004000400000008000400090b000008000300180500004c00098008000100ff7f000008000200006000000800010004000000080001000004000008000100a8050000080001000600000008000100693f000008000100ffffffff08000200070000000c00068008000600a4ffffff60000280540003800800010000000080080002000400000008000100ff0f00000800020007000000080002009b0a000008000100000800000800010080000000080002000000000008000100ff0f0000080002007f0000000800010040000000"], 0x164}, 0x1, 0x0, 0x0, 0x4044050}, 0x801) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) pidfd_getfd(r1, r2, 0x0) 06:47:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2635.171683][T10695] macsec0 speed is unknown, defaulting to 1000 [ 2635.203170][T10712] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 2635.212262][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2635.227066][T10714] 8021q: adding VLAN 0 to HW filter on device ipvlan15 06:47:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2635.289978][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2635.302529][T10716] 8021q: adding VLAN 0 to HW filter on device ipvlan16 [ 2635.325999][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2635.335258][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000380), &(0x7f0000000040)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000003240), &(0x7f0000000100)=@udp=r2}, 0x20) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x100a}], 0x1, 0x0, 0x0, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/36, 0x200000a4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 06:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:16 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:16 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_tx_fail\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x0, 0xaa, 0x81, 0x0, 0x8, 0x8a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x67, 0x4, @perf_config_ext={0x7, 0x9}, 0x404, 0x20, 0xffffffff, 0xc, 0x100000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x1}, r0, 0x4, r1, 0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x2c) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc4}) 06:47:16 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40400, 0x188, 0x8}, 0x18) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007fc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x44, 0x31, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x4c}, [{0x30, 0x1, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x44}}, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, r0, 0x2) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/36, 0x200000a4) (async) r2 = socket$inet6(0xa, 0x3, 0xa) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x0) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="6401f400", @ANYRES16=r4, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4044050}, 0x801) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) pidfd_getfd(r1, r2, 0x0) 06:47:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2642.370220][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2642.379537][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2642.403003][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2642.412261][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2642.421730][T10728] macsec0 speed is unknown, defaulting to 1000 [ 2642.447942][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2642.509919][T10747] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2642.536804][T10749] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000380), &(0x7f0000000040)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000003240), &(0x7f0000000100)=@udp=r2}, 0x20) (async) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/36, 0x200000a4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 06:47:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:23 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:23 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40400, 0x188, 0x8}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007fc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x44, 0x31, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x4c}, [{0x30, 0x1, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x44}}, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, r0, 0x2) (async) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000000080)=""/36, 0x200000a4) r2 = socket$inet6(0xa, 0x3, 0xa) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="6401f400", @ANYRES16=r4, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4044050}, 0x801) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) pidfd_getfd(r1, r2, 0x0) 06:47:23 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_tx_fail\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x0, 0xaa, 0x81, 0x0, 0x8, 0x8a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x67, 0x4, @perf_config_ext={0x7, 0x9}, 0x404, 0x20, 0xffffffff, 0xc, 0x100000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x1}, r0, 0x4, r1, 0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x2c) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc4}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_tx_fail\x00'}, 0x10) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x0, 0xaa, 0x81, 0x0, 0x8, 0x8a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x67, 0x4, @perf_config_ext={0x7, 0x9}, 0x404, 0x20, 0xffffffff, 0xc, 0x100000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x1}, r0, 0x4, r1, 0x3) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x2c) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc4}) (async) 06:47:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:23 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_tx_fail\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x0, 0xaa, 0x81, 0x0, 0x8, 0x8a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x67, 0x4, @perf_config_ext={0x7, 0x9}, 0x404, 0x20, 0xffffffff, 0xc, 0x100000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x1}, r0, 0x4, r1, 0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x2c) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc4}) 06:47:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2649.479930][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2649.519332][T10778] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2649.533188][T10768] macsec0 speed is unknown, defaulting to 1000 [ 2649.543909][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 06:47:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2649.600118][T10787] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2649.621520][T10789] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2649.630900][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2649.667744][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 06:47:30 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000380), &(0x7f0000000040)=@udp=r2}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000003240), &(0x7f0000000100)=@udp=r2}, 0x20) (rerun: 32) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r4, &(0x7f0000000080)=""/36, 0x200000a4) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 06:47:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:30 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:30 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x88, 0x67, &(0x7f0000000100)="02000000", 0x4) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x29, 0x5, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb, 0x2, 0xfd, 0x8, 0x6d, 0xdba}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltaction={0xf4, 0x31, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xf4}}, 0x40) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x8, r5}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private0, 0x4, 0x200, 0xf9, 0x100, 0x12e7, 0x40200, r5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x8, r6, 0x39, r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xdc05) 06:47:30 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0xf5, 0x1, 0x0, 0x3, 0x1000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1ff, 0x4, @perf_config_ext={0x7, 0x48a}, 0x4000, 0x10001, 0x9, 0xc, 0x4, 0x6, 0xf6a, 0x0, 0x81, 0x0, 0x7}, r0, 0xf, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:30 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x88, 0x67, &(0x7f0000000100)="02000000", 0x4) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x29, 0x5, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb, 0x2, 0xfd, 0x8, 0x6d, 0xdba}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltaction={0xf4, 0x31, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xf4}}, 0x40) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x8, r5}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private0, 0x4, 0x200, 0xf9, 0x100, 0x12e7, 0x40200, r5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x8, r6, 0x39, r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xdc05) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r0, 0x88, 0x67, &(0x7f0000000100)="02000000", 0x4) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket(0x29, 0x5, 0x1) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb, 0x2, 0xfd, 0x8, 0x6d, 0xdba}, 0x20) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltaction={0xf4, 0x31, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xf4}}, 0x40) (async) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x8, r5}, 0x10) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private0, 0x4, 0x200, 0xf9, 0x100, 0x12e7, 0x40200, r5}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) (async) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x8, r6, 0x39, r2}, 0x10) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x3}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xdc05) (async) [ 2656.469160][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2656.478521][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2656.487792][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 06:47:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:30 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x88, 0x67, &(0x7f0000000100)="02000000", 0x4) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket(0x29, 0x5, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb, 0x2, 0xfd, 0x8, 0x6d, 0xdba}, 0x20) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltaction={0xf4, 0x31, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xf4}}, 0x40) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x8, r5}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private0, 0x4, 0x200, 0xf9, 0x100, 0x12e7, 0x40200, r5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x8, r6, 0x39, r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x3}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xdc05) 06:47:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:30 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x88, 0x67, &(0x7f0000000100)="02000000", 0x4) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x29, 0x5, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb, 0x2, 0xfd, 0x8, 0x6d, 0xdba}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltaction={0xf4, 0x31, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xf4}}, 0x40) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x8, r5}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private0, 0x4, 0x200, 0xf9, 0x100, 0x12e7, 0x40200, r5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x8, r6, 0x39, r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xdc05) [ 2656.575397][T10817] macsec0 speed is unknown, defaulting to 1000 [ 2656.587092][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2656.596448][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2656.642220][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2656.651506][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2656.666295][T10856] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 06:47:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0xa4, 0x6, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x4, 0x3}}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x34, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0xfff3, 0x5}, {0xc, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:47:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:35 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:35 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0xf5, 0x1, 0x0, 0x3, 0x1000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1ff, 0x4, @perf_config_ext={0x7, 0x48a}, 0x4000, 0x10001, 0x9, 0xc, 0x4, 0x6, 0xf6a, 0x0, 0x81, 0x0, 0x7}, r0, 0xf, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0xf5, 0x1, 0x0, 0x3, 0x1000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1ff, 0x4, @perf_config_ext={0x7, 0x48a}, 0x4000, 0x10001, 0x9, 0xc, 0x4, 0x6, 0xf6a, 0x0, 0x81, 0x0, 0x7}, r0, 0xf, 0xffffffffffffffff, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 06:47:35 executing program 1: set_mempolicy(0x8000, &(0x7f0000000000)=0xfa, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8000, 0xf829, 0x8, 0x3ff, {{0x32, 0x4, 0x0, 0x6, 0xc8, 0x64, 0x0, 0x6e, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, {[@timestamp={0x44, 0x24, 0xfe, 0x0, 0x3, [0x0, 0x7884fb42, 0x401, 0x6, 0x6, 0x6, 0x7, 0x10000]}, @lsrr={0x83, 0xb, 0x7e, [@local, @multicast2]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x12, "4e79612629e1a4049acd94593bab58cd"}]}, @generic={0x88, 0xf, "b84b079aadf31dcaced226f2d4"}, @lsrr={0x83, 0xb, 0x34, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x44, 0x7e, 0x1, 0x9, [{@multicast2, 0x3}, {@local, 0x401}, {@local, 0x2}, {@private=0xa010101, 0x5}, {@rand_addr=0x64010100, 0x2}, {@empty, 0x7ff}, {@rand_addr=0x64010100, 0xfffffff9}, {@local, 0x3}]}, @ssrr={0x89, 0xf, 0x84, [@rand_addr=0x64010102, @local, @broadcast]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001400080029bd7000fbdbdf25024004fe3dab8dfa510c96e8b81c8df6501e80091a695e0d2ac90ed4467a85b8e7149c01bc3986ad3972c28f6cb7e67df6ee370eac86e9de5cec", @ANYRES32=r0, @ANYBLOB="08000100e0000002080009000900000008000200ac1414bb08000200ffffffff08000400e00000010800040064010101"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4021800) set_mempolicy(0x8000, &(0x7f0000000100)=0x6e4a, 0xd63) set_mempolicy(0x0, &(0x7f0000000180)=0x3ff, 0x7) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/36, 0x200000a4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbc8b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x7, 0x3, 0x4, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x138f}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xf, 0x8, 0x1, 0x18}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xb1, &(0x7f00000004c0)=""/177, 0x41100, 0x0, '\x00', r0, 0x1a, r1, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x8, 0xffffffff}, 0x10, 0x834b, r2, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) set_mempolicy(0x4000, &(0x7f0000000040)=0x800, 0x4) set_mempolicy(0x8001, &(0x7f0000000140)=0x3, 0x5) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:47:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2661.532092][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2661.541448][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2661.554273][T10881] device ipvlan2 entered promiscuous mode [ 2661.562500][T10881] bridge0: port 3(ipvlan2) entered blocking state [ 2661.569024][T10881] bridge0: port 3(ipvlan2) entered disabled state 06:47:35 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0xf5, 0x1, 0x0, 0x3, 0x1000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1ff, 0x4, @perf_config_ext={0x7, 0x48a}, 0x4000, 0x10001, 0x9, 0xc, 0x4, 0x6, 0xf6a, 0x0, 0x81, 0x0, 0x7}, r0, 0xf, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e000044000280", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2661.587364][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2661.598282][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2661.607550][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e000044000280", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0xa4, 0x6, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x4, 0x3}}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x34, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0xfff3, 0x5}, {0xc, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2661.689359][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2661.698773][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2661.716231][T10883] macsec0 speed is unknown, defaulting to 1000 [ 2661.745982][T10908] device ipvlan2 entered promiscuous mode [ 2661.755222][T10908] bridge0: port 3(ipvlan2) entered blocking state [ 2661.761764][T10908] bridge0: port 3(ipvlan2) entered disabled state [ 2661.784719][T10910] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e000044000280", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2661.794085][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2661.803558][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 06:47:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0xa4, 0x6, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x4, 0x3}}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x34, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0xfff3, 0x5}, {0xc, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0xa4, 0x6, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x4, 0x3}}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x34, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0xfff3, 0x5}, {0xc, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) (async) 06:47:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e0000440002800800", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2661.891600][T10919] device ipvlan2 entered promiscuous mode [ 2661.900212][T10919] bridge0: port 3(ipvlan2) entered blocking state [ 2661.906749][T10919] bridge0: port 3(ipvlan2) entered disabled state [ 2661.942923][T10922] device ipvlan2 entered promiscuous mode [ 2661.950080][T10922] bridge0: port 3(ipvlan2) entered blocking state [ 2661.956559][T10922] bridge0: port 3(ipvlan2) entered disabled state 06:47:36 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e0000440002800800", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2662.072861][T10927] macsec0 speed is unknown, defaulting to 1000 06:47:41 executing program 1: set_mempolicy(0x8000, &(0x7f0000000000)=0xfa, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8000, 0xf829, 0x8, 0x3ff, {{0x32, 0x4, 0x0, 0x6, 0xc8, 0x64, 0x0, 0x6e, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, {[@timestamp={0x44, 0x24, 0xfe, 0x0, 0x3, [0x0, 0x7884fb42, 0x401, 0x6, 0x6, 0x6, 0x7, 0x10000]}, @lsrr={0x83, 0xb, 0x7e, [@local, @multicast2]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x12, "4e79612629e1a4049acd94593bab58cd"}]}, @generic={0x88, 0xf, "b84b079aadf31dcaced226f2d4"}, @lsrr={0x83, 0xb, 0x34, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x44, 0x7e, 0x1, 0x9, [{@multicast2, 0x3}, {@local, 0x401}, {@local, 0x2}, {@private=0xa010101, 0x5}, {@rand_addr=0x64010100, 0x2}, {@empty, 0x7ff}, {@rand_addr=0x64010100, 0xfffffff9}, {@local, 0x3}]}, @ssrr={0x89, 0xf, 0x84, [@rand_addr=0x64010102, @local, @broadcast]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001400080029bd7000fbdbdf25024004fe3dab8dfa510c96e8b81c8df6501e80091a695e0d2ac90ed4467a85b8e7149c01bc3986ad3972c28f6cb7e67df6ee370eac86e9de5cec", @ANYRES32=r0, @ANYBLOB="08000100e0000002080009000900000008000200ac1414bb08000200ffffffff08000400e00000010800040064010101"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4021800) set_mempolicy(0x8000, &(0x7f0000000100)=0x6e4a, 0xd63) set_mempolicy(0x0, &(0x7f0000000180)=0x3ff, 0x7) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/36, 0x200000a4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbc8b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x7, 0x3, 0x4, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x138f}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xf, 0x8, 0x1, 0x18}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xb1, &(0x7f00000004c0)=""/177, 0x41100, 0x0, '\x00', r0, 0x1a, r1, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x8, 0xffffffff}, 0x10, 0x834b, r2, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) set_mempolicy(0x4000, &(0x7f0000000040)=0x800, 0x4) set_mempolicy(0x8001, &(0x7f0000000140)=0x3, 0x5) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x100a}], 0x1, 0x0, 0x0, 0x0) set_mempolicy(0x8000, &(0x7f0000000000)=0xfa, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8000, 0xf829, 0x8, 0x3ff, {{0x32, 0x4, 0x0, 0x6, 0xc8, 0x64, 0x0, 0x6e, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, {[@timestamp={0x44, 0x24, 0xfe, 0x0, 0x3, [0x0, 0x7884fb42, 0x401, 0x6, 0x6, 0x6, 0x7, 0x10000]}, @lsrr={0x83, 0xb, 0x7e, [@local, @multicast2]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x12, "4e79612629e1a4049acd94593bab58cd"}]}, @generic={0x88, 0xf, "b84b079aadf31dcaced226f2d4"}, @lsrr={0x83, 0xb, 0x34, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x44, 0x7e, 0x1, 0x9, [{@multicast2, 0x3}, {@local, 0x401}, {@local, 0x2}, {@private=0xa010101, 0x5}, {@rand_addr=0x64010100, 0x2}, {@empty, 0x7ff}, {@rand_addr=0x64010100, 0xfffffff9}, {@local, 0x3}]}, @ssrr={0x89, 0xf, 0x84, [@rand_addr=0x64010102, @local, @broadcast]}]}}}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001400080029bd7000fbdbdf25024004fe3dab8dfa510c96e8b81c8df6501e80091a695e0d2ac90ed4467a85b8e7149c01bc3986ad3972c28f6cb7e67df6ee370eac86e9de5cec", @ANYRES32=r0, @ANYBLOB="08000100e0000002080009000900000008000200ac1414bb08000200ffffffff08000400e00000010800040064010101"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4021800) (async) set_mempolicy(0x8000, &(0x7f0000000100)=0x6e4a, 0xd63) (async) set_mempolicy(0x0, &(0x7f0000000180)=0x3ff, 0x7) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000000080)=""/36, 0x200000a4) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbc8b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x7, 0x3, 0x4, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x138f}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xf, 0x8, 0x1, 0x18}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xb1, &(0x7f00000004c0)=""/177, 0x41100, 0x0, '\x00', r0, 0x1a, r1, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x8, 0xffffffff}, 0x10, 0x834b, r2, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) set_mempolicy(0x4000, &(0x7f0000000040)=0x800, 0x4) (async) set_mempolicy(0x8001, &(0x7f0000000140)=0x3, 0x5) (async) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) 06:47:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e0000440002800800", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) set_mempolicy(0x2, &(0x7f00000000c0)=0x7, 0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) r3 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r2, 0x29, 0x98, 0x5, 0x24, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x401, 0x2}}) 06:47:42 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:42 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x24f}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x7f) r4 = mmap$IORING_OFF_SQES(&(0x7f000049a000/0x4000)=nil, 0x4000, 0x2000003, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f000049d000/0x1000)=nil, 0x1000, 0x64, 0x1}, 0x3) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e000044000280080005", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2667.946398][T10936] __nla_validate_parse: 6 callbacks suppressed [ 2667.946412][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2667.961949][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2667.971277][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:47:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e000044000280080005", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2668.022630][T10939] bridge0: port 3(ipvlan2) entered blocking state [ 2668.029371][T10939] bridge0: port 3(ipvlan2) entered disabled state [ 2668.040597][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2668.050078][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e000044000280080005", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2668.075368][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2668.084835][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2668.095541][T10937] macsec0 speed is unknown, defaulting to 1000 06:47:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) set_mempolicy(0x2, &(0x7f00000000c0)=0x7, 0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) r3 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r2, 0x29, 0x98, 0x5, 0x24, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x401, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) set_mempolicy(0x2, &(0x7f00000000c0)=0x7, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) (async) memfd_secret(0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r2, 0x29, 0x98, 0x5, 0x24, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x401, 0x2}}) (async) [ 2668.120371][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2668.130882][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2668.140206][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2668.203840][T10956] bridge0: port 3(ipvlan2) entered blocking state [ 2668.210682][T10956] bridge0: port 3(ipvlan2) entered disabled state 06:47:49 executing program 1: set_mempolicy(0x8000, &(0x7f0000000000)=0xfa, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8000, 0xf829, 0x8, 0x3ff, {{0x32, 0x4, 0x0, 0x6, 0xc8, 0x64, 0x0, 0x6e, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, {[@timestamp={0x44, 0x24, 0xfe, 0x0, 0x3, [0x0, 0x7884fb42, 0x401, 0x6, 0x6, 0x6, 0x7, 0x10000]}, @lsrr={0x83, 0xb, 0x7e, [@local, @multicast2]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x12, "4e79612629e1a4049acd94593bab58cd"}]}, @generic={0x88, 0xf, "b84b079aadf31dcaced226f2d4"}, @lsrr={0x83, 0xb, 0x34, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x44, 0x7e, 0x1, 0x9, [{@multicast2, 0x3}, {@local, 0x401}, {@local, 0x2}, {@private=0xa010101, 0x5}, {@rand_addr=0x64010100, 0x2}, {@empty, 0x7ff}, {@rand_addr=0x64010100, 0xfffffff9}, {@local, 0x3}]}, @ssrr={0x89, 0xf, 0x84, [@rand_addr=0x64010102, @local, @broadcast]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001400080029bd7000fbdbdf25024004fe3dab8dfa510c96e8b81c8df6501e80091a695e0d2ac90ed4467a85b8e7149c01bc3986ad3972c28f6cb7e67df6ee370eac86e9de5cec", @ANYRES32=r0, @ANYBLOB="08000100e0000002080009000900000008000200ac1414bb08000200ffffffff08000400e00000010800040064010101"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4021800) (async) set_mempolicy(0x8000, &(0x7f0000000100)=0x6e4a, 0xd63) (async) set_mempolicy(0x0, &(0x7f0000000180)=0x3ff, 0x7) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000000080)=""/36, 0x200000a4) (async) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbc8b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x7, 0x3, 0x4, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x138f}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xf, 0x8, 0x1, 0x18}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xb1, &(0x7f00000004c0)=""/177, 0x41100, 0x0, '\x00', r0, 0x1a, r1, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x8, 0xffffffff}, 0x10, 0x834b, r2, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) set_mempolicy(0x4000, &(0x7f0000000040)=0x800, 0x4) (async) set_mempolicy(0x8001, &(0x7f0000000140)=0x3, 0x5) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:47:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:49 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) set_mempolicy(0x2, &(0x7f00000000c0)=0x7, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) r3 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r2, 0x29, 0x98, 0x5, 0x24, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x401, 0x2}}) 06:47:49 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x2) (async) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x24f}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x7f) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f000049a000/0x4000)=nil, 0x4000, 0x2000003, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f000049d000/0x1000)=nil, 0x1000, 0x64, 0x1}, 0x3) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf, 0x6, "426056e82fe3be24ad95e2"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x218, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x18, 0x6, "695ec8654d5d6292ae71e9d6ac1c4e82ce2b554d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELFLOWTABLE={0x1b0, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x170, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x4d4}, 0x1, 0x0, 0x0, 0x1}, 0x4810) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb1}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 06:47:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf, 0x6, "426056e82fe3be24ad95e2"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x218, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x18, 0x6, "695ec8654d5d6292ae71e9d6ac1c4e82ce2b554d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELFLOWTABLE={0x1b0, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x170, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x4d4}, 0x1, 0x0, 0x0, 0x1}, 0x4810) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb1}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) [ 2675.209767][T10976] bridge0: port 3(ipvlan2) entered blocking state [ 2675.216248][T10976] bridge0: port 3(ipvlan2) entered disabled state [ 2675.225496][T10973] __nla_validate_parse: 1 callbacks suppressed [ 2675.225505][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2675.241090][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:47:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf, 0x6, "426056e82fe3be24ad95e2"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x218, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x18, 0x6, "695ec8654d5d6292ae71e9d6ac1c4e82ce2b554d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELFLOWTABLE={0x1b0, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x170, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x4d4}, 0x1, 0x0, 0x0, 0x1}, 0x4810) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb1}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf, 0x6, "426056e82fe3be24ad95e2"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x218, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x18, 0x6, "695ec8654d5d6292ae71e9d6ac1c4e82ce2b554d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELFLOWTABLE={0x1b0, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x170, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x4d4}, 0x1, 0x0, 0x0, 0x1}, 0x4810) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb1}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) 06:47:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x48, 0x5, 0x80000001, "ae8694c36e98c434fc2e2e710b3a1fdcc1fdfd8231b216fe18b5a83c0648d9272b9820499e26ea5ae75e5e78b53cb22aec32414ab2f10f27920d4b4aa4796020a6d693f72ff4fe2e"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000000)="493010d937bc6cc4963e17307edc3f6844ec66a6a4c29dfc3f4ef9cbe37dcd8f12f459dabaa98c75f0971fd33b1d14c6f304cb3c82fb9fa45497e54b62780325e1d48873073db9e77203cacc5edc27a1cc2fe7d5", 0x54}, {&(0x7f0000000080)="0a52435c3892fe1a9cf0f3cf27359dfb84f2f9675de471e66889288561fa71b3aeb16061e35d1aee73acabfdf7f5e0a9cd628e34812d2a82e8d29d2f0449c21a82846d2d832bf993987e880d0c9a0b4fb2e72299f71a1907e4c31c6c4ed362a5f9b9b1c5c5eb400596a28a00", 0x6c}, {&(0x7f0000000100)="de3984f2daba2577e24c2659956d84d0ce0dc2a1d4cfe096f2412b67a98456b3b5aed4705089b4ec229a85fb7afd101506b9cd7000a09596dc0999afe94a134a6ef78370533161fcea1f5c5ba299bf4bfd84ae4d7977f36524cd3bd1e101ef81c19f191cd99e4b858e2a1d667f8c6fc26ff886697d6061f1eff054c01a4ca1972265f4e86bde636ad16e4a140c61540e7619587f341be171e9405549257aa6c128589693ec0e8951e0c7b4323922fddd", 0xb0}, {&(0x7f0000001700)="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", 0x1d1}], 0x4) r2 = accept4$inet(r1, &(0x7f00000001c0), &(0x7f00000002c0)=0x10, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0x95011, r2, 0xd2b1d000) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5385, &(0x7f00000003c0)=ANY=[@ANYBLOB="34fc072eb42a3250e0ea2dbc4fe69480ce6f2bb68d1a0e5babdc9c6647", @ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB, @ANYRES64=r3, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r2]) pread64(r2, &(0x7f0000000300)=""/182, 0xb6, 0x8) [ 2675.303524][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2675.314119][T10982] macsec0 speed is unknown, defaulting to 1000 [ 2675.355447][T11000] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 06:47:58 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x800) ppoll(&(0x7f00000000c0)=[{r1, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:47:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100085060000000000000000000020", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:47:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x48, 0x5, 0x80000001, "ae8694c36e98c434fc2e2e710b3a1fdcc1fdfd8231b216fe18b5a83c0648d9272b9820499e26ea5ae75e5e78b53cb22aec32414ab2f10f27920d4b4aa4796020a6d693f72ff4fe2e"}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000000)="493010d937bc6cc4963e17307edc3f6844ec66a6a4c29dfc3f4ef9cbe37dcd8f12f459dabaa98c75f0971fd33b1d14c6f304cb3c82fb9fa45497e54b62780325e1d48873073db9e77203cacc5edc27a1cc2fe7d5", 0x54}, {&(0x7f0000000080)="0a52435c3892fe1a9cf0f3cf27359dfb84f2f9675de471e66889288561fa71b3aeb16061e35d1aee73acabfdf7f5e0a9cd628e34812d2a82e8d29d2f0449c21a82846d2d832bf993987e880d0c9a0b4fb2e72299f71a1907e4c31c6c4ed362a5f9b9b1c5c5eb400596a28a00", 0x6c}, {&(0x7f0000000100)="de3984f2daba2577e24c2659956d84d0ce0dc2a1d4cfe096f2412b67a98456b3b5aed4705089b4ec229a85fb7afd101506b9cd7000a09596dc0999afe94a134a6ef78370533161fcea1f5c5ba299bf4bfd84ae4d7977f36524cd3bd1e101ef81c19f191cd99e4b858e2a1d667f8c6fc26ff886697d6061f1eff054c01a4ca1972265f4e86bde636ad16e4a140c61540e7619587f341be171e9405549257aa6c128589693ec0e8951e0c7b4323922fddd", 0xb0}, {&(0x7f0000001700)="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", 0x1d1}], 0x4) (async) r2 = accept4$inet(r1, &(0x7f00000001c0), &(0x7f00000002c0)=0x10, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0x95011, r2, 0xd2b1d000) (async) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5385, &(0x7f00000003c0)=ANY=[@ANYBLOB="34fc072eb42a3250e0ea2dbc4fe69480ce6f2bb68d1a0e5babdc9c6647", @ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB, @ANYRES64=r3, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r2]) (async) pread64(r2, &(0x7f0000000300)=""/182, 0xb6, 0x8) 06:47:58 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:58 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) (rerun: 64) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x2) (async) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x24f}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x7f) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f000049a000/0x4000)=nil, 0x4000, 0x2000003, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f000049d000/0x1000)=nil, 0x1000, 0x64, 0x1}, 0x3) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x48, 0x5, 0x80000001, "ae8694c36e98c434fc2e2e710b3a1fdcc1fdfd8231b216fe18b5a83c0648d9272b9820499e26ea5ae75e5e78b53cb22aec32414ab2f10f27920d4b4aa4796020a6d693f72ff4fe2e"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000000)="493010d937bc6cc4963e17307edc3f6844ec66a6a4c29dfc3f4ef9cbe37dcd8f12f459dabaa98c75f0971fd33b1d14c6f304cb3c82fb9fa45497e54b62780325e1d48873073db9e77203cacc5edc27a1cc2fe7d5", 0x54}, {&(0x7f0000000080)="0a52435c3892fe1a9cf0f3cf27359dfb84f2f9675de471e66889288561fa71b3aeb16061e35d1aee73acabfdf7f5e0a9cd628e34812d2a82e8d29d2f0449c21a82846d2d832bf993987e880d0c9a0b4fb2e72299f71a1907e4c31c6c4ed362a5f9b9b1c5c5eb400596a28a00", 0x6c}, {&(0x7f0000000100)="de3984f2daba2577e24c2659956d84d0ce0dc2a1d4cfe096f2412b67a98456b3b5aed4705089b4ec229a85fb7afd101506b9cd7000a09596dc0999afe94a134a6ef78370533161fcea1f5c5ba299bf4bfd84ae4d7977f36524cd3bd1e101ef81c19f191cd99e4b858e2a1d667f8c6fc26ff886697d6061f1eff054c01a4ca1972265f4e86bde636ad16e4a140c61540e7619587f341be171e9405549257aa6c128589693ec0e8951e0c7b4323922fddd", 0xb0}, {&(0x7f0000001700)="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", 0x1d1}], 0x4) (async) r2 = accept4$inet(r1, &(0x7f00000001c0), &(0x7f00000002c0)=0x10, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0x95011, r2, 0xd2b1d000) (async) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5385, &(0x7f00000003c0)=ANY=[@ANYBLOB="34fc072eb42a3250e0ea2dbc4fe69480ce6f2bb68d1a0e5babdc9c6647", @ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB, @ANYRES64=r3, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r2]) (async) pread64(r2, &(0x7f0000000300)=""/182, 0xb6, 0x8) [ 2684.474195][T11016] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2684.487505][T11019] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 06:47:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:47:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x48, 0x5, 0x80000001, "ae8694c36e98c434fc2e2e710b3a1fdcc1fdfd8231b216fe18b5a83c0648d9272b9820499e26ea5ae75e5e78b53cb22aec32414ab2f10f27920d4b4aa4796020a6d693f72ff4fe2e"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000000)="493010d937bc6cc4963e17307edc3f6844ec66a6a4c29dfc3f4ef9cbe37dcd8f12f459dabaa98c75f0971fd33b1d14c6f304cb3c82fb9fa45497e54b62780325e1d48873073db9e77203cacc5edc27a1cc2fe7d5", 0x54}, {&(0x7f0000000080)="0a52435c3892fe1a9cf0f3cf27359dfb84f2f9675de471e66889288561fa71b3aeb16061e35d1aee73acabfdf7f5e0a9cd628e34812d2a82e8d29d2f0449c21a82846d2d832bf993987e880d0c9a0b4fb2e72299f71a1907e4c31c6c4ed362a5f9b9b1c5c5eb400596a28a00", 0x6c}, {&(0x7f0000000100)="de3984f2daba2577e24c2659956d84d0ce0dc2a1d4cfe096f2412b67a98456b3b5aed4705089b4ec229a85fb7afd101506b9cd7000a09596dc0999afe94a134a6ef78370533161fcea1f5c5ba299bf4bfd84ae4d7977f36524cd3bd1e101ef81c19f191cd99e4b858e2a1d667f8c6fc26ff886697d6061f1eff054c01a4ca1972265f4e86bde636ad16e4a140c61540e7619587f341be171e9405549257aa6c128589693ec0e8951e0c7b4323922fddd", 0xb0}, {&(0x7f0000001700)="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", 0x1d1}], 0x4) r2 = accept4$inet(r1, &(0x7f00000001c0), &(0x7f00000002c0)=0x10, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0x95011, r2, 0xd2b1d000) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5385, &(0x7f00000003c0)=ANY=[@ANYBLOB="34fc072eb42a3250e0ea2dbc4fe69480ce6f2bb68d1a0e5babdc9c6647", @ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB, @ANYRES64=r3, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r2]) pread64(r2, &(0x7f0000000300)=""/182, 0xb6, 0x8) 06:47:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2684.518891][T11027] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2684.555996][T11036] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2684.585780][T11018] macsec0 speed is unknown, defaulting to 1000 06:48:05 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x800) ppoll(&(0x7f00000000c0)=[{r1, 0x100a}], 0x1, 0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x800) (async) ppoll(&(0x7f00000000c0)=[{r1, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) 06:48:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000100003050000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x48, 0x5, 0x80000001, "ae8694c36e98c434fc2e2e710b3a1fdcc1fdfd8231b216fe18b5a83c0648d9272b9820499e26ea5ae75e5e78b53cb22aec32414ab2f10f27920d4b4aa4796020a6d693f72ff4fe2e"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000000)="493010d937bc6cc4963e17307edc3f6844ec66a6a4c29dfc3f4ef9cbe37dcd8f12f459dabaa98c75f0971fd33b1d14c6f304cb3c82fb9fa45497e54b62780325e1d48873073db9e77203cacc5edc27a1cc2fe7d5", 0x54}, {&(0x7f0000000080)="0a52435c3892fe1a9cf0f3cf27359dfb84f2f9675de471e66889288561fa71b3aeb16061e35d1aee73acabfdf7f5e0a9cd628e34812d2a82e8d29d2f0449c21a82846d2d832bf993987e880d0c9a0b4fb2e72299f71a1907e4c31c6c4ed362a5f9b9b1c5c5eb400596a28a00", 0x6c}, {&(0x7f0000000100)="de3984f2daba2577e24c2659956d84d0ce0dc2a1d4cfe096f2412b67a98456b3b5aed4705089b4ec229a85fb7afd101506b9cd7000a09596dc0999afe94a134a6ef78370533161fcea1f5c5ba299bf4bfd84ae4d7977f36524cd3bd1e101ef81c19f191cd99e4b858e2a1d667f8c6fc26ff886697d6061f1eff054c01a4ca1972265f4e86bde636ad16e4a140c61540e7619587f341be171e9405549257aa6c128589693ec0e8951e0c7b4323922fddd", 0xb0}, {&(0x7f0000001700)="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", 0x1d1}], 0x4) r2 = accept4$inet(r1, &(0x7f00000001c0), &(0x7f00000002c0)=0x10, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0x95011, r2, 0xd2b1d000) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5385, &(0x7f00000003c0)=ANY=[@ANYBLOB="34fc072eb42a3250e0ea2dbc4fe69480ce6f2bb68d1a0e5babdc9c6647", @ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB, @ANYRES64=r3, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r2]) pread64(r2, &(0x7f0000000300)=""/182, 0xb6, 0x8) 06:48:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100085060000000000000000000020", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:48:05 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:48:05 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xdd, 0xc0, 0x7, 0x6, 0x0, 0x0, 0x12030, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x20, 0x3}, 0x4088, 0x5, 0x48e, 0x9, 0x0, 0x6f, 0x8, 0x0, 0x1000, 0x0, 0x1000}, r0, 0xa, r1, 0xa) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x45, 0xb8, 0x6}, 0x10) 06:48:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000100003050000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:05 executing program 4: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x80) mount$bpf(0x20000000, &(0x7f0000000500)='./file1\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_bp={&(0x7f00000004c0), 0x6}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x108, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xe000}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) r1 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x3, 'team_slave_1\x00', {0x7}, 0x40}) r3 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c1069ef8173fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000540)="57595ac1ffffffffffffff085ac19f69ca3f6741f667900ac9135eed1df1d1001cc2de870f1fffb2aed768634ef7e75eff7ead1713b08104000000fff8d198e312475ffa1d00000000100dadcd5b0757935524a6b914f525822a17b17f461d1001776fc30775507d7780e6ec4f62826086704d0000000000000000", 0x7b, 0x80000000}, {0x0, 0x0, 0x10e00}], 0x28104c0, &(0x7f00000003c0)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uni_xlate}, {@rodir}, {@fat=@quiet}]}) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r2, 0x1, 0x62, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r2, @ANYBLOB="018470919d9811e500"/28], 0x34}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r4, @ANYRESOCT, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40001}, 0x44845) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000640)='./file1\x00') [ 2691.597216][T11048] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2691.599556][T11050] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2691.617240][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2691.657143][T11057] loop4: detected capacity change from 0 to 264192 [ 2691.667633][T11057] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2691.695653][T11052] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:48:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000100003050000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2691.707310][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 06:48:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100085060000000000000000000020", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:48:05 executing program 4: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x80) mount$bpf(0x20000000, &(0x7f0000000500)='./file1\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_bp={&(0x7f00000004c0), 0x6}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x108, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xe000}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) r1 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x3, 'team_slave_1\x00', {0x7}, 0x40}) r3 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c1069ef8173fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000540)="57595ac1ffffffffffffff085ac19f69ca3f6741f667900ac9135eed1df1d1001cc2de870f1fffb2aed768634ef7e75eff7ead1713b08104000000fff8d198e312475ffa1d00000000100dadcd5b0757935524a6b914f525822a17b17f461d1001776fc30775507d7780e6ec4f62826086704d0000000000000000", 0x7b, 0x80000000}, {0x0, 0x0, 0x10e00}], 0x28104c0, &(0x7f00000003c0)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uni_xlate}, {@rodir}, {@fat=@quiet}]}) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r2, 0x1, 0x62, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r2, @ANYBLOB="018470919d9811e500"/28], 0x34}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r4, @ANYRESOCT, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40001}, 0x44845) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000640)='./file1\x00') syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x80) (async) mount$bpf(0x20000000, &(0x7f0000000500)='./file1\x00', 0x0, 0x2001001, 0x0) (async) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_bp={&(0x7f00000004c0), 0x6}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x108, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xe000}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x3, 'team_slave_1\x00', {0x7}, 0x40}) (async) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c1069ef8173fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000540)="57595ac1ffffffffffffff085ac19f69ca3f6741f667900ac9135eed1df1d1001cc2de870f1fffb2aed768634ef7e75eff7ead1713b08104000000fff8d198e312475ffa1d00000000100dadcd5b0757935524a6b914f525822a17b17f461d1001776fc30775507d7780e6ec4f62826086704d0000000000000000", 0x7b, 0x80000000}, {0x0, 0x0, 0x10e00}], 0x28104c0, &(0x7f00000003c0)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uni_xlate}, {@rodir}, {@fat=@quiet}]}) (async) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r2, 0x1, 0x62, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r2, @ANYBLOB="018470919d9811e500"/28], 0x34}}, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r4, @ANYRESOCT, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40001}, 0x44845) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async) pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000640)='./file1\x00') (async) 06:48:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2691.775991][T11049] macsec0 speed is unknown, defaulting to 1000 [ 2691.777499][T11061] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2691.798040][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2691.870850][T11069] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2691.880250][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 06:48:12 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x800) ppoll(&(0x7f00000000c0)=[{r1, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:48:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:12 executing program 4: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x80) mount$bpf(0x20000000, &(0x7f0000000500)='./file1\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_bp={&(0x7f00000004c0), 0x6}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x108, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xe000}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) r1 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x3, 'team_slave_1\x00', {0x7}, 0x40}) r3 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c1069ef8173fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000540)="57595ac1ffffffffffffff085ac19f69ca3f6741f667900ac9135eed1df1d1001cc2de870f1fffb2aed768634ef7e75eff7ead1713b08104000000fff8d198e312475ffa1d00000000100dadcd5b0757935524a6b914f525822a17b17f461d1001776fc30775507d7780e6ec4f62826086704d0000000000000000", 0x7b, 0x80000000}, {0x0, 0x0, 0x10e00}], 0x28104c0, &(0x7f00000003c0)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uni_xlate}, {@rodir}, {@fat=@quiet}]}) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r2, 0x1, 0x62, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r2, @ANYBLOB="018470919d9811e500"/28], 0x34}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r4, @ANYRESOCT, @ANYBLOB="00012abd7000fedbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000e0001006e655464657673696d0000000f0002006e657464657673696d30000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001a08008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000100000073ff01006eff7464657673696d0001000000000000007464657673696d30000008008e00030000000e0001006e657464659473696d0000000f0002006e657464657673696d30510008008e00000000005a8ae51da72bf276c93e0baf635876b5c4aa6dd7fa99bbaaafcdfb48dffa8472a1e79d997f468a873f8513ece9c42a8f1af71af25a0786d4dafeaf89063b1e69b2f56051a8711f3be6be0310dc"], 0x150}, 0x1, 0x0, 0x0, 0x40001}, 0x44845) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000640)='./file1\x00') syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x80) (async) mount$bpf(0x20000000, &(0x7f0000000500)='./file1\x00', 0x0, 0x2001001, 0x0) (async) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_bp={&(0x7f00000004c0), 0x6}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x108, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xe000}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x3, 'team_slave_1\x00', {0x7}, 0x40}) (async) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c1069ef8173fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000540)="57595ac1ffffffffffffff085ac19f69ca3f6741f667900ac9135eed1df1d1001cc2de870f1fffb2aed768634ef7e75eff7ead1713b08104000000fff8d198e312475ffa1d00000000100dadcd5b0757935524a6b914f525822a17b17f461d1001776fc30775507d7780e6ec4f62826086704d0000000000000000", 0x7b, 0x80000000}, {0x0, 0x0, 0x10e00}], 0x28104c0, &(0x7f00000003c0)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uni_xlate}, {@rodir}, {@fat=@quiet}]}) (async) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r2, 0x1, 0x62, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r2, @ANYBLOB="018470919d9811e500"/28], 0x34}}, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r4, @ANYRESOCT, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40001}, 0x44845) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async) pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000640)='./file1\x00') (async) 06:48:12 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 06:48:12 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:48:12 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xdd, 0xc0, 0x7, 0x6, 0x0, 0x0, 0x12030, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x20, 0x3}, 0x4088, 0x5, 0x48e, 0x9, 0x0, 0x6f, 0x8, 0x0, 0x1000, 0x0, 0x1000}, r0, 0xa, r1, 0xa) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x45, 0xb8, 0x6}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xdd, 0xc0, 0x7, 0x6, 0x0, 0x0, 0x12030, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x20, 0x3}, 0x4088, 0x5, 0x48e, 0x9, 0x0, 0x6f, 0x8, 0x0, 0x1000, 0x0, 0x1000}, r0, 0xa, r1, 0xa) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) (async) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x45, 0xb8, 0x6}, 0x10) (async) [ 2698.718206][T11095] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2698.734597][T11095] 8021q: adding VLAN 0 to HW filter on device bond43 [ 2698.743892][T11098] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:48:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:12 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 06:48:12 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60d64d4d00300400fe880000000000000000000000000001ff020000000000000000000000000001020190780000000060241965d4036b27f3d541a68870717c6fa6004000003c00ff020000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000000700000000000000950000000000000017398657435694a558273ad1326fc6eee6a1037a74cfb5af100fc4e94d523d9b220d05856955b2dc8996ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f68"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x9, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000180)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x0, 0x4, 0x7, 0x80, "b7e37afabaeec4ef6b12fe1f227fc1d887d1ee12c41c4c882b9131ea597612f5a3b12efd35f890f82a784d84543963571fe167e8b53ff0274bfc9d9fc89493", 0x19}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x6}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}]}}]}, 0x68}}, 0x0) [ 2698.762431][T11100] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2698.781185][T11109] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2698.807788][T11109] 8021q: adding VLAN 0 to HW filter on device bond44 06:48:12 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 06:48:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:12 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) (async) getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60d64d4d00300400fe880000000000000000000000000001ff020000000000000000000000000001020190780000000060241965d4036b27f3d541a68870717c6fa6004000003c00ff020000000000000000000000000001"], 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000000700000000000000950000000000000017398657435694a558273ad1326fc6eee6a1037a74cfb5af100fc4e94d523d9b220d05856955b2dc8996ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f68"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x9, 0x6, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000140)) (async) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000180)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) (async) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x0, 0x4, 0x7, 0x80, "b7e37afabaeec4ef6b12fe1f227fc1d887d1ee12c41c4c882b9131ea597612f5a3b12efd35f890f82a784d84543963571fe167e8b53ff0274bfc9d9fc89493", 0x19}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x6}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}]}}]}, 0x68}}, 0x0) [ 2698.815305][T11108] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2698.815545][ T24] audit: type=1400 audit(1644907692.861:647): avc: denied { bind } for pid=11131 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2698.849434][T11102] macsec0 speed is unknown, defaulting to 1000 [ 2698.858376][T11148] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2698.897689][T11148] 8021q: adding VLAN 0 to HW filter on device bond45 [ 2698.904845][T11149] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:48:19 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) socket(0x3, 0x5, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0x4, 0xff) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:48:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 06:48:19 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xdd, 0xc0, 0x7, 0x6, 0x0, 0x0, 0x12030, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x20, 0x3}, 0x4088, 0x5, 0x48e, 0x9, 0x0, 0x6f, 0x8, 0x0, 0x1000, 0x0, 0x1000}, r0, 0xa, r1, 0xa) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) (async) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x45, 0xb8, 0x6}, 0x10) 06:48:19 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) (async) getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60d64d4d00300400fe880000000000000000000000000001ff020000000000000000000000000001020190780000000060241965d4036b27f3d541a68870717c6fa6004000003c00ff020000000000000000000000000001"], 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000000700000000000000950000000000000017398657435694a558273ad1326fc6eee6a1037a74cfb5af100fc4e94d523d9b220d05856955b2dc8996ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f68"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x9, 0x6, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000140)) (async, rerun: 64) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000180)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) (async, rerun: 64) r5 = socket(0x11, 0x800000003, 0x0) (rerun: 64) bind(r5, &(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x0, 0x4, 0x7, 0x80, "b7e37afabaeec4ef6b12fe1f227fc1d887d1ee12c41c4c882b9131ea597612f5a3b12efd35f890f82a784d84543963571fe167e8b53ff0274bfc9d9fc89493", 0x19}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x6}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}]}}]}, 0x68}}, 0x0) 06:48:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:19 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:48:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:19 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x141202, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc154}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004005) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, r1/1000+10000}, 0x14, 0x7fff, 0x3f}, {{}, 0x4, 0x7, 0x7}], 0x30) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x200b001, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x8, r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100ff0018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlinkprop={0x19c, 0x6c, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x48, 0x40000}, [@IFLA_MAP={0x24, 0xe, {0x318, 0x10000, 0x7fff, 0x8, 0xca, 0x6}}, @IFLA_GROUP={0x8, 0x1b, 0x10000}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_VF_PORTS={0x2c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "bf199ba5c9de306bffae92ff09775b2e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x20}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x58, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1f}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}]}]}, 0x19c}}, 0x0) [ 2705.747022][T11167] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2705.762475][T11180] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:48:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 2705.789472][T11180] 8021q: adding VLAN 0 to HW filter on device bond46 [ 2705.802622][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:48:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000100003050000000000000000000088", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:19 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x141202, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc154}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004005) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x2) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, r1/1000+10000}, 0x14, 0x7fff, 0x3f}, {{}, 0x4, 0x7, 0x7}], 0x30) (async) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x200b001, 0x0) (async) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x8, r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100ff0018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlinkprop={0x19c, 0x6c, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x48, 0x40000}, [@IFLA_MAP={0x24, 0xe, {0x318, 0x10000, 0x7fff, 0x8, 0xca, 0x6}}, @IFLA_GROUP={0x8, 0x1b, 0x10000}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_VF_PORTS={0x2c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "bf199ba5c9de306bffae92ff09775b2e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x20}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x58, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1f}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}]}]}, 0x19c}}, 0x0) 06:48:19 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) (async, rerun: 32) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x141202, 0x0) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc154}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004005) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x2) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, r1/1000+10000}, 0x14, 0x7fff, 0x3f}, {{}, 0x4, 0x7, 0x7}], 0x30) (async) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x200b001, 0x0) (async, rerun: 32) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') (async, rerun: 32) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x8, r5}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100ff0018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlinkprop={0x19c, 0x6c, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x48, 0x40000}, [@IFLA_MAP={0x24, 0xe, {0x318, 0x10000, 0x7fff, 0x8, 0xca, 0x6}}, @IFLA_GROUP={0x8, 0x1b, 0x10000}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_VF_PORTS={0x2c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "bf199ba5c9de306bffae92ff09775b2e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x20}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x58, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1f}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}]}]}, 0x19c}}, 0x0) 06:48:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000100003050000000000000000000088", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2705.850859][T11189] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2705.872323][T11189] 8021q: adding VLAN 0 to HW filter on device bond47 [ 2705.879848][T11169] macsec0 speed is unknown, defaulting to 1000 [ 2705.879856][T11191] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2705.920979][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:48:26 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) socket(0x3, 0x5, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0x4, 0xff) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) socket(0x3, 0x5, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) set_mempolicy(0x0, &(0x7f0000000080)=0x4, 0xff) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) 06:48:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 06:48:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000100003050000000000000000000088", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:26 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002000000000002f9078ac141400ac1414000c9078b2efbe6d"], 0x0) syz_emit_ethernet(0x9f, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="f43aaeb7c32d", @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0x3, "9c", '*w9', 0x88a8, "9076f93785291fcaa844bb232edbf2298e7d6f807d2a8d59c46cc60d4ea8720bffa3d85dee9602d0ee5c42d60ad0e6f5d482488e999c4e18696d120c38448dba979640939f9a0e06f8b39749b808d507dd4006d0239541cf5d8aebffabbaac185db0b3b6432db6ac6d62d9485c236b078763328b4f12642289b414e352b414615776359d64"}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x44b, 0x77, 0x787, 0xfaf]}) 06:48:26 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:48:26 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) splice(r0, &(0x7f0000000080)=0xf2, r1, &(0x7f0000000140)=0x46, 0x100000001, 0x8) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r4}, 0x7f) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r5, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/167, 0xa7}], 0x4, &(0x7f00000005c0)=""/124, 0x7c}, 0x0, 0x12040}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) r7 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r7, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:48:26 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002000000000002f9078ac141400ac1414000c9078b2efbe6d"], 0x0) syz_emit_ethernet(0x9f, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="f43aaeb7c32d", @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0x3, "9c", '*w9', 0x88a8, "9076f93785291fcaa844bb232edbf2298e7d6f807d2a8d59c46cc60d4ea8720bffa3d85dee9602d0ee5c42d60ad0e6f5d482488e999c4e18696d120c38448dba979640939f9a0e06f8b39749b808d507dd4006d0239541cf5d8aebffabbaac185db0b3b6432db6ac6d62d9485c236b078763328b4f12642289b414e352b414615776359d64"}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x44b, 0x77, 0x787, 0xfaf]}) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002000000000002f9078ac141400ac1414000c9078b2efbe6d"], 0x0) (async) syz_emit_ethernet(0x9f, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="f43aaeb7c32d", @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0x3, "9c", '*w9', 0x88a8, "9076f93785291fcaa844bb232edbf2298e7d6f807d2a8d59c46cc60d4ea8720bffa3d85dee9602d0ee5c42d60ad0e6f5d482488e999c4e18696d120c38448dba979640939f9a0e06f8b39749b808d507dd4006d0239541cf5d8aebffabbaac185db0b3b6432db6ac6d62d9485c236b078763328b4f12642289b414e352b414615776359d64"}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x44b, 0x77, 0x787, 0xfaf]}) (async) 06:48:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) (fail_nth: 1) 06:48:26 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002000000000002f9078ac141400ac1414000c9078b2efbe6d"], 0x0) (async) syz_emit_ethernet(0x9f, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="f43aaeb7c32d", @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0x3, "9c", '*w9', 0x88a8, "9076f93785291fcaa844bb232edbf2298e7d6f807d2a8d59c46cc60d4ea8720bffa3d85dee9602d0ee5c42d60ad0e6f5d482488e999c4e18696d120c38448dba979640939f9a0e06f8b39749b808d507dd4006d0239541cf5d8aebffabbaac185db0b3b6432db6ac6d62d9485c236b078763328b4f12642289b414e352b414615776359d64"}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x44b, 0x77, 0x787, 0xfaf]}) 06:48:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2712.885817][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2712.895625][T11221] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2712.923483][T11221] 8021q: adding VLAN 0 to HW filter on device bond48 06:48:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x14) [ 2712.951618][T11234] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2712.971466][T11234] 8021q: adding VLAN 0 to HW filter on device bond49 [ 2712.982582][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2713.002455][T11237] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2713.010237][T11237] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2713.025355][T11218] macsec0 speed is unknown, defaulting to 1000 06:48:33 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) socket(0x3, 0x5, 0x0) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0x4, 0xff) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:48:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x14) (async) 06:48:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 06:48:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:33 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:48:33 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) splice(r0, &(0x7f0000000080)=0xf2, r1, &(0x7f0000000140)=0x46, 0x100000001, 0x8) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r4}, 0x7f) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r5, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/167, 0xa7}], 0x4, &(0x7f00000005c0)=""/124, 0x7c}, 0x0, 0x12040}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) r7 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r7, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) splice(r0, &(0x7f0000000080)=0xf2, r1, &(0x7f0000000140)=0x46, 0x100000001, 0x8) (async) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r4}, 0x7f) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) (async) syz_io_uring_submit(r5, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/167, 0xa7}], 0x4, &(0x7f00000005c0)=""/124, 0x7c}, 0x0, 0x12040}, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r7, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 06:48:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x14) (async) 06:48:33 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4}, {0xac}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x2}) open(&(0x7f0000000080)='./bus\x00', 0x2040, 0x0) [ 2719.079920][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2719.099838][T11257] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2719.107695][T11257] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:48:33 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4}, {0xac}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x2}) (async) open(&(0x7f0000000080)='./bus\x00', 0x2040, 0x0) 06:48:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 06:48:33 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) splice(r0, &(0x7f0000000080)=0xf2, r1, &(0x7f0000000140)=0x46, 0x100000001, 0x8) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r4}, 0x7f) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r5, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/167, 0xa7}], 0x4, &(0x7f00000005c0)=""/124, 0x7c}, 0x0, 0x12040}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) r7 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r7, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) splice(r0, &(0x7f0000000080)=0xf2, r1, &(0x7f0000000140)=0x46, 0x100000001, 0x8) (async) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r4}, 0x7f) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) (async) syz_io_uring_submit(r5, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/167, 0xa7}], 0x4, &(0x7f00000005c0)=""/124, 0x7c}, 0x0, 0x12040}, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r7, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) [ 2719.124146][T11252] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2719.140352][T11252] 8021q: adding VLAN 0 to HW filter on device bond50 06:48:33 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4}, {0xac}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x2}) (async) open(&(0x7f0000000080)='./bus\x00', 0x2040, 0x0) [ 2719.170890][T11283] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2719.207929][T11283] 8021q: adding VLAN 0 to HW filter on device bond51 [ 2719.215148][T11258] macsec0 speed is unknown, defaulting to 1000 06:48:41 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c64666c74a0d2a49445a661967569643d", @ANYRESHEX=0x0, @ANYBLOB=',context=user_u\"\x00']) 06:48:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:48:41 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="c9ab7fddbe4de09cc5f882acf0b362a91fccf4ee2a3b4c62005b7a09f1b07b875095913fdec70a5db40280b7b95bc65891bb1469b8e8cb363cac735a71d3a492a3fb5b2b596c1f3515dc34120eefad71f20ad30d60a6ae24f26e436e23a1f4658e0d424241b5a0e7d32129de907c7f06d74c3c0c82817d9359ec82f77d0612c6fda220c7557cad7777bb55975f55707a850417c83d0e8b0613f6c55321bfc7a0ff29ad4447a7b16bc52ed93e7dac27597569796abf491bd9bf615e50a2561f97db993975b9", 0xc5}, {&(0x7f0000000000)='.', 0x1}], 0x2, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:48:41 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:48:41 executing program 1: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0x1, 0x1}, 0xff}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="1b6cb0f9ea2d6e67f6b66bc87b0ea4baab71898fa89f7bc9ca94fd24fe4b84a06d4dcb27c92412ccd3d1a9315da2f7f73dee7a35cbdaf8069e5c1a7180e3b81af0b5744d3f784e2823c96fe78634cf23ed0ce6714185b071db33800adab8c19f8e94db394ba9190f19acadf0dfda1a", 0x6f}, 0x1, 0x0, 0x0, 0x400c004}, 0x80) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:48:41 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c64666c74a0d2a49445a661967569643d", @ANYRESHEX=0x0, @ANYBLOB=',context=user_u\"\x00']) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c64666c74a0d2a49445a661967569643d", @ANYRESHEX=0x0, @ANYBLOB=',context=user_u\"\x00']) (async) 06:48:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 2727.393096][T11316] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2727.426165][T11316] 8021q: adding VLAN 0 to HW filter on device bond52 [ 2727.433597][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:48:41 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c64666c74a0d2a49445a661967569643d", @ANYRESHEX=0x0, @ANYBLOB=',context=user_u\"\x00']) 06:48:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={{0x14, 0x3ea}, [], {0x14}}, 0x28}}, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x4, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x8c0) [ 2727.450703][T11323] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2727.459288][T11323] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2727.485107][T11334] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:48:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={{0x14, 0x3ea}, [], {0x14}}, 0x28}}, 0x0) (async) r1 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x4, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x8c0) 06:48:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2727.498752][T11341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11341 comm=syz-executor.4 [ 2727.521647][T11334] 8021q: adding VLAN 0 to HW filter on device bond53 [ 2727.529338][T11321] macsec0 speed is unknown, defaulting to 1000 06:48:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:48:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={{0x14, 0x3ea}, [], {0x14}}, 0x28}}, 0x0) (async, rerun: 64) r1 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x4, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x8c0) [ 2727.543593][T11345] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11345 comm=syz-executor.4 [ 2727.556580][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2727.581008][T11348] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2727.589852][T11348] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2727.600046][T11353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11353 comm=syz-executor.4 [ 2727.615399][T11353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11353 comm=syz-executor.4 [ 2727.628813][T11353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11353 comm=syz-executor.4 [ 2727.642782][T11353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11353 comm=syz-executor.4 [ 2727.657282][T11350] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2727.657486][T11353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11353 comm=syz-executor.4 [ 2727.675562][T11350] 8021q: adding VLAN 0 to HW filter on device bond54 [ 2727.680236][T11353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11353 comm=syz-executor.4 06:48:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2727.699014][T11353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11353 comm=syz-executor.4 [ 2727.712759][T11353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11353 comm=syz-executor.4 [ 2727.739997][T11358] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2727.755382][T11358] 8021q: adding VLAN 0 to HW filter on device bond55 06:48:42 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="c9ab7fddbe4de09cc5f882acf0b362a91fccf4ee2a3b4c62005b7a09f1b07b875095913fdec70a5db40280b7b95bc65891bb1469b8e8cb363cac735a71d3a492a3fb5b2b596c1f3515dc34120eefad71f20ad30d60a6ae24f26e436e23a1f4658e0d424241b5a0e7d32129de907c7f06d74c3c0c82817d9359ec82f77d0612c6fda220c7557cad7777bb55975f55707a850417c83d0e8b0613f6c55321bfc7a0ff29ad4447a7b16bc52ed93e7dac27597569796abf491bd9bf615e50a2561f97db993975b9", 0xc5}, {&(0x7f0000000000)='.', 0x1}], 0x2, 0x3, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:48:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2728.248998][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2728.266841][T11361] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2728.275023][T11361] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:48:47 executing program 1: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0x1, 0x1}, 0xff}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="1b6cb0f9ea2d6e67f6b66bc87b0ea4baab71898fa89f7bc9ca94fd24fe4b84a06d4dcb27c92412ccd3d1a9315da2f7f73dee7a35cbdaf8069e5c1a7180e3b81af0b5744d3f784e2823c96fe78634cf23ed0ce6714185b071db33800adab8c19f8e94db394ba9190f19acadf0dfda1a", 0x6f}, 0x1, 0x0, 0x0, 0x400c004}, 0x80) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:48:47 executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 06:48:47 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:48:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 06:48:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:47 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="c9ab7fddbe4de09cc5f882acf0b362a91fccf4ee2a3b4c62005b7a09f1b07b875095913fdec70a5db40280b7b95bc65891bb1469b8e8cb363cac735a71d3a492a3fb5b2b596c1f3515dc34120eefad71f20ad30d60a6ae24f26e436e23a1f4658e0d424241b5a0e7d32129de907c7f06d74c3c0c82817d9359ec82f77d0612c6fda220c7557cad7777bb55975f55707a850417c83d0e8b0613f6c55321bfc7a0ff29ad4447a7b16bc52ed93e7dac27597569796abf491bd9bf615e50a2561f97db993975b9", 0xc5}, {&(0x7f0000000000)='.', 0x1}], 0x2, 0x3, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:48:47 executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) fcntl$dupfd(r0, 0x406, r0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) (async) 06:48:47 executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$dupfd(r0, 0x406, r0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 06:48:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) [ 2733.785566][T11372] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2733.807002][T11372] 8021q: adding VLAN 0 to HW filter on device bond56 [ 2733.816142][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:48:47 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000340)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000100)=ANY=[], 0xbf) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000340)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/36, 0x200000a4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ldst={0x2, 0x0, 0x3, 0x1, 0xf, 0x0, 0xffffffffffffffff}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8a, &(0x7f0000000380)=""/138, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0x1f, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, 0x1, r4, r5]}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010011fff0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000d0000000000080003000900000108000400070100"], 0x4c}}, 0x0) [ 2733.833574][T11375] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2733.844288][T11375] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2733.865284][T11394] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:48:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}}, 0x0) [ 2733.879664][T11394] 8021q: adding VLAN 0 to HW filter on device bond57 [ 2733.908951][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2733.925675][T11398] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2733.929727][T11400] selinux_netlink_send: 57 callbacks suppressed [ 2733.929749][T11400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=11400 comm=syz-executor.4 [ 2733.934053][T11398] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2733.967072][T11401] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2733.980953][T11401] 8021q: adding VLAN 0 to HW filter on device bond58 [ 2733.988247][T11376] macsec0 speed is unknown, defaulting to 1000 06:48:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:48:56 executing program 1: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0x1, 0x1}, 0xff}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="1b6cb0f9ea2d6e67f6b66bc87b0ea4baab71898fa89f7bc9ca94fd24fe4b84a06d4dcb27c92412ccd3d1a9315da2f7f73dee7a35cbdaf8069e5c1a7180e3b81af0b5744d3f784e2823c96fe78634cf23ed0ce6714185b071db33800adab8c19f8e94db394ba9190f19acadf0dfda1a", 0x6f}, 0x1, 0x0, 0x0, 0x400c004}, 0x80) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x100a}], 0x1, 0x0, 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0x1, 0x1}, 0xff}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="1b6cb0f9ea2d6e67f6b66bc87b0ea4baab71898fa89f7bc9ca94fd24fe4b84a06d4dcb27c92412ccd3d1a9315da2f7f73dee7a35cbdaf8069e5c1a7180e3b81af0b5744d3f784e2823c96fe78634cf23ed0ce6714185b071db33800adab8c19f8e94db394ba9190f19acadf0dfda1a", 0x6f}, 0x1, 0x0, 0x0, 0x400c004}, 0x80) (async) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r2, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) 06:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}}, 0x0) 06:48:56 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:48:56 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7d, 0x6, 0x0, 0x3, 0x0, 0xf9b1, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x95c, 0x9, 0x6, 0x6, 0xffffffe1, 0x8, 0x0, 0x10000, 0x0, 0x5}, r1, 0x8, 0xffffffffffffffff, 0x3) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) ptrace$setregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r6 = accept4$tipc(r2, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x80000) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r5, &(0x7f0000000240)={r0, r6, 0x6}) 06:48:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000340)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000100)=ANY=[], 0xbf) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000340)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) sendfile(r0, r0, &(0x7f0000000240), 0x0) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/36, 0x200000a4) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ldst={0x2, 0x0, 0x3, 0x1, 0xf, 0x0, 0xffffffffffffffff}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8a, &(0x7f0000000380)=""/138, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0x1f, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, 0x1, r4, r5]}, 0x80) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010011fff0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000d0000000000080003000900000108000400070100"], 0x4c}}, 0x0) [ 2742.140006][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2742.154428][T11419] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2742.162982][T11419] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2742.178155][T11422] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}}, 0x0) 06:48:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2742.193472][T11422] 8021q: adding VLAN 0 to HW filter on device bond59 [ 2742.214593][T11418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=11418 comm=syz-executor.4 06:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 2742.240462][T11431] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2742.254433][T11431] 8021q: adding VLAN 0 to HW filter on device bond60 [ 2742.261524][T11414] macsec0 speed is unknown, defaulting to 1000 [ 2742.269358][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2742.286915][T11433] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 2742.295938][T11433] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2742.311433][T11436] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2742.325456][T11436] 8021q: adding VLAN 0 to HW filter on device bond61 06:48:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2742.357410][T11439] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2742.374442][T11439] 8021q: adding VLAN 0 to HW filter on device bond62 [ 2742.383715][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2742.396149][T11441] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 2742.404190][T11441] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2742.440899][T11444] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2742.454410][T11444] 8021q: adding VLAN 0 to HW filter on device bond63 06:49:03 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x703b80, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000440), 0x2, 0x240080) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000480)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@delqdisc={0x198, 0x25, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0x1, 0xffe8}, {0xf, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x8, 0xdc21, 0x0, 0x1bd, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xde, 0x47d0, 0x7, 0x2, 0x5, 0x3, 0x8}}, {0x14, 0x2, [0xc655, 0x88e, 0x0, 0x1f, 0x43c, 0x6, 0x1, 0x7f]}}, {{0x1c, 0x1, {0xfa, 0x0, 0x2, 0x4, 0x0, 0x1f, 0x3, 0x1}}, {0x6, 0x2, [0xf5]}}, {{0x1c, 0x1, {0x9, 0x20, 0x4, 0x8001, 0x2, 0xfd1, 0x10000, 0x1}}, {0x6, 0x2, [0x240]}}, {{0x1c, 0x1, {0xd3, 0xff, 0x0, 0x80, 0x2, 0x1, 0x5, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x9, 0x5, 0x2, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0x9, 0xe55d, 0x7]}}, {{0x1c, 0x1, {0x3f, 0x3, 0x1, 0x7, 0x2, 0x2000, 0xffff8001, 0x9}}, {0x16, 0x2, [0x7fff, 0x3, 0x2, 0x4, 0xffff, 0x5, 0x40, 0x9, 0x2]}}, {{0x1c, 0x1, {0x1, 0x86, 0x1ff, 0x1, 0x0, 0x8, 0xfffffffd, 0x4}}, {0xc, 0x2, [0x7ce9, 0x4, 0x81, 0x400]}}, {{0x1c, 0x1, {0x1, 0x2, 0xf63c, 0x400, 0x2, 0x7fff, 0x741a60af, 0x2}}, {0x8, 0x2, [0x7, 0x9]}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24060001}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) 06:49:03 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x0, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 06:49:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:03 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7d, 0x6, 0x0, 0x3, 0x0, 0xf9b1, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x95c, 0x9, 0x6, 0x6, 0xffffffe1, 0x8, 0x0, 0x10000, 0x0, 0x5}, r1, 0x8, 0xffffffffffffffff, 0x3) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) ptrace$setregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) r6 = accept4$tipc(r2, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x80000) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r5, &(0x7f0000000240)={r0, r6, 0x6}) 06:49:03 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000340)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000100)=ANY=[], 0xbf) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000340)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) sendfile(r0, r0, &(0x7f0000000240), 0x0) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/36, 0x200000a4) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ldst={0x2, 0x0, 0x3, 0x1, 0xf, 0x0, 0xffffffffffffffff}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8a, &(0x7f0000000380)=""/138, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0x1f, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, 0x1, r4, r5]}, 0x80) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010011fff0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000d0000000000080003000900000108000400070100"], 0x4c}}, 0x0) 06:49:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00000000000000000c00000009000100666c6f77000000002800020024000b800800010009000000180002801400010000000700"/64], 0x58}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 2749.354865][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2749.373766][T11457] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2749.381951][T11457] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2749.390347][T11474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=11474 comm=syz-executor.4 [ 2749.411959][T11472] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2749.426219][T11472] 8021q: adding VLAN 0 to HW filter on device bond64 [ 2749.433398][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) [ 2749.458946][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2749.472348][T11474] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2749.486499][T11459] macsec0 speed is unknown, defaulting to 1000 [ 2749.490044][T11479] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:49:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000002c00270d000000000000000000000000ea6acab156e4ef0bba0c32056e4a888743abcd5fa926b76984f44f03645997e94e2133aeb01fdc45ad1203fbe5a7367cef89d29da3bdce922848953a106d11f84a3c567267a693a18425f6bf04b5158e56991917da363bab5559fe753d5d0f1394ec0896294b235f9729a5dcb1c3d3c51e9b7c95fc7dce488b5cadc3186aef30a4267058037cf17b753ac196e235cedfc9ae52ab8d4cf2e3ada62e0168bc00e3990a2f8f99551379f32db0103507e39bdc612665a352815ec57d132b69cd07ce8838ba19486fd0d6abffc08cc880502da280a481042d5dc1d25a7ac6bd57936451ef16c77abe759c4b9abf083590c59f2505b1660b9a88f7be6e9ff55093", @ANYRES32=r2, @ANYBLOB="00000000000000000c00000009000100666c6f77000000002800020024000b800800010009000000180002801400010000000700"/64], 0x58}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00000000000000000c00000009000100666c6f77000000002800020024000b800800010009000000180002801400010000000700"/64], 0x58}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) [ 2749.510552][T11479] 8021q: adding VLAN 0 to HW filter on device bond65 [ 2749.519745][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2749.534929][T11482] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2749.539616][T11484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=11484 comm=syz-executor.4 06:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) [ 2749.543833][T11482] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2749.578127][T11484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2749.593092][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 06:49:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00000000000000000c00000009000100666c6f77000000002800020024000b800800010009000000180002801400010000000700"/64], 0x58}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 2749.602760][T11484] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2749.612356][T11486] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2749.627318][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=11498 comm=syz-executor.4 [ 2749.628112][T11486] 8021q: adding VLAN 0 to HW filter on device bond66 [ 2749.651031][T11497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2749.665584][T11499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 06:49:10 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x703b80, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000440), 0x2, 0x240080) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000480)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@delqdisc={0x198, 0x25, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0x1, 0xffe8}, {0xf, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x8, 0xdc21, 0x0, 0x1bd, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xde, 0x47d0, 0x7, 0x2, 0x5, 0x3, 0x8}}, {0x14, 0x2, [0xc655, 0x88e, 0x0, 0x1f, 0x43c, 0x6, 0x1, 0x7f]}}, {{0x1c, 0x1, {0xfa, 0x0, 0x2, 0x4, 0x0, 0x1f, 0x3, 0x1}}, {0x6, 0x2, [0xf5]}}, {{0x1c, 0x1, {0x9, 0x20, 0x4, 0x8001, 0x2, 0xfd1, 0x10000, 0x1}}, {0x6, 0x2, [0x240]}}, {{0x1c, 0x1, {0xd3, 0xff, 0x0, 0x80, 0x2, 0x1, 0x5, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x9, 0x5, 0x2, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0x9, 0xe55d, 0x7]}}, {{0x1c, 0x1, {0x3f, 0x3, 0x1, 0x7, 0x2, 0x2000, 0xffff8001, 0x9}}, {0x16, 0x2, [0x7fff, 0x3, 0x2, 0x4, 0xffff, 0x5, 0x40, 0x9, 0x2]}}, {{0x1c, 0x1, {0x1, 0x86, 0x1ff, 0x1, 0x0, 0x8, 0xfffffffd, 0x4}}, {0xc, 0x2, [0x7ce9, 0x4, 0x81, 0x400]}}, {{0x1c, 0x1, {0x1, 0x2, 0xf63c, 0x400, 0x2, 0x7fff, 0x741a60af, 0x2}}, {0x8, 0x2, [0x7, 0x9]}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24060001}, 0x80) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) 06:49:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:49:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a0001ff01e90000000000061c000000000000008354b938f7266a52941c00000000140012cfaf13c307be5c45dd9fdc6f1263f90e9fc24ff1da766f2d86e76af15022ed9ef862cf4e72955ad27cbcc9ba117bcf9b11813f310fe92cf5320d8f085beda1932368de763705000000000000001b688df36b891c0afce26aaaadb5691a80f3c7f50a4933a8fdc2b10cde4d78b5a655dc67d3eb2e1ecfb45935b5fd7e471e2ce91d2d1a7f76052fbf820ebf0aef54b6f9ac152e"], 0x30}}, 0x0) 06:49:10 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x0, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:49:10 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7d, 0x6, 0x0, 0x3, 0x0, 0xf9b1, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x95c, 0x9, 0x6, 0x6, 0xffffffe1, 0x8, 0x0, 0x10000, 0x0, 0x5}, r1, 0x8, 0xffffffffffffffff, 0x3) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) (async, rerun: 32) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async, rerun: 32) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) (async) ptrace$setregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) (async, rerun: 32) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async, rerun: 32) r6 = accept4$tipc(r2, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x80000) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r5, &(0x7f0000000240)={r0, r6, 0x6}) 06:49:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a0001ff01e90000000000061c000000000000008354b938f7266a52941c00000000140012cfaf13c307be5c45dd9fdc6f1263f90e9fc24ff1da766f2d86e76af15022ed9ef862cf4e72955ad27cbcc9ba117bcf9b11813f310fe92cf5320d8f085beda1932368de763705000000000000001b688df36b891c0afce26aaaadb5691a80f3c7f50a4933a8fdc2b10cde4d78b5a655dc67d3eb2e1ecfb45935b5fd7e471e2ce91d2d1a7f76052fbf820ebf0aef54b6f9ac152e"], 0x30}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a0001ff01e90000000000061c000000000000008354b938f7266a52941c00000000140012cfaf13c307be5c45dd9fdc6f1263f90e9fc24ff1da766f2d86e76af15022ed9ef862cf4e72955ad27cbcc9ba117bcf9b11813f310fe92cf5320d8f085beda1932368de763705000000000000001b688df36b891c0afce26aaaadb5691a80f3c7f50a4933a8fdc2b10cde4d78b5a655dc67d3eb2e1ecfb45935b5fd7e471e2ce91d2d1a7f76052fbf820ebf0aef54b6f9ac152e"], 0x30}}, 0x0) (async) [ 2756.484560][T11519] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2756.500974][T11519] 8021q: adding VLAN 0 to HW filter on device bond67 [ 2756.508297][T11520] __nla_validate_parse: 1 callbacks suppressed [ 2756.508312][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2756.526317][T11520] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2756.534695][T11520] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2756.559529][T11519] bond67: (slave bridge63): making interface the new active one [ 2756.567822][T11519] bond67: (slave bridge63): Enslaving as an active interface with an up link 06:49:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a0001ff01e90000000000061c000000000000008354b938f7266a52941c00000000140012cfaf13c307be5c45dd9fdc6f1263f90e9fc24ff1da766f2d86e76af15022ed9ef862cf4e72955ad27cbcc9ba117bcf9b11813f310fe92cf5320d8f085beda1932368de763705000000000000001b688df36b891c0afce26aaaadb5691a80f3c7f50a4933a8fdc2b10cde4d78b5a655dc67d3eb2e1ecfb45935b5fd7e471e2ce91d2d1a7f76052fbf820ebf0aef54b6f9ac152e"], 0x30}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a0001ff01e90000000000061c000000000000008354b938f7266a52941c00000000140012cfaf13c307be5c45dd9fdc6f1263f90e9fc24ff1da766f2d86e76af15022ed9ef862cf4e72955ad27cbcc9ba117bcf9b11813f310fe92cf5320d8f085beda1932368de763705000000000000001b688df36b891c0afce26aaaadb5691a80f3c7f50a4933a8fdc2b10cde4d78b5a655dc67d3eb2e1ecfb45935b5fd7e471e2ce91d2d1a7f76052fbf820ebf0aef54b6f9ac152e"], 0x30}}, 0x0) (async) 06:49:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2756.588409][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond67: link becomes ready [ 2756.617566][T11514] macsec0 speed is unknown, defaulting to 1000 [ 2756.630652][T11536] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2756.657241][T11536] 8021q: adding VLAN 0 to HW filter on device bond68 [ 2756.665138][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2756.676909][T11537] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2756.684820][T11537] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2756.699718][T11540] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2756.713877][T11540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2756.728666][T11536] bond68: (slave bridge64): making interface the new active one [ 2756.737542][T11536] bond68: (slave bridge64): Enslaving as an active interface with an up link 06:49:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (fail_nth: 1) [ 2756.754919][T11542] bond3: (slave bridge3): making interface the new active one [ 2756.763986][T11542] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 2756.777824][T11544] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2756.792214][T11544] 8021q: adding VLAN 0 to HW filter on device bond69 [ 2756.799494][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond68: link becomes ready [ 2756.808666][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready 06:49:14 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x703b80, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000440), 0x2, 0x240080) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000480)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@delqdisc={0x198, 0x25, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0x1, 0xffe8}, {0xf, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x8, 0xdc21, 0x0, 0x1bd, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xde, 0x47d0, 0x7, 0x2, 0x5, 0x3, 0x8}}, {0x14, 0x2, [0xc655, 0x88e, 0x0, 0x1f, 0x43c, 0x6, 0x1, 0x7f]}}, {{0x1c, 0x1, {0xfa, 0x0, 0x2, 0x4, 0x0, 0x1f, 0x3, 0x1}}, {0x6, 0x2, [0xf5]}}, {{0x1c, 0x1, {0x9, 0x20, 0x4, 0x8001, 0x2, 0xfd1, 0x10000, 0x1}}, {0x6, 0x2, [0x240]}}, {{0x1c, 0x1, {0xd3, 0xff, 0x0, 0x80, 0x2, 0x1, 0x5, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x9, 0x5, 0x2, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0x9, 0xe55d, 0x7]}}, {{0x1c, 0x1, {0x3f, 0x3, 0x1, 0x7, 0x2, 0x2000, 0xffff8001, 0x9}}, {0x16, 0x2, [0x7fff, 0x3, 0x2, 0x4, 0xffff, 0x5, 0x40, 0x9, 0x2]}}, {{0x1c, 0x1, {0x1, 0x86, 0x1ff, 0x1, 0x0, 0x8, 0xfffffffd, 0x4}}, {0xc, 0x2, [0x7ce9, 0x4, 0x81, 0x400]}}, {{0x1c, 0x1, {0x1, 0x2, 0xf63c, 0x400, 0x2, 0x7fff, 0x741a60af, 0x2}}, {0x8, 0x2, [0x7, 0x9]}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24060001}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x703b80, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000440), 0x2, 0x240080) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000480)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@delqdisc={0x198, 0x25, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0x1, 0xffe8}, {0xf, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x8, 0xdc21, 0x0, 0x1bd, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xde, 0x47d0, 0x7, 0x2, 0x5, 0x3, 0x8}}, {0x14, 0x2, [0xc655, 0x88e, 0x0, 0x1f, 0x43c, 0x6, 0x1, 0x7f]}}, {{0x1c, 0x1, {0xfa, 0x0, 0x2, 0x4, 0x0, 0x1f, 0x3, 0x1}}, {0x6, 0x2, [0xf5]}}, {{0x1c, 0x1, {0x9, 0x20, 0x4, 0x8001, 0x2, 0xfd1, 0x10000, 0x1}}, {0x6, 0x2, [0x240]}}, {{0x1c, 0x1, {0xd3, 0xff, 0x0, 0x80, 0x2, 0x1, 0x5, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x9, 0x5, 0x2, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0x9, 0xe55d, 0x7]}}, {{0x1c, 0x1, {0x3f, 0x3, 0x1, 0x7, 0x2, 0x2000, 0xffff8001, 0x9}}, {0x16, 0x2, [0x7fff, 0x3, 0x2, 0x4, 0xffff, 0x5, 0x40, 0x9, 0x2]}}, {{0x1c, 0x1, {0x1, 0x86, 0x1ff, 0x1, 0x0, 0x8, 0xfffffffd, 0x4}}, {0xc, 0x2, [0x7ce9, 0x4, 0x81, 0x400]}}, {{0x1c, 0x1, {0x1, 0x2, 0xf63c, 0x400, 0x2, 0x7fff, 0x741a60af, 0x2}}, {0x8, 0x2, [0x7, 0x9]}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24060001}, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) (async) 06:49:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:49:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:14 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x0, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:49:14 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x5, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2760.748563][T11558] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2760.762889][T11558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2760.770832][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2760.782693][T11559] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2760.791145][T11559] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2760.805848][T11560] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2760.819690][T11560] 8021q: adding VLAN 0 to HW filter on device bond70 [ 2760.834851][T11558] bond4: (slave bridge4): making interface the new active one 06:49:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2760.842914][T11558] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 2760.865415][T11562] bond70: (slave bridge65): making interface the new active one [ 2760.874292][T11562] bond70: (slave bridge65): Enslaving as an active interface with an up link 06:49:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2760.892455][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 2760.906334][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond70: link becomes ready [ 2760.915211][T11568] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2760.928756][T11568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2760.936599][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2760.949869][T11570] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2760.958135][T11570] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2760.973656][T11572] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2760.987909][T11572] 8021q: adding VLAN 0 to HW filter on device bond71 06:49:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2761.001207][T11574] bond5: (slave bridge5): making interface the new active one [ 2761.009259][T11574] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 2761.017941][T11555] macsec0 speed is unknown, defaulting to 1000 [ 2761.035211][T11575] bond71: (slave bridge66): making interface the new active one 06:49:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2761.047239][T11575] bond71: (slave bridge66): Enslaving as an active interface with an up link [ 2761.057957][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 2761.075886][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond71: link becomes ready [ 2761.139999][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2761.153306][T11580] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2761.161455][T11580] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2761.176425][T11582] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2761.190445][T11582] 8021q: adding VLAN 0 to HW filter on device bond72 [ 2761.207603][T11583] bond72: (slave bridge67): making interface the new active one [ 2761.216354][T11583] bond72: (slave bridge67): Enslaving as an active interface with an up link [ 2761.231842][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond72: link becomes ready 06:49:24 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x3, 0x2}, 'port0\x00', 0x9a, 0x82a, 0x6, 0x3, 0x5, 0x4, 0x2, 0x0, 0x2, 0x9}) r1 = socket$inet6(0xa, 0x3, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x542b, 0x5, 0x1, 'queue0\x00', 0xffffffb8}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{r1, 0x1002}], 0x1, 0x0, 0x0, 0x0) 06:49:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:49:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:24 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x0, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:49:24 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x5, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x5, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 06:49:24 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x5, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2770.130469][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2770.142683][T11598] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2770.152848][T11598] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2770.168239][T11600] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:49:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1a, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:49:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2770.182261][T11600] 8021q: adding VLAN 0 to HW filter on device bond73 [ 2770.201364][T11615] bond73: (slave bridge68): making interface the new active one [ 2770.210494][T11615] bond73: (slave bridge68): Enslaving as an active interface with an up link [ 2770.222517][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond73: link becomes ready [ 2770.255567][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2770.270119][T11623] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2770.278262][T11623] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2770.293382][T11626] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:49:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2770.307331][T11626] 8021q: adding VLAN 0 to HW filter on device bond74 [ 2770.321864][T11629] bond74: (slave bridge69): making interface the new active one [ 2770.331266][T11629] bond74: (slave bridge69): Enslaving as an active interface with an up link 06:49:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x22, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2770.379891][T11603] macsec0 speed is unknown, defaulting to 1000 [ 2770.386144][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond74: link becomes ready [ 2770.395526][T11631] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2770.423023][T11631] 8021q: adding VLAN 0 to HW filter on device bond75 [ 2770.436372][T11632] bond75: (slave bridge70): making interface the new active one [ 2770.445604][T11632] bond75: (slave bridge70): Enslaving as an active interface with an up link [ 2770.454461][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2770.466080][T11635] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2770.474835][T11635] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2770.493761][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond75: link becomes ready 06:49:30 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x3, 0x2}, 'port0\x00', 0x9a, 0x82a, 0x6, 0x3, 0x5, 0x4, 0x2, 0x0, 0x2, 0x9}) r1 = socket$inet6(0xa, 0x3, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x542b, 0x5, 0x1, 'queue0\x00', 0xffffffb8}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{r1, 0x1002}], 0x1, 0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x3, 0x2}, 'port0\x00', 0x9a, 0x82a, 0x6, 0x3, 0x5, 0x4, 0x2, 0x0, 0x2, 0x9}) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x542b, 0x5, 0x1, 'queue0\x00', 0xffffffb8}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000001c0)) (async) ppoll(&(0x7f00000000c0)=[{r1, 0x1002}], 0x1, 0x0, 0x0, 0x0) (async) 06:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 06:49:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:30 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x0, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:49:30 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x27, 0x7, 0x3f, 0x7, 0x0, 0x4, 0x8000, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x10442, 0x5, 0x80000001, 0x0, 0x49, 0x10000, 0x4e2, 0x0, 0x4, 0x0, 0x10001}, 0x0, 0x9, r1, 0x8) syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000080)=""/36, 0x200000a4) read$char_usb(r3, &(0x7f0000000000)=""/49, 0x31) inotify_rm_watch(r2, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x8000004, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r4, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2776.559562][T11640] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2776.573430][T11640] 8021q: adding VLAN 0 to HW filter on device bond76 [ 2776.580644][T11647] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2776.594547][T11647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2776.603918][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2776.616316][T11648] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2776.624157][T11648] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2776.648154][T11640] bond76: (slave bridge71): making interface the new active one 06:49:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 06:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2776.657651][T11640] bond76: (slave bridge71): Enslaving as an active interface with an up link [ 2776.690216][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond76: link becomes ready [ 2776.703661][T11656] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2776.724206][T11656] 8021q: adding VLAN 0 to HW filter on device bond77 [ 2776.731659][T11658] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2776.741742][T11658] bond7 (uninitialized): Released all slaves [ 2776.747900][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2776.760412][T11661] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2776.768201][T11661] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2776.783161][T11644] macsec0 speed is unknown, defaulting to 1000 [ 2776.790418][T11656] bond77: (slave bridge72): making interface the new active one [ 2776.799417][T11656] bond77: (slave bridge72): Enslaving as an active interface with an up link 06:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 06:49:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2776.812464][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond77: link becomes ready [ 2776.844977][T11665] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2776.858745][T11665] 8021q: adding VLAN 0 to HW filter on device bond78 [ 2776.867839][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2776.881205][T11668] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2776.888796][T11668] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2776.903616][T11669] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2776.912266][T11669] bond7 (uninitialized): Released all slaves [ 2776.925338][T11665] bond78: (slave bridge73): making interface the new active one [ 2776.934001][T11665] bond78: (slave bridge73): Enslaving as an active interface with an up link [ 2776.947829][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond78: link becomes ready 06:49:37 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) read$char_usb(r0, &(0x7f0000000080)=""/36, 0x200000a4) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x3, 0x2}, 'port0\x00', 0x9a, 0x82a, 0x6, 0x3, 0x5, 0x4, 0x2, 0x0, 0x2, 0x9}) (async) r1 = socket$inet6(0xa, 0x3, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x542b, 0x5, 0x1, 'queue0\x00', 0xffffffb8}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000001c0)) (async) ppoll(&(0x7f00000000c0)=[{r1, 0x1002}], 0x1, 0x0, 0x0, 0x0) 06:49:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:49:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x32, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:37 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x0, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:49:37 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x27, 0x7, 0x3f, 0x7, 0x0, 0x4, 0x8000, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x10442, 0x5, 0x80000001, 0x0, 0x49, 0x10000, 0x4e2, 0x0, 0x4, 0x0, 0x10001}, 0x0, 0x9, r1, 0x8) (async) syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ppoll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000080)=""/36, 0x200000a4) (async, rerun: 64) read$char_usb(r3, &(0x7f0000000000)=""/49, 0x31) (async, rerun: 64) inotify_rm_watch(r2, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x8000004, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r4, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2783.803976][T11685] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2783.830615][T11685] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2783.837856][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:49:37 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x27, 0x7, 0x3f, 0x7, 0x0, 0x4, 0x8000, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x10442, 0x5, 0x80000001, 0x0, 0x49, 0x10000, 0x4e2, 0x0, 0x4, 0x0, 0x10001}, 0x0, 0x9, r1, 0x8) syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r3, &(0x7f0000000080)=""/36, 0x200000a4) (async) read$char_usb(r3, &(0x7f0000000000)=""/49, 0x31) inotify_rm_watch(r2, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x8000004, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r4, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async, rerun: 64) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) [ 2783.850025][T11693] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2783.857827][T11693] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2783.874454][T11696] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2783.890055][T11696] 8021q: adding VLAN 0 to HW filter on device bond79 06:49:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:49:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3a, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2783.925681][T11700] bond79: (slave bridge74): making interface the new active one [ 2783.942347][T11700] bond79: (slave bridge74): Enslaving as an active interface with an up link [ 2783.952746][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond79: link becomes ready [ 2783.967170][T11715] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 06:49:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2783.983242][T11715] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2783.990338][T11695] macsec0 speed is unknown, defaulting to 1000 [ 2783.996661][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2784.014576][T11717] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2784.026828][T11717] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2784.043119][T11720] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2784.057056][T11720] 8021q: adding VLAN 0 to HW filter on device bond80 [ 2784.064327][T11722] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2784.076737][T11722] 8021q: adding VLAN 0 to HW filter on device bond9 06:49:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2784.091728][T11723] bond80: (slave bridge75): making interface the new active one [ 2784.100714][T11723] bond80: (slave bridge75): Enslaving as an active interface with an up link [ 2784.122717][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond80: link becomes ready [ 2784.145548][T11728] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2784.158909][T11728] 8021q: adding VLAN 0 to HW filter on device bond81 [ 2784.174281][T11728] bond81: (slave bridge76): making interface the new active one [ 2784.183662][T11728] bond81: (slave bridge76): Enslaving as an active interface with an up link [ 2784.194778][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond81: link becomes ready 06:49:44 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x83, 0x0) dup2(r1, r2) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, '/dev/rfkill\x00'}, {0x20, 'list:set\x00'}, {0x20, '+'}, {0x20, '/dev/vcsu\x00'}], 0xa, "2b2f2d7e176176afe424be1bf42dcaf398503f264d23f4bf0e2d7b8bad327a034b6dc3f79105c4b6a4ceb3c7c8909362d21231add477847233252271766aa45956a424ef77cf7e117d11d7f2f9c226da02c51966958ae580782487878599578488a2cb8590d63f3b221c6f3f045f0a347e22be01a9854a303db7e94a2da17db30389ffcff966c6bba431ddf3"}, 0xbc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 06:49:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:49:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x43, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:44 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:44 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000496000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/138, 0x8a, 0x1, &(0x7f0000000280)=""/142, 0x8e}, &(0x7f0000000340)=0x40) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4200, r3, 0x1, 0x8) ptrace(0x4207, r3) ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x9c, 0x1f, 0x2, 0x0, 0xffffffff, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x4}, 0x20d4, 0x7fffffff, 0x9, 0x1, 0x3f, 0x7, 0x5, 0x0, 0x2, 0x0, 0xfc}, r3, 0x6, r0, 0x9) r4 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r4, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2790.192566][T11741] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2790.214186][T11741] 8021q: adding VLAN 0 to HW filter on device bond82 [ 2790.221431][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2790.232979][T11745] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2790.241075][T11745] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2790.256611][T11738] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2790.265620][T11738] bond10 (uninitialized): Released all slaves [ 2790.279502][T11741] bond82: (slave bridge77): making interface the new active one 06:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:49:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2790.288300][T11741] bond82: (slave bridge77): Enslaving as an active interface with an up link [ 2790.302183][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond82: link becomes ready [ 2790.332039][T11754] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2790.347403][T11754] bond10 (uninitialized): Released all slaves [ 2790.354097][T11752] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2790.368151][T11752] 8021q: adding VLAN 0 to HW filter on device bond83 [ 2790.375296][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2790.387295][T11756] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:49:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2790.395058][T11756] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2790.410155][T11742] macsec0 speed is unknown, defaulting to 1000 06:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2790.443385][T11759] bond83: (slave bridge78): making interface the new active one [ 2790.452319][T11759] bond83: (slave bridge78): Enslaving as an active interface with an up link [ 2790.464560][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond83: link becomes ready [ 2790.473811][T11761] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2790.486739][T11761] bond10 (uninitialized): Released all slaves [ 2790.497690][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2790.511063][T11765] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2790.519121][T11765] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2790.534280][T11766] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2790.548907][T11766] 8021q: adding VLAN 0 to HW filter on device bond84 [ 2790.567160][T11767] bond84: (slave bridge79): making interface the new active one [ 2790.576129][T11767] bond84: (slave bridge79): Enslaving as an active interface with an up link [ 2790.586704][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond84: link becomes ready 06:49:52 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x83, 0x0) dup2(r1, r2) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, '/dev/rfkill\x00'}, {0x20, 'list:set\x00'}, {0x20, '+'}, {0x20, '/dev/vcsu\x00'}], 0xa, "2b2f2d7e176176afe424be1bf42dcaf398503f264d23f4bf0e2d7b8bad327a034b6dc3f79105c4b6a4ceb3c7c8909362d21231add477847233252271766aa45956a424ef77cf7e117d11d7f2f9c226da02c51966958ae580782487878599578488a2cb8590d63f3b221c6f3f045f0a347e22be01a9854a303db7e94a2da17db30389ffcff966c6bba431ddf3"}, 0xbc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x83, 0x0) (async) dup2(r1, r2) (async) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, '/dev/rfkill\x00'}, {0x20, 'list:set\x00'}, {0x20, '+'}, {0x20, '/dev/vcsu\x00'}], 0xa, "2b2f2d7e176176afe424be1bf42dcaf398503f264d23f4bf0e2d7b8bad327a034b6dc3f79105c4b6a4ceb3c7c8909362d21231add477847233252271766aa45956a424ef77cf7e117d11d7f2f9c226da02c51966958ae580782487878599578488a2cb8590d63f3b221c6f3f045f0a347e22be01a9854a303db7e94a2da17db30389ffcff966c6bba431ddf3"}, 0xbc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) (async) 06:49:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:49:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:49:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:52 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:49:52 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000496000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/138, 0x8a, 0x1, &(0x7f0000000280)=""/142, 0x8e}, &(0x7f0000000340)=0x40) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4200, r3, 0x1, 0x8) ptrace(0x4207, r3) ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x9c, 0x1f, 0x2, 0x0, 0xffffffff, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x4}, 0x20d4, 0x7fffffff, 0x9, 0x1, 0x3f, 0x7, 0x5, 0x0, 0x2, 0x0, 0xfc}, r3, 0x6, r0, 0x9) r4 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r4, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) inotify_init1(0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000496000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/138, 0x8a, 0x1, &(0x7f0000000280)=""/142, 0x8e}, &(0x7f0000000340)=0x40) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) (async) ptrace$setopts(0x4200, r3, 0x1, 0x8) (async) ptrace(0x4207, r3) (async) ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) (async) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x9c, 0x1f, 0x2, 0x0, 0xffffffff, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x4}, 0x20d4, 0x7fffffff, 0x9, 0x1, 0x3f, 0x7, 0x5, 0x0, 0x2, 0x0, 0xfc}, r3, 0x6, r0, 0x9) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r4, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 06:49:52 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) r2 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000496000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/138, 0x8a, 0x1, &(0x7f0000000280)=""/142, 0x8e}, &(0x7f0000000340)=0x40) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4200, r3, 0x1, 0x8) ptrace(0x4207, r3) (async) ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) (async) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x9c, 0x1f, 0x2, 0x0, 0xffffffff, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x4}, 0x20d4, 0x7fffffff, 0x9, 0x1, 0x3f, 0x7, 0x5, 0x0, 0x2, 0x0, 0xfc}, r3, 0x6, r0, 0x9) r4 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r4, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2798.559452][T11778] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2798.574451][T11778] 8021q: adding VLAN 0 to HW filter on device bond85 [ 2798.650180][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2798.662523][T11781] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2798.670565][T11781] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:49:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:49:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:49:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2798.694246][T11778] bond85: (slave bridge80): making interface the new active one [ 2798.702979][T11778] bond85: (slave bridge80): Enslaving as an active interface with an up link [ 2798.714150][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond85: link becomes ready [ 2798.800246][T11808] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2798.814409][T11808] 8021q: adding VLAN 0 to HW filter on device bond86 [ 2798.822375][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2798.834194][T11807] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:49:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:49:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2798.843230][T11807] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2798.857976][T11779] macsec0 speed is unknown, defaulting to 1000 [ 2798.865275][T11809] bond86: (slave bridge81): making interface the new active one [ 2798.874251][T11809] bond86: (slave bridge81): Enslaving as an active interface with an up link [ 2798.883896][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond86: link becomes ready [ 2798.953864][T11814] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2798.970894][T11814] 8021q: adding VLAN 0 to HW filter on device bond87 [ 2798.987299][T11816] bond87: (slave bridge82): making interface the new active one [ 2798.997215][T11816] bond87: (slave bridge82): Enslaving as an active interface with an up link [ 2799.007640][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond87: link becomes ready 06:50:01 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x83, 0x0) dup2(r1, r2) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, '/dev/rfkill\x00'}, {0x20, 'list:set\x00'}, {0x20, '+'}, {0x20, '/dev/vcsu\x00'}], 0xa, "2b2f2d7e176176afe424be1bf42dcaf398503f264d23f4bf0e2d7b8bad327a034b6dc3f79105c4b6a4ceb3c7c8909362d21231add477847233252271766aa45956a424ef77cf7e117d11d7f2f9c226da02c51966958ae580782487878599578488a2cb8590d63f3b221c6f3f045f0a347e22be01a9854a303db7e94a2da17db30389ffcff966c6bba431ddf3"}, 0xbc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0xa) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x83, 0x0) (async) dup2(r1, r2) (async) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, '/dev/rfkill\x00'}, {0x20, 'list:set\x00'}, {0x20, '+'}, {0x20, '/dev/vcsu\x00'}], 0xa, "2b2f2d7e176176afe424be1bf42dcaf398503f264d23f4bf0e2d7b8bad327a034b6dc3f79105c4b6a4ceb3c7c8909362d21231add477847233252271766aa45956a424ef77cf7e117d11d7f2f9c226da02c51966958ae580782487878599578488a2cb8590d63f3b221c6f3f045f0a347e22be01a9854a303db7e94a2da17db30389ffcff966c6bba431ddf3"}, 0xbc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) (async) 06:50:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:50:01 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:01 executing program 5: perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x3, 0x3, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2807.849781][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2807.861717][T11833] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2807.869768][T11833] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2807.884224][T11832] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:50:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2807.898260][T11832] 8021q: adding VLAN 0 to HW filter on device bond88 [ 2807.905714][T11831] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2807.919668][T11831] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2807.938731][T11832] bond88: (slave bridge83): making interface the new active one 06:50:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1a, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2807.947876][T11832] bond88: (slave bridge83): Enslaving as an active interface with an up link [ 2807.959977][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond88: link becomes ready [ 2807.969167][T11841] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2807.993462][T11841] 8021q: adding VLAN 0 to HW filter on device bond11 06:50:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2808.001194][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2808.013289][T11845] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2808.021789][T11845] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2808.036673][T11827] macsec0 speed is unknown, defaulting to 1000 [ 2808.036692][T11847] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:50:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2808.061745][T11847] 8021q: adding VLAN 0 to HW filter on device bond89 [ 2808.068868][T11849] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2808.082804][T11849] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2808.097267][T11851] bond89: (slave bridge84): making interface the new active one 06:50:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2808.106950][T11851] bond89: (slave bridge84): Enslaving as an active interface with an up link [ 2808.122440][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond89: link becomes ready [ 2808.140703][T11855] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2808.149093][T11855] bond13 (uninitialized): Released all slaves [ 2808.155408][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2808.167235][T11858] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2808.175214][T11858] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:50:09 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101400, 0x0) set_mempolicy(0x4000, &(0x7f0000000080), 0x100000001) 06:50:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:09 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:09 executing program 5: perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x3, 0x3, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2815.074844][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2815.090125][T11870] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2815.097917][T11870] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2815.113249][T11877] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2815.127373][T11877] 8021q: adding VLAN 0 to HW filter on device bond90 [ 2815.137086][T11875] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2815.145945][T11875] bond13 (uninitialized): Released all slaves [ 2815.162456][T11877] bond90: (slave bridge85): making interface the new active one 06:50:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x25, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2815.171164][T11877] bond90: (slave bridge85): Enslaving as an active interface with an up link [ 2815.189995][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond90: link becomes ready [ 2815.209626][T11885] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2815.240017][T11885] 8021q: adding VLAN 0 to HW filter on device bond91 [ 2815.247127][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2815.259194][T11887] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2815.266990][T11887] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2815.282075][T11876] macsec0 speed is unknown, defaulting to 1000 06:50:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2815.288291][T11889] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2815.298237][T11889] bond13 (uninitialized): Released all slaves [ 2815.315126][T11885] bond91: (slave bridge86): making interface the new active one [ 2815.324138][T11885] bond91: (slave bridge86): Enslaving as an active interface with an up link 06:50:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc2, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2815.345158][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond91: link becomes ready [ 2815.356324][T11895] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2815.374074][T11895] 8021q: adding VLAN 0 to HW filter on device bond92 [ 2815.387291][T11897] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2815.395823][T11897] bond13 (uninitialized): Released all slaves [ 2815.404937][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2815.416786][T11900] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2815.425188][T11900] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2815.446375][T11895] bond92: (slave bridge87): making interface the new active one [ 2815.455878][T11895] bond92: (slave bridge87): Enslaving as an active interface with an up link [ 2815.472519][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond92: link becomes ready 06:50:16 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101400, 0x0) set_mempolicy(0x4000, &(0x7f0000000080), 0x100000001) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101400, 0x0) (async) set_mempolicy(0x4000, &(0x7f0000000080), 0x100000001) (async) 06:50:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xca, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:16 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:16 executing program 5: perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x3, 0x3, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x3, 0x3, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) [ 2822.234091][T11908] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2822.254164][T11908] 8021q: adding VLAN 0 to HW filter on device bond93 [ 2822.261488][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2822.273309][T11913] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2822.281306][T11913] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2822.297034][T11915] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2822.305584][T11915] bond13 (uninitialized): Released all slaves [ 2822.322973][T11908] bond93: (slave bridge88): making interface the new active one 06:50:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3a, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xcd, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2822.333937][T11908] bond93: (slave bridge88): Enslaving as an active interface with an up link [ 2822.348720][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond93: link becomes ready [ 2822.364643][T11912] macsec0 speed is unknown, defaulting to 1000 [ 2822.376366][T11927] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2822.403352][T11927] 8021q: adding VLAN 0 to HW filter on device bond94 [ 2822.410656][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2822.422304][T11930] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2822.430680][T11930] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2822.445514][T11931] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 06:50:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xee, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2822.454094][T11931] bond13 (uninitialized): Released all slaves [ 2822.467119][T11927] bond94: (slave bridge89): making interface the new active one [ 2822.475940][T11927] bond94: (slave bridge89): Enslaving as an active interface with an up link [ 2822.491019][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond94: link becomes ready [ 2822.524388][T11937] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2822.541543][T11937] 8021q: adding VLAN 0 to HW filter on device bond95 [ 2822.548714][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2822.561502][T11938] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2822.569378][T11938] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2822.586108][T11940] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2822.601538][T11940] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2822.615582][T11937] bond95: (slave bridge90): making interface the new active one [ 2822.624566][T11937] bond95: (slave bridge90): Enslaving as an active interface with an up link [ 2822.637623][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond95: link becomes ready 06:50:24 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101400, 0x0) set_mempolicy(0x4000, &(0x7f0000000080), 0x100000001) 06:50:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf8, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:24 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:24 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x1, "2156816c73038c"}) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/14, 0xe) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={r3, 0x0, "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", "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"}) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2830.520660][T11958] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2830.536372][T11958] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2830.543615][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2830.555429][T11959] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:50:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2830.563435][T11959] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2830.578414][T11956] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2830.594056][T11956] 8021q: adding VLAN 0 to HW filter on device bond96 06:50:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x146, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2830.619376][T11965] bond96: (slave bridge91): making interface the new active one [ 2830.631165][T11965] bond96: (slave bridge91): Enslaving as an active interface with an up link [ 2830.645412][T11967] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2830.672418][T11967] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2830.680023][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond96: link becomes ready [ 2830.689761][T11969] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2830.704382][T11969] 8021q: adding VLAN 0 to HW filter on device bond97 [ 2830.711658][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2830.724376][T11972] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2830.732578][T11972] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2830.747588][T11953] macsec0 speed is unknown, defaulting to 1000 [ 2830.763758][T11975] bond97: (slave bridge92): making interface the new active one 06:50:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x158, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2830.772746][T11975] bond97: (slave bridge92): Enslaving as an active interface with an up link [ 2830.782109][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond97: link becomes ready [ 2830.798357][T11977] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2830.819325][T11977] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2830.826534][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2830.839518][T11979] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2830.847324][T11979] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2830.863031][T11982] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2830.876975][T11982] 8021q: adding VLAN 0 to HW filter on device bond98 [ 2830.896424][T11984] bond98: (slave bridge93): making interface the new active one [ 2830.905339][T11984] bond98: (slave bridge93): Enslaving as an active interface with an up link [ 2830.917981][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond98: link becomes ready 06:50:28 executing program 1: set_mempolicy(0x2, &(0x7f0000000000), 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) 06:50:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1d3, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:28 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:28 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async, rerun: 32) r0 = syz_clone3(0x0, 0x0) (rerun: 32) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x1, "2156816c73038c"}) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/14, 0xe) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={r3, 0x0, "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", "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"}) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:50:28 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async, rerun: 32) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x1, "2156816c73038c"}) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/14, 0xe) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={r3, 0x0, "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", "87eb6f6f78193e77ea1b4caab19ac89c0c5218d94cf086da763c599e5e83ff4b8e89af2adaa10c885b79d3c72acd08025aad3b9ec159a6532df9dc5dd55e6aefa03f24adf377da36280445e8d8d5942624acce2ccf6720a563e0d852073a41fc65d2a067cf435a86e70cd5c6932cd95ed9fef85d40d40d6db9420ea16d9ce0fb6aef18768f42577149a6d0dac2a65491c6e46b7521bc9e19490c1c87e1939770c01c13fcc26f70b14ea7d12b660a7e15cd07b973750b61dbf7a648eece6113ea555246c00f638179397226e023a0cd80f11566d046dd7eab7b9ecec0d281a9a44f0a3bd6177ec5526788e60643f8bb83444e26345f1d7612c535c78211b315ceb97d760808cd671ace242fb537423c4b02007fecf9b3bf4ae0e44b9bb157c5f563b6ef97752817171dba4c33ac44a6f7db7e6bc4686eb8776050cbd196d59909adc92ef522464a6e3a306e213676620041b5840f537535b37c2c3ab1bc8ce23080bd1ae7c829f31b2112fd863e51450cce13fca456e482f70dfd8f5fded092c7829605c8ac67e09693a3021d4a158f5cc287511984ffc268b35e0638f419735a38ad166db694875dc197335aea5ec8575aa6a9bce7f863a968f0b0fd7b15508de558566c64d33b463f479c6ffb89028f00aa3f01a447b9ec15790a94e4dcdc4dbef2b8aaa89f17d02fe91186b5980d5371b0a292bf0e9191d41643709f1ccf5e39c7d4fa4f63cfe856e7e7bed74aeeff4208efe4340ebafd91b3f4d79178cdc31cb2982780b20a723adba87b6500195cf1c863de987a0d5e3e077d3dc9404b512f6293438bdc261be65b9bccd36e742a0e754165096e847ac0af43e303d131e9ecb024fc2891ec20cfc9d6ec4c8428ef82989666d84e0369587bb05c093e9dd4957d3ed646626cdd71e0c4b92de6d3ec75be35c62252bb0d8f6f01d77bb504309ce63445915e35ea6cf847df0e893f980707d9e5d4d63aea3d99ea3b952b5b2d2afb0d78ff417f4ab63eb6442a5573298cdeb697417241f5884ee8090cdc846c7e1920ce43fbb90393e653cd3a386da2312a68d96746b860dd4b71f3194c08ce7084ac650130bfe038a542aa7a1d329d65f33b4905b03ec78e9fd5b520eb35445189c9ff47b688f36fb79418775ef9bfd98383de04ff5d8511089b7bfc0ea569672d9f7a5c5dcc75e7250ec03685c4909f5696f26001eeec51aeddac7fe83d2ea8847e49337088529ef0657a26401d33e96b9c1db0e7dccc041b658843127a8ca6722f0c8eef652024a4ae5da0b03578530141a745ffd9cd2e3cb15a8fc7f080b5a4b4570d6dc0f63efe90384eddb645e520f588bac712b217a7aa046cf0b9bf5521eea20ec8f25cfc3a1f288cda382a4126a0645d81398c48459e9514bc1df6c091a762ff2108d4998a6b331e9c3847f3d032a5cd06646d619a1f48e6ad93a65047981e6eefa37af711a65b51e2a463741940945d64d928d1e9a3bdbfcaaa18f5bb609f1d41f77d0e2b0fd03e227a35ee908a6d4701a39e6d7a4b78f554acb7b2912d2b7e1ccf8d6f228f50140961161909bf5e89eeefa08b2b95addd05e3fe577450e65530ea45d3386cb5f76ee77f369769b358ed6e1a0693c7f7f3f30339e681931ccfbb5a17a7ad97ca895d6f6c550950c7869c4ea428a2e1779eec0165dbe645cd836b1ac028c90985c903f1fef6f609bdc691e781a681e2940a7fc7a2f5091d1e19a7e8e17bee93f78995e03b57eb87c7f112314ad8ad96296629afcea87ffce7c6ca5faa6d0cffcc7ce7a992b4f558c9b5ba2f98439a62e7e822ccd52e2815c40403f1d166a97a2dd126459bae2a2d6df5a9d9e014e14c3b87ad0fce5f82923fd5dcaf8f67882ecd1332f437f6ab53a2125f367fccf7341bacc38ff94e0f5ece6901043685c04885b163f6dde21a6b9572377cadd9e015a89d1cd7d19bc66ec08f48cf2846cdd50fca0fa248f193be569794f778e4a8ed8da02cb239080096b169e1e1ded29aab3f55ecb3ddbc6a60971b2d416b1f432893d92fc7d699f484ad25521135ca376317fc627ca1bb72d9a5cf72586b6f0675886e0631998375403c2e4ee486720bfc08d527b2b10d9226ce05f573ecfde176d709032186ae87f816b6573356ee860a37da9ca202d0e92742e6a0988de61e678e936c685e36684c653776b16d96d4d3b0c59e68b2f624b0cf8b16b5087811ade61e8ae69abd9ccc3c35e705d61b340ad816bfd850f400e6efc10e68f7d5061d428a3028b4c99d0e52c41b33cf0a372a53b8e50a83c981b42cd4ce6e66d1a4082e33440947257a39da8415b274bf7f3c678a42804cebdb5acb246871a012e98b94da752798045233db978e1206a3f3782caf1b62a0c9936edeb20c804e581e13a19301a4656eea95dfb4ebbab08eaf943c9d3b45e0df58530d9c15f39c605fe4401ce060d4150b582fd5b9b72ba4dbbb6df756866831ec28992a9d69eb193903f0fcd9619933a0aff6895f0c1b9994acff35786f778ffe4f7eb204fb5cf8d0fea923dc017de915b7aaae0160c156efa43092856b5f55402512f71ef857ef7869dd308c405dbb1442ca7774f831f60b08377bfec63d864564bd4e6632dd84b15d7002c58e80d0f1e7acba20b8d604d4d2992a33c3ddaa2167c40df3b3776a6c1f127685ba39abdf46b82fc69fd50f4bd1da5578e0b87153e72f835ef6c6560bbac3159a10e0ce7d1b2fa8d4f8d82940b79fc7ceac1e4357f4453bce0ddefdd80f25ef3e14b0b02861d8dfb643050ea0a4c4048adf8780da80081630999491a4573259750de1a74e18e2566b3d3a6a356fae50bf285267d361efc3cd329cd391695b99a98f8e69c89e917a0b7b3c86c57958ddafb61e039438ca24cacb2c5ec228862efc4f086b14ab75d1c33ac6935ce8fb0ba07dbcf0c2bb861c066dcfc7cc781237c31eeed4957d5461dca56a63ec813e05e23e4eefe2e248c0ea60f5126de3123a9d8574c57e5b1a1482bd21648fe9370ca4c85e6af734cd4d52ae9ff56b6266059291f945f7879e3abe614a4c3d1de4b0de37b15d5cafd2cfe5ce18e6bd32ef653b139d553d901d17893411fa60e3d183edeb05e0b56ddd3e10cbcddf468241cff08375bb52a9b8606e9d1716272cc80afac1de32645536a64e1c15a917cfd7090ed10502bab4041ec8a55813cd0ce274dac1f8bc011a3d4bc70c4f24f6ca492378572ca49aaff97dd5d3d6904cbe1876fb4a5921d7a6509efa5ad35a99660d5a821425099973ecb6de7a59dbf3ffc5c174dd2f60be21478ac5609a26779d05db6c7493c848f2913fd43111ab823a6f69bd2c50dbfc2ea7f1cbc7bea466dc7d17667b71ee9fd96ba8cc06fa8abf6d188aa914147315fc0e1f10deb6f163380c140e22b17321a1e2cfad13058f999cf5eb70f2e73a6b0a7ebd321651c3b61b4d71f13cf3c5a0262646c716c524eef4adee2b7999e2b9fbdf844967b8c357d0e696116dbbf7c76227fef7e7cfa2b1dfad7493cd2e972316b6ac14e608843539a24dc5336dbe781d84fc46232c607bf1244feac64358e9e93863148ffb64ce91217d85ba9076d831c21144a0358fdb959118d0969b8398e0eac78bb4d0aea071ad578bacfa8183af8607e2ff6974fe5e6a97390995ff89a1891d50720bfd3325593bcf55847d79a177b3c7ffcbd09626edc404bedc662937b65e717005a314ded319f84c9518798ea9b36c074d841dbfb92cce857e05276afd3573f965bdb2459c14d9b27f281e8aced259d67112da5e43ac91ca12742fa7bee83d7cdad208acd4b80a5fc77cb7c06c5a629c7a3d44f52030b03f2cd6a7e8e711a6bd293207002f4a73a03e173ed30f61416acb47ac8fdd8b5f70d7b32b95af79ac96dc3b0518e540068d12251ec151750d5e3346a21aea81857691ca6d4aec69cb5e09ea926b565f62871b80e80700c19826895b479f150f688b9a45e3b670d3dc127f7c121d65819c4652ee2d51405965a3caf8da687ca81969df5fd6b955d424f7a98043d56878693f0b4fb48ebf52c2a986d909169933fcc7128698b6ec3fbf1723c19adf4a661c3062771623b58b31480051612d54cf64526e6cbfc92da30d4062e7ea2a193b41f38e18791320dcb0ccd558bd780710f208133e4a66159332f3fde8afdf3aaf2124925b66c0e7921a4e285d0c781591e55a3ac3ab5eb137212141e119c10d87ac212dcbb01390b417a147e99f1f8bd95f881354144cf2203ff75c2f80b9a3ebae10e4f9550e645c8db22675d7fa045632edc77e2f9c7f848c5e22e961f08bdbbd783c32f19491b4809082f8df405982d9fc6ad47bc78b4a2851eae12c2e36277d238261a70ab467baacb4315bbf91f84ecadd7504e3fd55406d2800317db642dc8727577d5bb59bf8505824726825523eac97f538ecf1d4e1be0d546b2b941eee8d3debb85bc731dff5a6ff572cf81afdb7b4fb5700eb404002f6a1c30f85e07b5fd3f11c45d00fa377b4604655c25344d6f218b90230714fbcca097d16b3d66677868cdfc219dc92fdc4930f9da43e6dfd8bbc921c1e590320f23d3bdf910edd7b73b35254121e3f6fa55ea0d3eedb0c2b275435ad4904ad7c5ff92e3c34658bdfb132dee21e4cf7b10a368dc36635b6c08513a113f6a2d967842e22abb30eb6f96a7e3e9bf6e221069c67df82213c1ae94fe31bd8a53871a9c389f80e8bcc231714a8a88b29ccb4f499977109b9959755d7aef7568461fe96e8b94a41ff988561effb3756590bb473b3ca1a1bfe3bb86d5195a26ac580fa013bea8fc9c888da5a2d80fc39ae89fb6b1a55f4803bfcaa88d220a1282ea4435f71b81cbdad94614fa5e14c985a50e40bfad10940b79e4a5abeaaaa7219f4074cf7f836afcd2b925025a7a67855f31ad596d420174ab09e79fe1f42cc01d9f4b6bf5e735904c06fd075a1e048a850a10472536a90aff5604ce7327d80f8205ea1579089ba0f2fce9b43a068568afad083d51c72364c276e9f1dfb98f4765140f49aba16c873875a491cecd389a611f001c590a6383d9869f0bd16ddf0d3180362e7b529ec09cd5d47b4fff7ac8cbdd9b99263a984e7ea54366b29f59bab68c41123195015f567a67b4e2cbc5cb31113240cc0b44e9832864de01f97b7dae56ad65d15bba6f7bbb4f4a04229331e46117cfa1a2ae84ba185442ea8478783d7dae54c46832aa7b8202cea792b568fe951f791cd78aeb6fc5f3ec5aac44aed9abe0c0b2c4fc082932572b23c06600e11455f706a605c010cd82a455e94984d37b2282a01ffb436383ddb64b67a0afde1ce9ab5178a6b74017723cccca2cb89e95298a53562ef702b54343d04774e909b9712029ee54b0e5306c1b3fca399c7d9b69b8c5233250cb39ef52bfdbdb1d1084f0487a958bb07e185e506"}) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async, rerun: 64) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) [ 2834.668838][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2834.685970][T11997] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2834.694847][T11997] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2834.710844][T12000] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 06:50:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2834.724233][T12000] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2834.731708][T11999] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2834.745624][T11999] 8021q: adding VLAN 0 to HW filter on device bond99 06:50:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1f8, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2834.768076][T12016] bond99: (slave bridge94): making interface the new active one [ 2834.777126][T12016] bond99: (slave bridge94): Enslaving as an active interface with an up link [ 2834.788820][T12019] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2834.808812][T12019] 8021q: adding VLAN 0 to HW filter on device bond18 [ 2834.816098][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond99: link becomes ready 06:50:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2834.826083][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2834.839065][T12022] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2834.847312][T12022] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2834.864501][T12024] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:50:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2834.880508][T12024] 8021q: adding VLAN 0 to HW filter on device bond100 [ 2834.887812][T12001] macsec0 speed is unknown, defaulting to 1000 [ 2834.897145][T12025] bond100: (slave bridge95): making interface the new active one [ 2834.907058][T12025] bond100: (slave bridge95): Enslaving as an active interface with an up link [ 2834.930973][T12028] 8021q: adding VLAN 0 to HW filter on device bond19 [ 2834.938587][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond100: link becomes ready [ 2834.964675][T12031] 8021q: adding VLAN 0 to HW filter on device bond101 [ 2834.983388][T12031] bond101: (slave bridge96): making interface the new active one [ 2834.992730][T12031] bond101: (slave bridge96): Enslaving as an active interface with an up link [ 2835.006615][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bond101: link becomes ready 06:50:35 executing program 1: set_mempolicy(0x2, &(0x7f0000000000), 0x4) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) 06:50:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x23c, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:35 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:35 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x214d43, 0x0) [ 2841.844997][T12040] validate_nla: 2 callbacks suppressed [ 2841.845012][T12040] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2841.869023][T12040] 8021q: adding VLAN 0 to HW filter on device bond102 [ 2841.876215][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2841.887963][T12045] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2841.896046][T12045] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2841.912983][T12048] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2841.926112][T12048] 8021q: adding VLAN 0 to HW filter on device bond20 06:50:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x72, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25a, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2841.942049][T12040] bond102: (slave bridge97): making interface the new active one [ 2841.951163][T12040] bond102: (slave bridge97): Enslaving as an active interface with an up link [ 2841.969185][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond102: link becomes ready [ 2841.991698][T12056] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2842.008338][T12056] 8021q: adding VLAN 0 to HW filter on device bond21 [ 2842.018287][T12058] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2842.032059][T12058] 8021q: adding VLAN 0 to HW filter on device bond103 06:50:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2842.039293][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2842.051301][T12059] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2842.059392][T12059] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2842.079470][T12046] macsec0 speed is unknown, defaulting to 1000 06:50:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x26c, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2842.097085][T12058] bond103: (slave bridge98): making interface the new active one [ 2842.107007][T12058] bond103: (slave bridge98): Enslaving as an active interface with an up link [ 2842.120977][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bond103: link becomes ready [ 2842.131726][T12063] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2842.140275][T12063] bond22 (uninitialized): Released all slaves [ 2842.154124][T12065] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2842.167712][T12065] 8021q: adding VLAN 0 to HW filter on device bond104 [ 2842.175099][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2842.187546][T12068] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2842.195846][T12068] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2842.228894][T12065] bond104: (slave bridge99): making interface the new active one [ 2842.238235][T12065] bond104: (slave bridge99): Enslaving as an active interface with an up link [ 2842.249662][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond104: link becomes ready 06:50:44 executing program 1: set_mempolicy(0x2, &(0x7f0000000000), 0x4) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) 06:50:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7a, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x274, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:44 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:44 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x214d43, 0x0) [ 2850.199245][T12084] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2850.216166][T12084] 8021q: adding VLAN 0 to HW filter on device bond105 [ 2850.224729][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2850.236684][T12082] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2850.245731][T12082] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2850.262033][T12086] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2850.270565][T12086] bond22 (uninitialized): Released all slaves [ 2850.284511][T12084] bond105: (slave bridge100): making interface the new active one 06:50:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xb4, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x282, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2850.293762][T12084] bond105: (slave bridge100): Enslaving as an active interface with an up link [ 2850.307857][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond105: link becomes ready [ 2850.327005][T12093] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2850.357028][T12093] 8021q: adding VLAN 0 to HW filter on device bond106 [ 2850.364332][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2850.377492][T12096] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2850.385362][T12096] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:50:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) [ 2850.401732][T12097] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2850.410233][T12097] bond22 (uninitialized): Released all slaves [ 2850.416535][T12087] macsec0 speed is unknown, defaulting to 1000 [ 2850.425590][T12093] bond106: (slave bridge101): making interface the new active one [ 2850.436567][T12093] bond106: (slave bridge101): Enslaving as an active interface with an up link [ 2850.449060][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond106: link becomes ready 06:50:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x286, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2850.481217][T12104] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2850.495908][T12104] 8021q: adding VLAN 0 to HW filter on device bond107 [ 2850.503713][T12103] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2850.512406][T12103] bond22 (uninitialized): Released all slaves [ 2850.520876][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2850.532809][T12106] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2850.540728][T12106] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2850.563837][T12104] bond107: (slave bridge102): making interface the new active one [ 2850.573780][T12104] bond107: (slave bridge102): Enslaving as an active interface with an up link [ 2850.591556][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond107: link becomes ready 06:50:53 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x904000000000) set_mempolicy(0x8000, &(0x7f0000000180), 0x100000001) set_mempolicy(0x0, &(0x7f0000000100)=0x80000000, 0x94d) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="0120e2b91171bfab830000005218c4039edfc14ccfef8be5173b9df72a4f9bbd7b1712cee1f8e68585f4ad18260e92d40245af9a360ef355eff1", @ANYRES32=r1, @ANYBLOB="ff0f0000e7ff00002e2f66696c653000"]) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:50:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc2, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 06:50:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x299, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:53 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0x0, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:53 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x214d43, 0x0) [ 2859.517197][T12121] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2859.530260][T12121] bond22 (uninitialized): Released all slaves [ 2859.536586][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2859.548704][T12124] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:50:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) [ 2859.556537][T12124] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2859.572982][T12123] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2859.586756][T12123] 8021q: adding VLAN 0 to HW filter on device bond108 06:50:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xca, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2859.611725][T12129] bond108: (slave bridge103): making interface the new active one [ 2859.621184][T12129] bond108: (slave bridge103): Enslaving as an active interface with an up link [ 2859.632210][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond108: link becomes ready [ 2859.641744][T12132] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2859.656315][T12132] bond22 (uninitialized): Released all slaves 06:50:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2ac, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2859.663963][T12134] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2859.681833][T12134] 8021q: adding VLAN 0 to HW filter on device bond109 [ 2859.700481][T12134] bond109: (slave bridge104): making interface the new active one 06:50:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xcd, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2859.713283][T12134] bond109: (slave bridge104): Enslaving as an active interface with an up link [ 2859.722430][T12118] macsec0 speed is unknown, defaulting to 1000 [ 2859.722464][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2859.751115][T12138] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2859.762170][T12138] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2859.779691][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond109: link becomes ready [ 2859.788640][T12140] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2859.797532][T12140] bond22 (uninitialized): Released all slaves [ 2859.803766][T12142] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:50:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2bc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2859.817518][T12142] 8021q: adding VLAN 0 to HW filter on device bond110 [ 2859.835302][T12145] bond110: (slave bridge105): making interface the new active one [ 2859.844485][T12145] bond110: (slave bridge105): Enslaving as an active interface with an up link [ 2859.857931][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond110: link becomes ready [ 2859.867177][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2859.878588][T12148] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2859.886924][T12148] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:50:59 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x904000000000) (async) set_mempolicy(0x8000, &(0x7f0000000180), 0x100000001) (async) set_mempolicy(0x0, &(0x7f0000000100)=0x80000000, 0x94d) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="0120e2b91171bfab830000005218c4039edfc14ccfef8be5173b9df72a4f9bbd7b1712cee1f8e68585f4ad18260e92d40245af9a360ef355eff1", @ANYRES32=r1, @ANYBLOB="ff0f0000e7ff00002e2f66696c653000"]) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:50:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:50:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xee, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:59 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0x0, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:50:59 executing program 5: close(0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000498000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000499000/0x2000)=nil) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2865.716036][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2865.728622][T12157] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2865.737277][T12157] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2865.752192][T12158] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2865.767820][T12158] 8021q: adding VLAN 0 to HW filter on device bond111 [ 2865.775123][T12159] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2865.784247][T12159] bond22 (uninitialized): Released all slaves [ 2865.800165][T12163] bond111: (slave bridge106): making interface the new active one [ 2865.808966][T12163] bond111: (slave bridge106): Enslaving as an active interface with an up link 06:50:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf8, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:50:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x30c, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:50:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2865.818217][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond111: link becomes ready [ 2865.844086][T12168] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2865.869746][T12168] 8021q: adding VLAN 0 to HW filter on device bond112 [ 2865.877271][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2865.889441][T12171] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2865.897442][T12171] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:51:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x312, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:51:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x14b, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2865.912553][T12173] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2865.921313][T12173] bond22 (uninitialized): Released all slaves [ 2865.927645][T12153] macsec0 speed is unknown, defaulting to 1000 [ 2865.937486][T12168] bond112: (slave bridge107): making interface the new active one [ 2865.946573][T12168] bond112: (slave bridge107): Enslaving as an active interface with an up link [ 2865.960367][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond112: link becomes ready [ 2866.070966][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2866.082916][T12180] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2866.091271][T12180] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2866.105958][T12181] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2866.119861][T12181] 8021q: adding VLAN 0 to HW filter on device bond113 [ 2866.141141][T12182] bond113: (slave bridge108): making interface the new active one [ 2866.150554][T12182] bond113: (slave bridge108): Enslaving as an active interface with an up link [ 2866.159789][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond113: link becomes ready 06:51:09 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x904000000000) set_mempolicy(0x8000, &(0x7f0000000180), 0x100000001) (async) set_mempolicy(0x0, &(0x7f0000000100)=0x80000000, 0x94d) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="0120e2b91171bfab830000005218c4039edfc14ccfef8be5173b9df72a4f9bbd7b1712cee1f8e68585f4ad18260e92d40245af9a360ef355eff1", @ANYRES32=r1, @ANYBLOB="ff0f0000e7ff00002e2f66696c653000"]) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:51:09 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0x0, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:51:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 06:51:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x19e, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x342, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:09 executing program 5: close(0xffffffffffffffff) (async, rerun: 32) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000498000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000499000/0x2000)=nil) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async, rerun: 32) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async, rerun: 32) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2874.962040][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2874.974044][T12200] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2874.982348][T12200] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2874.997443][T12201] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2875.014334][T12201] 8021q: adding VLAN 0 to HW filter on device bond114 06:51:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x372, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1d3, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2875.073033][T12204] bond114: (slave bridge109): making interface the new active one [ 2875.082267][T12204] bond114: (slave bridge109): Enslaving as an active interface with an up link [ 2875.091719][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond114: link becomes ready [ 2875.110552][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:51:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r2, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2875.125470][T12207] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2875.133699][T12207] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2875.149083][T12209] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2875.169168][T12209] 8021q: adding VLAN 0 to HW filter on device bond115 06:51:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x392, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1f8, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2875.176636][T12198] macsec0 speed is unknown, defaulting to 1000 [ 2875.185343][T12213] bond115: (slave bridge110): making interface the new active one [ 2875.196333][T12213] bond115: (slave bridge110): Enslaving as an active interface with an up link [ 2875.249964][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond115: link becomes ready [ 2875.261115][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2875.273020][T12216] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2875.281269][T12216] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:51:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2875.296373][T12217] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2875.310765][T12217] 8021q: adding VLAN 0 to HW filter on device bond116 [ 2875.338846][T12218] bond116: (slave bridge111): making interface the new active one [ 2875.347780][T12218] bond116: (slave bridge111): Enslaving as an active interface with an up link [ 2875.400826][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond116: link becomes ready 06:51:18 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0xfffffffffffffffb, 0x4000000000000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000666696c653000"]) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) write$UHID_DESTROY(r2, &(0x7f0000000480), 0x4) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/168, 0xa8}], 0x4) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:51:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x39c, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x21c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:18 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:51:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:18 executing program 5: close(0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000498000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000499000/0x2000)=nil) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close(0xffffffffffffffff) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000498000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000499000/0x2000)=nil) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) [ 2884.235798][T12231] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2884.258055][T12231] 8021q: adding VLAN 0 to HW filter on device bond117 [ 2884.266508][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2884.278357][T12236] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:51:18 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r2}, {@void, @actul_num={@val=0x2d, 0x4, 0x6d}}}) unshare(0x400) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @rumble}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2884.286652][T12236] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:51:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x23c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3da, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2884.399003][T12231] bond117: (slave bridge112): making interface the new active one [ 2884.408400][T12231] bond117: (slave bridge112): Enslaving as an active interface with an up link [ 2884.425227][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond117: link becomes ready 06:51:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2884.442141][T12257] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2884.464145][T12257] 8021q: adding VLAN 0 to HW filter on device bond118 [ 2884.471685][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2884.487008][T12260] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2884.495085][T12260] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:51:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3de, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x25a, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2884.586582][T12257] bond118: (slave bridge113): making interface the new active one [ 2884.596441][T12257] bond118: (slave bridge113): Enslaving as an active interface with an up link [ 2884.605731][T12238] macsec0 speed is unknown, defaulting to 1000 [ 2884.612062][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond118: link becomes ready [ 2884.631761][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2884.656593][T12264] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2884.665435][T12264] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2884.683112][T12266] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2884.696888][T12266] 8021q: adding VLAN 0 to HW filter on device bond119 [ 2884.714763][T12266] bond119: (slave bridge114): making interface the new active one [ 2884.723875][T12266] bond119: (slave bridge114): Enslaving as an active interface with an up link [ 2884.735657][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond119: link becomes ready 06:51:27 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0xfffffffffffffffb, 0x4000000000000000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000666696c653000"]) (async, rerun: 32) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) write$UHID_DESTROY(r2, &(0x7f0000000480), 0x4) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/168, 0xa8}], 0x4) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:51:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x26c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3e8, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:27 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:51:27 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r2}, {@void, @actul_num={@val=0x2d, 0x4, 0x6d}}}) (async) unshare(0x400) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @rumble}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2893.435731][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2893.450716][T12282] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2893.458571][T12282] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2893.530232][T12285] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2893.545480][T12285] 8021q: adding VLAN 0 to HW filter on device bond120 06:51:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x274, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3ea, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2893.571746][T12287] bond120: (slave bridge115): making interface the new active one [ 2893.581168][T12287] bond120: (slave bridge115): Enslaving as an active interface with an up link [ 2893.590397][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond120: link becomes ready [ 2893.605015][T12283] macsec0 speed is unknown, defaulting to 1000 [ 2893.630644][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2893.645806][T12292] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2893.654478][T12292] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2893.671156][T12294] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2893.685407][T12294] 8021q: adding VLAN 0 to HW filter on device bond121 06:51:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3f0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x27c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2893.760566][T12294] bond121: (slave bridge116): making interface the new active one [ 2893.770652][T12294] bond121: (slave bridge116): Enslaving as an active interface with an up link [ 2893.797744][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond121: link becomes ready 06:51:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2893.810822][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2893.823554][T12298] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2893.831654][T12298] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2893.846863][T12300] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2893.862329][T12300] 8021q: adding VLAN 0 to HW filter on device bond122 [ 2893.938252][T12304] bond122: (slave bridge117): making interface the new active one [ 2893.947397][T12304] bond122: (slave bridge117): Enslaving as an active interface with an up link [ 2893.958731][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond122: link becomes ready 06:51:36 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0xfffffffffffffffb, 0x4000000000000000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000666696c653000"]) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) write$UHID_DESTROY(r2, &(0x7f0000000480), 0x4) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/168, 0xa8}], 0x4) (async, rerun: 64) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) 06:51:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x282, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3f4, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:36 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:51:36 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r1 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r2}, {@void, @actul_num={@val=0x2d, 0x4, 0x6d}}}) unshare(0x400) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @rumble}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r2}, {@void, @actul_num={@val=0x2d, 0x4, 0x6d}}}) (async) unshare(0x400) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @rumble}) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 06:51:36 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) r1 = syz_clone(0x100000, &(0x7f0000000200)="01", 0x1, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="652796b3895f7a503ea5f544176279e6c4ef8e3e28f967a9ffc73fe906a90f8fa79d5ed3bc6628a0aa40595903cf67a78c454a8238b07710a00aa525c3e371dfd9184aef8cccd246a466ba5d23973e83c1cab28df96529a7a9cc893e6ed2b4db03c0786b8892cd3f09b030a1ba3189c512f2850d9b75e97fca6a2095aef2c91b19fc") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) ptrace$setregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) syz_clone3(&(0x7f0000000440)={0x10c100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x1b}, &(0x7f0000000180)=""/61, 0x3d, &(0x7f00000001c0)=""/63, &(0x7f0000000400)=[r1, r2, r4], 0x3}, 0x58) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2902.690082][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2902.704537][T12317] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2902.713139][T12317] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2902.729327][T12318] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:51:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2902.743636][T12318] 8021q: adding VLAN 0 to HW filter on device bond123 [ 2902.758591][T12321] bond123: (slave bridge118): making interface the new active one [ 2902.767737][T12321] bond123: (slave bridge118): Enslaving as an active interface with an up link 06:51:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x286, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3fa, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2902.788636][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond123: link becomes ready [ 2902.850475][T12315] macsec0 speed is unknown, defaulting to 1000 [ 2902.850798][T12341] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2902.872967][T12341] 8021q: adding VLAN 0 to HW filter on device bond124 [ 2902.883108][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2902.894797][T12343] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2902.902858][T12343] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2902.923968][T12345] bond124: (slave bridge119): making interface the new active one [ 2902.934309][T12345] bond124: (slave bridge119): Enslaving as an active interface with an up link 06:51:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x288, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2902.948929][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond124: link becomes ready [ 2902.969543][T12349] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2902.990233][T12349] 8021q: adding VLAN 0 to HW filter on device bond125 [ 2903.040744][T12349] bond125: (slave bridge120): making interface the new active one [ 2903.049870][T12349] bond125: (slave bridge120): Enslaving as an active interface with an up link [ 2903.061264][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond125: link becomes ready 06:51:40 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) set_mempolicy(0x8000, &(0x7f0000000080)=0x6, 0xab9) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:51:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x299, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:40 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:51:40 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) r1 = syz_clone(0x100000, &(0x7f0000000200)="01", 0x1, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="652796b3895f7a503ea5f544176279e6c4ef8e3e28f967a9ffc73fe906a90f8fa79d5ed3bc6628a0aa40595903cf67a78c454a8238b07710a00aa525c3e371dfd9184aef8cccd246a466ba5d23973e83c1cab28df96529a7a9cc893e6ed2b4db03c0786b8892cd3f09b030a1ba3189c512f2850d9b75e97fca6a2095aef2c91b19fc") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) ptrace$setregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) syz_clone3(&(0x7f0000000440)={0x10c100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x1b}, &(0x7f0000000180)=""/61, 0x3d, &(0x7f00000001c0)=""/63, &(0x7f0000000400)=[r1, r2, r4], 0x3}, 0x58) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) syz_clone(0x100000, &(0x7f0000000200)="01", 0x1, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="652796b3895f7a503ea5f544176279e6c4ef8e3e28f967a9ffc73fe906a90f8fa79d5ed3bc6628a0aa40595903cf67a78c454a8238b07710a00aa525c3e371dfd9184aef8cccd246a466ba5d23973e83c1cab28df96529a7a9cc893e6ed2b4db03c0786b8892cd3f09b030a1ba3189c512f2850d9b75e97fca6a2095aef2c91b19fc") (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) (async) inotify_init1(0x0) (async) fcntl$setown(r3, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) (async) ptrace$setopts(0x4206, r4, 0x0, 0x0) (async) ptrace(0x4207, r4) (async) ptrace$setregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) (async) syz_clone3(&(0x7f0000000440)={0x10c100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x1b}, &(0x7f0000000180)=""/61, 0x3d, &(0x7f00000001c0)=""/63, &(0x7f0000000400)=[r1, r2, r4], 0x3}, 0x58) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) [ 2906.901953][T12358] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2906.923479][T12358] 8021q: adding VLAN 0 to HW filter on device bond126 [ 2906.931132][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2906.940547][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:51:41 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) r1 = syz_clone(0x100000, &(0x7f0000000200)="01", 0x1, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="652796b3895f7a503ea5f544176279e6c4ef8e3e28f967a9ffc73fe906a90f8fa79d5ed3bc6628a0aa40595903cf67a78c454a8238b07710a00aa525c3e371dfd9184aef8cccd246a466ba5d23973e83c1cab28df96529a7a9cc893e6ed2b4db03c0786b8892cd3f09b030a1ba3189c512f2850d9b75e97fca6a2095aef2c91b19fc") (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) (async) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) (async) ptrace(0x4207, r4) ptrace$setregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) syz_clone3(&(0x7f0000000440)={0x10c100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x1b}, &(0x7f0000000180)=""/61, 0x3d, &(0x7f00000001c0)=""/63, &(0x7f0000000400)=[r1, r2, r4], 0x3}, 0x58) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2906.952253][T12363] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2906.960298][T12363] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:51:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2b6, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2906.992772][T12358] bond126: (slave bridge121): making interface the new active one [ 2907.002010][T12358] bond126: (slave bridge121): Enslaving as an active interface with an up link 06:51:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x59d, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2907.062702][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond126: link becomes ready [ 2907.072324][T12396] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2907.098403][T12396] 8021q: adding VLAN 0 to HW filter on device bond127 [ 2907.113349][T12397] bond127: (slave bridge122): making interface the new active one [ 2907.122244][T12397] bond127: (slave bridge122): Enslaving as an active interface with an up link [ 2907.131377][T12364] macsec0 speed is unknown, defaulting to 1000 [ 2907.137608][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2907.152215][T12400] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:51:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2c2, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2907.160172][T12400] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2907.177319][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond127: link becomes ready [ 2907.187422][T12402] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2907.202691][T12402] 8021q: adding VLAN 0 to HW filter on device bond128 06:51:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5c2, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2907.212410][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2907.230873][T12402] bond128: (slave bridge123): making interface the new active one [ 2907.240240][T12402] bond128: (slave bridge123): Enslaving as an active interface with an up link [ 2907.300314][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond128: link becomes ready [ 2907.310415][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2907.322106][T12407] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2907.330554][T12407] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:51:48 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) set_mempolicy(0x8000, &(0x7f0000000080)=0x6, 0xab9) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) set_mempolicy(0x8000, &(0x7f0000000080)=0x6, 0xab9) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) 06:51:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5c3, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2f2, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:48 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:51:48 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x20100400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140), {0x20}, &(0x7f0000000180)=""/38, 0x26, &(0x7f00000001c0)=""/28, &(0x7f0000000200)=[r0], 0x1}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000080)=""/36, 0x200000a4) read$char_usb(r3, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7fc, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r5, &(0x7f0000000080)=""/36, 0x200000a4) pidfd_getfd(r5, r4, 0x0) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2914.076213][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2914.085813][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2914.097651][T12421] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2914.105676][T12421] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2914.183224][T12422] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2914.197244][T12422] 8021q: adding VLAN 0 to HW filter on device bond129 [ 2914.215998][T12425] bond129: (slave bridge124): making interface the new active one 06:51:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2914.225372][T12425] bond129: (slave bridge124): Enslaving as an active interface with an up link [ 2914.234818][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bond129: link becomes ready [ 2914.271522][T12431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2914.282849][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2914.295501][T12435] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2914.304127][T12435] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2914.320085][T12433] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2914.334618][T12433] 8021q: adding VLAN 0 to HW filter on device bond130 [ 2914.342116][T12420] macsec0 speed is unknown, defaulting to 1000 06:51:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x30c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2914.406718][T12437] bond130: (slave bridge125): making interface the new active one [ 2914.415456][T12437] bond130: (slave bridge125): Enslaving as an active interface with an up link [ 2914.428467][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond130: link becomes ready [ 2914.458434][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2914.470688][T12440] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2914.479816][T12440] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2914.494890][T12443] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2914.510025][T12443] 8021q: adding VLAN 0 to HW filter on device bond131 [ 2914.521989][T12444] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2914.596994][T12447] bond131: (slave bridge126): making interface the new active one [ 2914.606106][T12447] bond131: (slave bridge126): Enslaving as an active interface with an up link [ 2914.620211][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bond131: link becomes ready 06:51:57 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) set_mempolicy(0x8000, &(0x7f0000000080)=0x6, 0xab9) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:51:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x312, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:51:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:51:57 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4004743a, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:51:57 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x20100400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140), {0x20}, &(0x7f0000000180)=""/38, 0x26, &(0x7f00000001c0)=""/28, &(0x7f0000000200)=[r0], 0x1}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000080)=""/36, 0x200000a4) read$char_usb(r3, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7fc, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r5, &(0x7f0000000080)=""/36, 0x200000a4) pidfd_getfd(r5, r4, 0x0) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000240)={0x20100400, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x20}, &(0x7f0000000180)=""/38, 0x26, &(0x7f00000001c0)=""/28, &(0x7f0000000200)=[r0], 0x1}, 0x58) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r3, &(0x7f0000000080)=""/36, 0x200000a4) (async) read$char_usb(r3, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7fc, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r5, &(0x7f0000000080)=""/36, 0x200000a4) (async) pidfd_getfd(r5, r4, 0x0) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) [ 2923.357813][T12460] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2923.373508][T12460] 8021q: adding VLAN 0 to HW filter on device bond132 [ 2923.381319][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2923.393786][T12458] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:51:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x32c, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2923.402435][T12458] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2923.417966][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2923.435987][T12460] bond132: (slave bridge127): making interface the new active one [ 2923.444883][T12460] bond132: (slave bridge127): Enslaving as an active interface with an up link 06:51:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:51:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2923.502684][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond132: link becomes ready [ 2923.511888][T12469] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2923.531164][T12469] 8021q: adding VLAN 0 to HW filter on device bond133 [ 2923.566066][T12471] bond133: (slave bridge128): making interface the new active one [ 2923.580375][T12471] bond133: (slave bridge128): Enslaving as an active interface with an up link [ 2923.590146][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2923.602139][T12475] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:51:57 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x20100400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140), {0x20}, &(0x7f0000000180)=""/38, 0x26, &(0x7f00000001c0)=""/28, &(0x7f0000000200)=[r0], 0x1}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r2, &(0x7f0000000080)=""/36, 0x200000a4) (async) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r3, &(0x7f0000000080)=""/36, 0x200000a4) read$char_usb(r3, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7fc, 0xa5f}, 0x40000, 0x10001, 0x6, 0x7, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) read$char_usb(r5, &(0x7f0000000080)=""/36, 0x200000a4) (async) pidfd_getfd(r5, r4, 0x0) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:51:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x331, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2923.610478][T12475] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2923.626296][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2923.635819][T12459] macsec0 speed is unknown, defaulting to 1000 [ 2923.635939][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond133: link becomes ready 06:51:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb00, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2923.711449][T12503] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2923.725731][T12503] 8021q: adding VLAN 0 to HW filter on device bond134 [ 2923.751248][T12509] bond134: (slave bridge129): making interface the new active one [ 2923.760744][T12509] bond134: (slave bridge129): Enslaving as an active interface with an up link [ 2923.771401][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2923.784712][T12512] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2923.793262][T12512] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2923.807813][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond134: link becomes ready 06:52:05 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x400001, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x401, 0x4) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x8, 0xe}, {0x2, 0x1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x60000840) ppoll(&(0x7f00000000c0)=[{r1, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:52:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x33d, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:52:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:52:05 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:52:05 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x10482, 0x10001, 0xffffffc1, 0x7, 0x2, 0x80, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x400002, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2931.637044][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2931.646553][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2931.658601][T12523] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2931.667381][T12523] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2931.682144][T12528] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2931.697054][T12528] 8021q: adding VLAN 0 to HW filter on device bond135 06:52:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x342, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc03, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2931.771159][T12533] bond135: (slave bridge130): making interface the new active one [ 2931.780261][T12533] bond135: (slave bridge130): Enslaving as an active interface with an up link [ 2931.791355][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond135: link becomes ready [ 2931.812228][T12537] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:52:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2931.834433][T12537] 8021q: adding VLAN 0 to HW filter on device bond136 [ 2931.841817][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2931.854575][T12540] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2931.862681][T12540] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2931.877848][T12526] macsec0 speed is unknown, defaulting to 1000 06:52:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3d0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2931.886302][T12537] bond136: (slave bridge131): making interface the new active one [ 2931.895968][T12537] bond136: (slave bridge131): Enslaving as an active interface with an up link [ 2931.905292][T12542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2931.914988][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond136: link becomes ready 06:52:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd00, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2931.983434][T12546] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2931.999355][T12546] 8021q: adding VLAN 0 to HW filter on device bond137 [ 2932.016659][T12547] bond137: (slave bridge132): making interface the new active one 06:52:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3da, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2932.025776][T12547] bond137: (slave bridge132): Enslaving as an active interface with an up link [ 2932.034891][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2932.048812][T12550] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2932.056764][T12550] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2932.075615][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond137: link becomes ready [ 2932.085008][T12552] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2932.099629][T12552] 8021q: adding VLAN 0 to HW filter on device bond138 [ 2932.116310][T12554] bond138: (slave bridge133): making interface the new active one [ 2932.125348][T12554] bond138: (slave bridge133): Enslaving as an active interface with an up link [ 2932.136802][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond138: link becomes ready 06:52:09 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x400001, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x401, 0x4) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x8, 0xe}, {0x2, 0x1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x60000840) ppoll(&(0x7f00000000c0)=[{r1, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:52:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:52:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3e8, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:52:09 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:52:09 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (async) r0 = syz_clone3(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x10482, 0x10001, 0xffffffc1, 0x7, 0x2, 0x80, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x400002, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2935.810770][T12559] 8021q: adding VLAN 0 to HW filter on device bond22 [ 2935.818038][T12565] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2935.832701][T12565] 8021q: adding VLAN 0 to HW filter on device bond139 [ 2935.839910][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2935.853001][T12564] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:52:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2935.862189][T12564] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2935.885389][T12559] bond22: (slave bridge39): Enslaving as an active interface with an up link [ 2935.903382][T12565] bond139: (slave bridge134): making interface the new active one 06:52:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3ec, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2935.912836][T12565] bond139: (slave bridge134): Enslaving as an active interface with an up link [ 2935.931279][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond22: link becomes ready [ 2935.941548][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond139: link becomes ready 06:52:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1100, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2935.961607][T12575] 8021q: adding VLAN 0 to HW filter on device bond23 [ 2935.970512][T12577] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2935.985343][T12577] 8021q: adding VLAN 0 to HW filter on device bond140 [ 2935.998356][T12579] bond23: (slave bridge40): Enslaving as an active interface with an up link 06:52:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2936.007242][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond23: link becomes ready [ 2936.018518][T12561] macsec0 speed is unknown, defaulting to 1000 [ 2936.025301][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2936.039082][T12582] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2936.047795][T12582] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 06:52:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2936.070519][T12577] bond140: (slave bridge135): making interface the new active one [ 2936.079445][T12577] bond140: (slave bridge135): Enslaving as an active interface with an up link [ 2936.095287][T12584] 8021q: adding VLAN 0 to HW filter on device bond24 [ 2936.117489][T12585] bond24: (slave bridge41): Enslaving as an active interface with an up link [ 2936.127162][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond140: link becomes ready [ 2936.136420][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond24: link becomes ready [ 2936.146520][T12588] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2936.160845][T12588] 8021q: adding VLAN 0 to HW filter on device bond141 [ 2936.172141][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2936.183959][T12590] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2936.192811][T12590] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2936.214675][T12592] bond141: (slave bridge136): making interface the new active one [ 2936.223558][T12592] bond141: (slave bridge136): Enslaving as an active interface with an up link [ 2936.240817][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond141: link becomes ready 06:52:17 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x400001, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x401, 0x4) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x8, 0xe}, {0x2, 0x1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x60000840) ppoll(&(0x7f00000000c0)=[{r1, 0x100a}], 0x1, 0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x400001, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x401, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x8, 0xe}, {0x2, 0x1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x60000840) (async) ppoll(&(0x7f00000000c0)=[{r1, 0x100a}], 0x1, 0x0, 0x0, 0x0) (async) 06:52:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:52:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f4, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1203, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:52:17 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:52:17 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x10482, 0x10001, 0xffffffc1, 0x7, 0x2, 0x80, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x400002, 0xffffffffffffffff, 0x2) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async, rerun: 32) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) [ 2942.964923][T12598] 8021q: adding VLAN 0 to HW filter on device bond25 [ 2942.972264][T12608] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2942.986367][T12608] 8021q: adding VLAN 0 to HW filter on device bond142 [ 2942.998056][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:52:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2943.010275][T12609] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2943.018061][T12609] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2943.039301][T12598] bond25: (slave bridge42): Enslaving as an active interface with an up link [ 2943.048837][T10867] IPv6: ADDRCONF(NETDEV_CHANGE): bond25: link becomes ready 06:52:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f8, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2943.068640][T12608] bond142: (slave bridge137): making interface the new active one [ 2943.077505][T12608] bond142: (slave bridge137): Enslaving as an active interface with an up link [ 2943.106848][T12614] 8021q: adding VLAN 0 to HW filter on device bond26 06:52:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1a00, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2943.115441][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond142: link becomes ready [ 2943.126234][T12617] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2943.146816][T12617] 8021q: adding VLAN 0 to HW filter on device bond143 [ 2943.160338][T12618] bond26: (slave bridge43): Enslaving as an active interface with an up link 06:52:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2943.173315][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond26: link becomes ready [ 2943.182142][T12605] macsec0 speed is unknown, defaulting to 1000 [ 2943.182247][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2943.203216][T12621] 8021q: adding VLAN 0 to HW filter on device ipvlan17 06:52:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2943.212877][T12621] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2943.235647][T12617] bond143: (slave bridge138): making interface the new active one [ 2943.244681][T12617] bond143: (slave bridge138): Enslaving as an active interface with an up link [ 2943.263485][T12623] 8021q: adding VLAN 0 to HW filter on device bond27 06:52:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2943.273996][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bond143: link becomes ready [ 2943.291822][T12625] bond27: (slave bridge44): Enslaving as an active interface with an up link [ 2943.303951][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bond27: link becomes ready [ 2943.312730][T12627] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2943.326673][T12627] 8021q: adding VLAN 0 to HW filter on device bond144 [ 2943.337776][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2943.350771][T12629] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2943.358924][T12629] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2943.382061][T12630] bond144: (slave bridge139): making interface the new active one [ 2943.391009][T12630] bond144: (slave bridge139): Enslaving as an active interface with an up link [ 2943.404146][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond144: link becomes ready 06:52:24 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:52:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:52:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x58f, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2200, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:52:24 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:52:24 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x4200b, 0x10002, 0x6, 0x8, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x9) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2950.170690][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2950.187506][T12643] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2950.195491][T12643] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2950.211091][T12646] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2950.226466][T12646] 8021q: adding VLAN 0 to HW filter on device bond145 [ 2950.233831][T12648] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2950.246644][T12648] 8021q: adding VLAN 0 to HW filter on device bond28 [ 2950.262601][T12652] bond145: (slave bridge140): making interface the new active one 06:52:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x59d, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2500, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2950.271774][T12652] bond145: (slave bridge140): Enslaving as an active interface with an up link [ 2950.282178][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bond145: link becomes ready [ 2950.300603][T12653] bond28: (slave bridge45): Enslaving as an active interface with an up link 06:52:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2950.319920][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): bond28: link becomes ready [ 2950.336435][T12656] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2950.355891][T12656] 8021q: adding VLAN 0 to HW filter on device bond146 [ 2950.363422][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2950.376844][T12658] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2950.384997][T12658] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2950.401907][T12660] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2950.414952][T12660] 8021q: adding VLAN 0 to HW filter on device bond29 06:52:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5c2, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2950.422629][T12644] macsec0 speed is unknown, defaulting to 1000 [ 2950.432890][T12662] bond146: (slave bridge141): making interface the new active one [ 2950.444093][T12662] bond146: (slave bridge141): Enslaving as an active interface with an up link [ 2950.461159][T12663] bond29: (slave bridge46): Enslaving as an active interface with an up link 06:52:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:52:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2f00, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2950.471495][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond146: link becomes ready [ 2950.493563][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond29: link becomes ready [ 2950.504683][T12666] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2950.518816][T12666] 8021q: adding VLAN 0 to HW filter on device bond147 [ 2950.534181][T12672] bond147: (slave bridge142): making interface the new active one [ 2950.543237][T12672] bond147: (slave bridge142): Enslaving as an active interface with an up link [ 2950.552339][T12670] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2950.567823][T12670] 8021q: adding VLAN 0 to HW filter on device bond30 [ 2950.575150][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2950.587134][T12668] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2950.587145][ T8873] ================================================================== [ 2950.587167][ T8873] BUG: KCSAN: data-race in ipvlan_open / is_upper_ndev_bond_master_filter [ 2950.595403][T12668] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2950.602035][ T8873] [ 2950.602044][ T8873] write to 0xffff8881341170c0 of 4 bytes by task 12668 on cpu 1: [ 2950.602059][ T8873] ipvlan_open+0x78/0x100 [ 2950.637304][ T8873] __dev_open+0x274/0x3a0 [ 2950.641616][ T8873] __dev_change_flags+0x167/0x3f0 [ 2950.646632][ T8873] rtnl_configure_link+0xc2/0x150 [ 2950.651660][ T8873] rtnl_newlink+0xf4d/0x13e0 [ 2950.656248][ T8873] rtnetlink_rcv_msg+0x745/0x7e0 [ 2950.661182][ T8873] netlink_rcv_skb+0x14e/0x250 [ 2950.665928][ T8873] rtnetlink_rcv+0x18/0x20 [ 2950.670346][ T8873] netlink_unicast+0x602/0x6d0 [ 2950.675086][ T8873] netlink_sendmsg+0x728/0x850 [ 2950.679830][ T8873] ____sys_sendmsg+0x39a/0x510 [ 2950.684574][ T8873] __sys_sendmsg+0x195/0x230 [ 2950.689155][ T8873] __x64_sys_sendmsg+0x42/0x50 [ 2950.693898][ T8873] do_syscall_64+0x44/0xd0 [ 2950.698304][ T8873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2950.704180][ T8873] [ 2950.706485][ T8873] read to 0xffff8881341170c0 of 4 bytes by task 8873 on cpu 0: [ 2950.714016][ T8873] is_upper_ndev_bond_master_filter+0x27/0xb0 [ 2950.720076][ T8873] ib_enum_all_roce_netdevs+0x179/0x270 [ 2950.725606][ T8873] netdevice_event_work_handler+0x5f/0x360 [ 2950.731395][ T8873] process_one_work+0x3f6/0x960 [ 2950.736228][ T8873] worker_thread+0x616/0xa70 [ 2950.740805][ T8873] kthread+0x1bf/0x1e0 [ 2950.744853][ T8873] ret_from_fork+0x1f/0x30 [ 2950.749250][ T8873] [ 2950.751549][ T8873] value changed: 0x00000002 -> 0x00000083 [ 2950.757522][ T8873] [ 2950.759822][ T8873] Reported by Kernel Concurrency Sanitizer on: [ 2950.765959][ T8873] CPU: 0 PID: 8873 Comm: kworker/u4:9 Not tainted 5.17.0-rc4-syzkaller-00002-gd567f5db412e-dirty #0 [ 2950.776693][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2950.786751][ T8873] Workqueue: gid-cache-wq netdevice_event_work_handler [ 2950.793705][ T8873] ================================================================== [ 2950.808771][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond147: link becomes ready [ 2950.824524][T12673] bond30: (slave bridge47): Enslaving as an active interface with an up link [ 2950.834033][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond30: link becomes ready 06:52:30 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x400000fff, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100a}], 0x1, 0x0, 0x0, 0x0) 06:52:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5c3, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 06:52:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3000, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) 06:52:30 executing program 2: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x9, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xe, 0xa9, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x80000000, 0x0, 0x0, 0xfffeffff, 0x7, "ec40b7f29900000000f0fa3c2300"}) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:52:30 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x15) (rerun: 64) r0 = syz_clone3(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x7ff, 0xa5f}, 0x4200b, 0x10002, 0x6, 0x8, 0x4, 0x1, 0x7, 0x0, 0x186d, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x9) (async) mlock(&(0x7f0000495000/0x3000)=nil, 0x3000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2956.439285][T12691] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2956.459805][T12691] 8021q: adding VLAN 0 to HW filter on device bond148 [ 2956.467132][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2956.478950][T12689] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2956.487110][T12689] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2956.502427][T12687] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2956.516576][T12687] 8021q: adding VLAN 0 to HW filter on device bond31 06:52:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2956.533727][T12691] bond148: (slave bridge143): making interface the new active one [ 2956.543179][T12691] bond148: (slave bridge143): Enslaving as an active interface with an up link [ 2956.563023][T12695] bond31: (slave bridge48): Enslaving as an active interface with an up link [ 2956.574472][T12699] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:52:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000305000000000000000000008847", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b0001006970766c616e00004400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x100000000000000}, 0x0) [ 2956.591944][T12699] 8021q: adding VLAN 0 to HW filter on device bond149 [ 2956.599358][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond148: link becomes ready [ 2956.608991][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): bond31: link becomes ready [ 2956.619495][T12702] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2956.634588][T12702] 8021q: adding VLAN 0 to HW filter on device bond32 06:52:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 06:52:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2956.657527][T12699] bond149: (slave bridge144): making interface the new active one [ 2956.666999][T12699] bond149: (slave bridge144): Enslaving as an active interface with an up link [ 2956.685185][T12702] bond32: (slave bridge49): Enslaving as an active interface with an up link [ 2956.694586][T12707] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:52:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 2956.716032][T12707] 8021q: adding VLAN 0 to HW filter on device bond150 [ 2956.723510][T12692] macsec0 speed is unknown, defaulting to 1000 [ 2956.734868][T12707] bond150: (slave bridge145): making interface the new active one [ 2956.744394][T12707] bond150: (slave bridge145): Enslaving as an active interface with an up link [ 2956.753521][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2956.772849][T12705] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 2956.781426][T12705] bond4: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2956.797179][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond32: link becomes ready [ 2956.805914][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond149: link becomes ready [ 2956.816629][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): bond150: link becomes ready [ 2956.825994][T12710] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2956.840431][T12710] 8021q: adding VLAN 0 to HW filter on device bond33 [ 2956.855591][T12711] bond33: (slave bridge50): Enslaving as an active interface with an up link [ 2956.864769][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bond33: link becomes ready [ 2956.874581][T12713] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2956.889175][T12713] 8021q: adding VLAN 0 to HW filter on device bond151 [ 2956.906121][T12714] bond151: (slave bridge146): making interface the new active one [ 2956.915261][T12714] bond151: (slave bridge146): Enslaving as an active interface with an up link [ 2956.927923][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): bond151: link becomes ready