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"}, &(0x7f0000000100)=0x1024) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xac, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x101}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000084}, 0x40000) [ 1523.323371][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0200f3ffffff000000000000000001e000000100000000000000000000000000000800000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) [ 1523.397488][T10267] device bond0 left promiscuous mode [ 1523.404804][T10267] device bond_slave_0 left promiscuous mode [ 1523.436795][T10267] device bond_slave_1 left promiscuous mode 14:53:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r2, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x400fffe, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1523.456690][T10267] device bond4 left promiscuous mode [ 1523.474534][T10267] device bridge7 left promiscuous mode [ 1523.492820][T10267] device bridge8 left promiscuous mode [ 1523.516869][T10267] bridge292: port 1(bond0) entered disabled state [ 1523.597700][T10267] bridge293: port 1(bond0) entered blocking state [ 1523.614218][T10267] bridge293: port 1(bond0) entered disabled state [ 1523.648312][T10267] device bond0 entered promiscuous mode [ 1523.669804][T10267] device bond_slave_0 entered promiscuous mode [ 1523.688681][T10267] device bond_slave_1 entered promiscuous mode 14:53:18 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500051cd25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:18 executing program 4: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x80000001, 0xfffffffffffffffe, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xe808) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r4, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x80000001, 0x7ff, 0x2, 0x3, 0x3, 0x4, 0x1000, {r7, @in6={{0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x10001}}, 0x7e, 0x4, 0x401, 0x8001, 0xf7a5}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r8, 0xffff}, &(0x7f00000001c0)=0x8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000000)={0x0, 'team0\x00', {0x3}, 0x4}) [ 1523.703097][T10267] device bond4 entered promiscuous mode [ 1523.717619][T10267] device bridge7 entered promiscuous mode [ 1523.740544][T10267] device bridge8 entered promiscuous mode [ 1523.763167][T10267] bridge293: port 1(bond0) entered blocking state [ 1523.769728][T10267] bridge293: port 1(bond0) entered forwarding state [ 1523.861704][T10294] validate_nla: 6 callbacks suppressed [ 1523.861716][T10294] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1523.891577][T10294] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1524.055089][T10273] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1524.069069][T10283] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1524.083518][T10267] device bond0 left promiscuous mode [ 1524.089204][T10267] device bond_slave_0 left promiscuous mode [ 1524.106686][T10267] device bond_slave_1 left promiscuous mode [ 1524.113137][T10267] device bond4 left promiscuous mode [ 1524.118642][T10267] device bridge7 left promiscuous mode [ 1524.134682][T10267] device bridge8 left promiscuous mode [ 1524.140683][T10267] bridge293: port 1(bond0) entered disabled state 14:53:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x88a8ffff, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1524.312112][T10273] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06008d07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1524.387871][T10294] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1524.411800][T10294] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1524.517978][ T28] audit: type=1800 audit(1596725598.931:389): pid=10299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16384 res=0 [ 1524.746456][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1524.785388][T10329] bridge294: port 1(bond0) entered blocking state [ 1524.798993][T10329] bridge294: port 1(bond0) entered disabled state [ 1524.824234][T10329] device bond0 entered promiscuous mode [ 1524.829812][T10329] device bond_slave_0 entered promiscuous mode [ 1524.840205][T10329] device bond_slave_1 entered promiscuous mode 14:53:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x60}}}}}, 0x62) 14:53:19 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x84, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x77d}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000084}, 0x4000001) r4 = accept$alg(r2, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x400fffe, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}, 0x200}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x7, @loopback, 0xe652}, @in={0x2, 0x4e25, @multicast2}]}, &(0x7f0000000180)=0x10) 14:53:19 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x6, @dev={0xac, 0x14, 0x14, 0x11}}], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000080000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000fe53e83631a645acc446462e154d4b74b69e0ec9cef245ab2b0af9855be7a779742cb266f48d30f231a30a57535baa5d46653dee2720f9942643817ce77f7cd8beaefc6e38b119d52a16f9918678d1554a61a64cf1981d2904225f105c2da5169dbf30060250982bbfd07bcdd0ce9d1e0672579d97b6d587a06b34caa0dcb613dfc5cd0442f7b5972a54df21e8cf", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8005) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000003060101000000000006ff050800000172b9030000000000b49accf8d706ba5d3abe29b49bb20712840863ff19ca0a6a33ae458b049d58679f0fbd74b8bc903354344388061dc1e59b47d396fd87b5eefbf896e7624ca067ab420dec34c7b9493eb30edb8a559fb24c17cbe2b81160dd9b82f021322f14c0445c68bd61b300000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000005c0)=""/239, &(0x7f0000000200)=0xef) [ 1524.846940][T10329] device bond4 entered promiscuous mode [ 1524.852697][T10329] device bridge7 entered promiscuous mode [ 1524.858626][T10329] device bridge8 entered promiscuous mode [ 1524.866500][T10329] bridge294: port 1(bond0) entered blocking state [ 1524.873181][T10329] bridge294: port 1(bond0) entered forwarding state [ 1524.883314][T10330] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:19 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500051dd25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06008e07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1524.951130][T10323] device bond0 left promiscuous mode [ 1524.956463][T10323] device bond_slave_0 left promiscuous mode [ 1524.986299][T10323] device bond_slave_1 left promiscuous mode [ 1525.025882][T10323] device bond4 left promiscuous mode 14:53:19 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/94, 0x5e}], 0x1, &(0x7f0000000300)=""/229, 0xe5}, 0x3}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) ppoll(&(0x7f0000000280)=[{r4}, {r5, 0x2000}, {r6, 0x1000}], 0x0, 0x0, 0x0, 0x51) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r7, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1525.061411][T10323] device bridge7 left promiscuous mode [ 1525.067136][T10323] device bridge8 left promiscuous mode [ 1525.086594][T10361] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1525.117228][T10323] bridge294: port 1(bond0) entered disabled state [ 1525.195566][T10358] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x9effffff, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1525.258164][T10358] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06008f07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1525.738829][T10385] __nla_validate_parse: 4 callbacks suppressed [ 1525.738839][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000006d3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000f9ffbfffffffffff000000000000000000000000000000000000e05853a8ddba5323d7b25f42efa5a03e62ee25ef3dee471fe6e5ec445902613e6f62b959ec1109017daca95eb19d86f216089bbd31a6"], 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbff, {0x1, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x804) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) accept4$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x1c, 0x800) [ 1525.830644][T10386] bridge296: port 1(bond0) entered blocking state [ 1525.839065][T10355] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1525.840040][T10386] bridge296: port 1(bond0) entered disabled state [ 1525.859716][T10386] device bond0 entered promiscuous mode [ 1525.865758][T10386] device bond_slave_0 entered promiscuous mode 14:53:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xe808) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r5, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r8, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r8, 0xc0000000, 0x100000, 0x7ff}, &(0x7f0000000040)=0x10) [ 1525.868709][T10355] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1525.873759][T10386] device bond_slave_1 entered promiscuous mode [ 1525.899187][T10386] device bond4 entered promiscuous mode [ 1525.912909][T10386] device bridge7 entered promiscuous mode [ 1525.922619][T10386] device bridge8 entered promiscuous mode [ 1525.942674][T10386] bridge296: port 1(bond0) entered blocking state [ 1525.949216][T10386] bridge296: port 1(bond0) entered forwarding state [ 1525.959908][ T28] audit: type=1800 audit(1596725600.372:390): pid=10374 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16382 res=0 [ 1525.982348][T10399] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1525.991453][T10407] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xc3ffffff, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:20 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'lo\x00', {0xffffffff}, 0xb3}) 14:53:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x543}}}}}, 0x62) 14:53:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009007000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYBLOB="e7f066519676538fbf4dd8947ccbe737de2da52e4b9a6a147d91180dc7b7ecbf129b4e8492163a5c6e48dcf4a902a0282aeb6489bc73614efdff8301b920eebb0731fbdb8e3c0f96fb4c35bf5517df8522ffff90ed3add3f8ebf1c32c1db03140d93b688fc0f9549127e1349c782b1352352ca8ed14e17a8387d3b213b51a5432d5ea2b5f7e0fd2ec8f231f87f3eec014fb73ce40e0b653f3008c52a80c92ce8942f730f68cdf788478e21ae7c048ab8c834934d3732f7ecf79c9afd18d43adc582db9da34013d8439", @ANYBLOB="000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000"/100], 0xb8}}, 0x90) [ 1526.255451][T10432] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1526.304037][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1526.366392][T10443] device bond0 left promiscuous mode [ 1526.377458][T10443] device bond_slave_0 left promiscuous mode [ 1526.401756][T10443] device bond_slave_1 left promiscuous mode [ 1526.419870][T10443] device bond4 left promiscuous mode [ 1526.433017][T10443] device bridge7 left promiscuous mode [ 1526.439037][T10443] device bridge8 left promiscuous mode [ 1526.459516][T10443] bridge296: port 1(bond0) entered disabled state 14:53:20 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500051ed25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0xa, 0xa, 0x600, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @osf={{0x8, 0x1, 'osf\x00'}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8042}, 0x4000000) [ 1526.486053][T10443] bridge297: port 1(bond0) entered blocking state [ 1526.506088][T10443] bridge297: port 1(bond0) entered disabled state [ 1526.535927][T10443] device bond0 entered promiscuous mode [ 1526.549603][T10443] device bond_slave_0 entered promiscuous mode 14:53:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000000)={0x7, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1526.577973][T10443] device bond_slave_1 entered promiscuous mode [ 1526.592298][T10443] device bond4 entered promiscuous mode [ 1526.597965][T10443] device bridge7 entered promiscuous mode [ 1526.621619][T10443] device bridge8 entered promiscuous mode [ 1526.628971][T10443] bridge297: port 1(bond0) entered blocking state [ 1526.635514][T10443] bridge297: port 1(bond0) entered forwarding state 14:53:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r1 = socket(0x2d, 0x3, 0x80000001) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000240), 0x4) [ 1526.682614][T10460] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009107000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000008ff020000000000000000000000000001e00000010000000000000000000000000000ffff000000000200208000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000200000000000000000000000000300000000000000000000f4ff0000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x40801) 14:53:21 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 14:53:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xcbc8f486, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r10}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002040)={&(0x7f0000001e80)={0x18c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x18c}}, 0x4010) [ 1527.230526][T10473] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1527.288682][T10456] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x608}}}}}, 0x62) 14:53:21 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) accept$phonet_pipe(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x10) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x65e, @ipv4={[], [], @rand_addr=0x64010101}, 0x2}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b6000015687db0800700000000000001f7136ebc6060d745e9", @ANYRES16=r7, @ANYBLOB="000127bd7000fedbdf250400000000000008000700e0000001080002000200000008000700000000000800040000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0), &(0x7f0000000000)=0x10) 14:53:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009207000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1527.398758][ T28] audit: type=1800 audit(1596725601.812:391): pid=10460 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16368 res=0 [ 1527.452179][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1527.512695][T10502] device bond0 left promiscuous mode [ 1527.525300][T10502] device bond_slave_0 left promiscuous mode [ 1527.553587][T10502] device bond_slave_1 left promiscuous mode [ 1527.569775][T10502] device bond4 left promiscuous mode [ 1527.589622][T10502] device bridge7 left promiscuous mode [ 1527.609620][T10502] device bridge8 left promiscuous mode [ 1527.629139][T10502] bridge297: port 1(bond0) entered disabled state [ 1527.680509][T10502] bridge298: port 1(bond0) entered blocking state [ 1527.698810][T10502] bridge298: port 1(bond0) entered disabled state [ 1527.709823][T10502] device bond0 entered promiscuous mode [ 1527.723672][T10502] device bond_slave_0 entered promiscuous mode [ 1527.730185][T10502] device bond_slave_1 entered promiscuous mode [ 1527.744829][T10502] device bond4 entered promiscuous mode [ 1527.754088][T10502] device bridge7 entered promiscuous mode [ 1527.772857][T10502] device bridge8 entered promiscuous mode [ 1527.780660][T10502] bridge298: port 1(bond0) entered blocking state [ 1527.787150][T10502] bridge298: port 1(bond0) entered forwarding state [ 1527.818708][T10514] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xf0ffffff, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:22 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) listen(r4, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:22 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000521d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:22 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0xb54, @local, 0x3}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0xf69, @ipv4={[], [], @rand_addr=0x64010101}, 0x8}, @in6={0xa, 0x4e21, 0xfe2, @ipv4={[], [], @rand_addr=0x64010101}, 0xffffffff}], 0x74) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x2) 14:53:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x400, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x4, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:53:22 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000008000000010000000000000c040000000200000002000085000000000a00000005000000050000000400000004000000020000000c0000000000000100000000210028010061002ebddc7154cd6b7e4da5fee367eaf01caccfa67001"], &(0x7f0000000200)=""/140, 0x60, 0x8c, 0x1}, 0x20) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)={0x401, 0x3, 0x401, 0x40, 0x4}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1f, @none, 0x3f}, 0xe) 14:53:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 14:53:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0xfffe, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x6e6bc1, 0x0, 0x1}}, 0xb8}}, 0x20004000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000002100010100000000000000000200000000000000000000000ce117006e19910e3b435b9d6be623d71bcd3895c3da5853af7153254b3935e28d084a335a59e06476c60595f95f06463a0b6a899c0bcf0558dff473543b1c976ada08d6cfe3ea463abebc9212e21af063fd46515848fe85458f4e363b170dee381ff98548be7d7858c5eae862f0bed925d0d11cc23b882015e70769f50d20a428f1d3a81c329aef", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="29f050f6dc1760506e0f827a97572ebe26f9e6ee9998c9b297231c3a26b3dceeb03943458c62dfafa70298d529458eb75be2651e011782429b72321c7bfda0af1215636da6233992e9e454992e481a74dcb04e11bc7ed2816c99ff4ec832d2c208187283ec05bb795203d43ce24e8c1493b12a083de2f583d71b6d5086370c2e0195548073a3e2d54e65baca61e795b751f2bb75832cec7b14d34c56085838b442aac6d3c92225dada10c7"], 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r4}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@updsa={0x434, 0x1a, 0x200, 0x70bd25, 0x25dfdbfe, {{@in=@private=0xa010100, @in6=@mcast1, 0x4e21, 0x80, 0x4e21, 0x3, 0xa, 0xa0, 0xa0, 0x1, 0x0, r4}, {@in=@multicast1, 0x4d5, 0x6c}, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, {0xa6bc, 0xc8, 0x7, 0x3, 0x2, 0x8, 0x2, 0x1f}, {0x4, 0xfffffffffffffffd, 0x80000001, 0x3}, {0x3f, 0x7ff, 0x52}, 0x70bd28, 0x3505, 0x2, 0x3, 0x40, 0x19}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}, @algo_comp={0xc1, 0x3, {{'lzs\x00'}, 0x3c8, "3990d52c27b6d164ac3ef26c0a225f309603bbfdda92f62cafe7afc28824dbdbac0e3647f8c3eaed6280fd933cd3f911de871747cf3e86da66f049ed63f56fc484b9d93fe5c043ac8ccd7f7d5ff0203b39e563ef7017c865ec57002004a3ffc7a57385670e9b3e24af1aed57cc9fba8235298ece522d612d36"}}, @migrate={0x1cc, 0x11, [{@in6=@private1, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0xff, 0x1, 0x0, 0x0, 0x8, 0x2}, {@in=@local, @in6=@dev={0xfe, 0x80, [], 0x34}, @in6=@local, @in=@loopback, 0xff, 0x0, 0x0, 0x3503, 0xa, 0xa}, {@in=@local, @in6=@private0={0xfc, 0x0, [], 0x1}, @in6=@private0={0xfc, 0x0, [], 0x1}, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x32, 0x1, 0x0, 0xffff, 0x2, 0x2}, {@in=@local, @in6=@dev={0xfe, 0x80, [], 0x3a}, @in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x6c, 0x3, 0x0, 0x3506, 0x2, 0x2}, {@in=@multicast1, @in6=@dev={0xfe, 0x80, [], 0x2e}, @in6=@empty, @in=@local, 0x3c, 0x2, 0x0, 0x3503, 0xa, 0x2}, {@in6=@private1, @in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, [], 0x1}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2b, 0x4, 0x0, 0x3502, 0xa, 0xa}]}, @algo_crypt={0x95, 0x2, {{'ctr-camellia-aesni-avx2\x00'}, 0x268, "3e43c92aba7f97cf0551213badea68c580b4677064ec704612acf795c63df85b444a7516553f65690f0b756af37067ed9b72d2bea0faba67d94927770d4ba35262f596c2c0537b07d0497b5983"}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r7 = accept$alg(r5, 0x0, 0x0) splice(r7, 0x0, r2, 0x0, 0x400fffe, 0x0) accept4$netrom(r2, &(0x7f0000000000)={{}, [@default, @remote, @null, @null, @default, @remote, @null, @netrom]}, &(0x7f00000000c0)=0x48, 0x81800) 14:53:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009307000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1528.458530][T10541] device bond0 left promiscuous mode [ 1528.464483][T10541] device bond_slave_0 left promiscuous mode [ 1528.507985][T10541] device bond_slave_1 left promiscuous mode [ 1528.523585][T10541] device bond4 left promiscuous mode [ 1528.532587][T10541] device bridge7 left promiscuous mode [ 1528.538460][T10541] device bridge8 left promiscuous mode [ 1528.549206][T10541] bridge298: port 1(bond0) entered disabled state [ 1528.603187][T10541] bridge299: port 1(bond0) entered blocking state [ 1528.612808][T10541] bridge299: port 1(bond0) entered disabled state [ 1528.623725][T10541] device bond0 entered promiscuous mode [ 1528.629626][T10541] device bond_slave_0 entered promiscuous mode [ 1528.637542][T10541] device bond_slave_1 entered promiscuous mode [ 1528.646297][T10541] device bond4 entered promiscuous mode [ 1528.654435][T10541] device bridge7 entered promiscuous mode [ 1528.661772][T10541] device bridge8 entered promiscuous mode [ 1528.669998][T10541] bridge299: port 1(bond0) entered blocking state [ 1528.676613][T10541] bridge299: port 1(bond0) entered forwarding state 14:53:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x20000090) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xe808) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r5, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r8, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x4, 0x3, 0x95f, 0x0, 0x4, 0x1, 0x7b7, {0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x101, 0x66e, 0x5d, 0x5, 0x1000}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x7, 0x204, 0x20, 0x75, 0x6, 0x7, 0x1, r9}, &(0x7f0000000180)=0x20) 14:53:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xfeffffff, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x689}}}}}, 0x62) [ 1528.946777][ T28] audit: type=1800 audit(1596725603.362:392): pid=10543 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16368 res=0 [ 1528.954900][T10587] device bond0 left promiscuous mode [ 1528.992610][T10587] device bond_slave_0 left promiscuous mode [ 1529.005978][T10587] device bond_slave_1 left promiscuous mode [ 1529.020806][T10587] device bond4 left promiscuous mode [ 1529.033843][T10587] device bridge7 left promiscuous mode [ 1529.049982][T10587] device bridge8 left promiscuous mode [ 1529.080141][T10587] bridge299: port 1(bond0) entered disabled state [ 1529.148211][T10587] bridge300: port 1(bond0) entered blocking state [ 1529.175683][T10587] bridge300: port 1(bond0) entered disabled state [ 1529.195700][T10587] device bond0 entered promiscuous mode [ 1529.216474][T10587] device bond_slave_0 entered promiscuous mode [ 1529.238991][T10587] device bond_slave_1 entered promiscuous mode [ 1529.254423][T10587] device bond4 entered promiscuous mode [ 1529.260006][T10587] device bridge7 entered promiscuous mode [ 1529.280693][T10587] device bridge8 entered promiscuous mode [ 1529.287786][T10587] bridge300: port 1(bond0) entered blocking state [ 1529.294334][T10587] bridge300: port 1(bond0) entered forwarding state 14:53:23 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000522d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009407000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:23 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x100, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/227, 0xe3}], 0x1}, 0x0) sendto$inet(r4, &(0x7f00000012c0)='\f', 0x300, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000180)={@fixed={[], 0x11}, 0x2, 0x7ff, 0x8, 0x9, 0xff7f, "1f081578d966c3012ffcbd02817bc144b30450a17450deaaf4a944b0f3ad5ee79fa81ad533b3a9d0cee41748e463d4267203d1b875fab65069d77e3433c2e6cf570eacb6923c8a0423d2bb2be86c4225a07df9e7ac20c68809b1440178b8919a04241b70c76df1e039c68603df49239f70fc8fdb1d0dad89871ea9a0ea500942"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r3, 0x0, 0x0) splice(r5, 0x0, r2, 0x0, 0x400fffe, 0x0) openat$cgroup_int(r2, &(0x7f0000000000)='memory.max\x00', 0x2, 0x0) [ 1529.565029][T10626] validate_nla: 12 callbacks suppressed [ 1529.565042][T10626] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:53:24 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@remote, 0x52, r3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000009fc9000000000000000010000000000000000000000000000000100000000000000000000000000000000000000400000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000009000000000000010000ffffff7f3f4e13352729055c42bdcc677d176bf50e008d8855a7e59c02e20962d57865d0a11606a12847455408c5b6699d74565e01e9abc5aeefcc0994fb6d3775e371e06ea0d082ac73de241d21a25d9566f7cf21faba5e69e332f7932afc0f00a2744c6bb6bba242b8aac5ea70bfe7a54c7ca900000000f9476b1835ab8c38b5f5dd9a0b84d0f5f23a9d7623944d5ddf1fd7e41d71988b17ea0c57836a5b67851c20c41f5a2c34c3c42e2cdfc5c4cd4e4d162d744fab210d25b2f58a3a76a30e45ddff57e8f520b8bc0ad33913e0570b6c5903635f7a348d9f259353e23f335376746accaeb411554ef0c15dac522149abf7b81210009845854ea0991ba9391872a8c70fc945787b95c40dc5aa1845ab211143db121da91f0d6b9465b3341e505c2992"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', r8}) [ 1529.750198][T10587] device bond0 left promiscuous mode [ 1529.756003][T10587] device bond_slave_0 left promiscuous mode [ 1529.773739][T10587] device bond_slave_1 left promiscuous mode [ 1529.780190][T10587] device bond4 left promiscuous mode [ 1529.794639][T10587] device bridge7 left promiscuous mode [ 1529.804600][T10587] device bridge8 left promiscuous mode [ 1529.815915][T10587] bridge300: port 1(bond0) entered disabled state [ 1529.874654][T10619] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xfffc403c, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1529.947523][T10619] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009507000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x3580}}}}}, 0x62) 14:53:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3e8, 0x100, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x880) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1530.067242][ T28] audit: type=1800 audit(1596725604.482:393): pid=10628 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16362 res=0 [ 1530.132680][T10653] bridge301: port 1(bond0) entered blocking state [ 1530.158099][T10653] bridge301: port 1(bond0) entered disabled state [ 1530.182083][T10653] device bond0 entered promiscuous mode 14:53:24 executing program 4: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x16c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}}, [@algo_auth={0x7b, 0x1, {{'tgr160-generic\x00'}, 0x198, "407bea5b28fa4b54514bfe3e0095eb284c7f2cb84ee72055e420d07696709d2d7e9c1e7b2368ef11de62d5893c675fb4903c6c"}}, @lifetime_val={0x24, 0x9, {0xf05, 0x800, 0x7}}, @srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x16c}}, 0x0) [ 1530.206843][T10653] device bond_slave_0 entered promiscuous mode [ 1530.234051][T10653] device bond_slave_1 entered promiscuous mode [ 1530.253133][T10653] device bond4 entered promiscuous mode [ 1530.272349][T10653] device bridge7 entered promiscuous mode [ 1530.301499][T10653] device bridge8 entered promiscuous mode 14:53:24 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000080)=@srh={0x32, 0xc, 0x4, 0x6, 0x7f, 0x38, 0x100, [@mcast2, @ipv4={[], [], @loopback}, @mcast1, @private0, @mcast2, @remote]}, 0x68) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1530.345457][T10653] bridge301: port 1(bond0) entered blocking state [ 1530.352043][T10653] bridge301: port 1(bond0) entered forwarding state 14:53:24 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@local, r5}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) getsockname(r7, &(0x7f0000002580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000002600)=0x80) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x20, 0x1412, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20009}, 0x20000000) [ 1530.422857][T10656] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:24 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000523d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009607000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xffffa888, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1530.858179][T10685] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1530.867994][T10692] __nla_validate_parse: 10 callbacks suppressed [ 1530.868008][T10692] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:25 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x2ef4, 0xfffc, 0x7ff, 0x5, 0x1, 0x81, 0x8}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1530.956192][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1531.003500][T10685] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1531.035542][T10706] device bond0 left promiscuous mode [ 1531.046974][T10706] device bond_slave_0 left promiscuous mode 14:53:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009707000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xe808) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000d33c386dc177b9846cb87a6dc2f7bd8dc564b74e5f76f0e1fa229081e68ef6922beadfbc9cd210812ffc2999afad154ebb0360c06aab838d8b4065ee7df329838cf7f72e395b2717409c33829114a75d915bc41ad6eb7610e1ccd03a75d391671c9dd2ec395a9ff31373e0473f85ef257481218707def7f0c95437a10fac50e26d354b26b971c696ea5d6f069015dcd90955548434adf6957224a92eba67b5cfadf33ed443ef13488c8556daeec572ae1f88fc71cee617f7ace5c919979207f61ab1e00000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r5, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r8, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r8, 0x20}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r9, 0x3ff, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4c891}, 0x0) [ 1531.077666][T10706] device bond_slave_1 left promiscuous mode [ 1531.104852][T10706] device bond4 left promiscuous mode [ 1531.110174][T10706] device bridge7 left promiscuous mode [ 1531.137498][T10706] device bridge8 left promiscuous mode [ 1531.145264][T10706] bridge301: port 1(bond0) entered disabled state [ 1531.196092][T10706] bridge302: port 1(bond0) entered blocking state [ 1531.206031][T10706] bridge302: port 1(bond0) entered disabled state [ 1531.215447][T10706] device bond0 entered promiscuous mode [ 1531.223655][T10706] device bond_slave_0 entered promiscuous mode [ 1531.230085][T10706] device bond_slave_1 entered promiscuous mode [ 1531.240499][T10706] device bond4 entered promiscuous mode [ 1531.246433][T10706] device bridge7 entered promiscuous mode [ 1531.260051][T10706] device bridge8 entered promiscuous mode [ 1531.275965][T10706] bridge302: port 1(bond0) entered blocking state [ 1531.282704][T10706] bridge302: port 1(bond0) entered forwarding state [ 1531.304703][ T28] audit: type=1800 audit(1596725605.722:394): pid=10723 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16382 res=0 14:53:25 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) listen(r0, 0x100000000000012) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x8, 0x5, 0x17c8a49b, 0x7fff, 0x2}, 0x14) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'team_slave_0\x00', {0x2, 0x4e20, @multicast2}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x4788}}}}}, 0x62) [ 1531.360928][T10715] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1531.374793][T10719] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xfffff000, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009807000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1000}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff02000000c861c405d96004475f0cb7f4945992d30000000000000000100001e000000100000000000000000000000000000000000000001400000000000000", @ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000600"/112], 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="df0e5b82b0078eaa151269b7ae78300d381d94586c7d07909e5195b0d52682eef076f14622065a415d009b84a6e3c5f5c9d9c6bc38a94b7b8d6a6fa662be3fef98db081a744e7dff9173ad5841bb699e13ad89dfbcb044fae046cfc25eab626884ad52b0a7f49f9c225c4049fcfb022688b44941773432eda392e42fdd3c24c648", 0x81}, {&(0x7f00000004c0)="e1df7288044e2aa3d354787809b1325ec7913848a4c3659bcfd5d76bb0c836a9495f261bf3d9e4a82498ee54fc4cc9454c951700c898e845d9cbb8d633c1e7ec6ea8bfa2b3c8c6de7d0bbb21501bf40630b515f83143ea3a880198ffd7e6cc291efc85b46116d8361e3ad53b3b8eba6e7d2efe7245582c5649f9ba3010649b4cd1a851a8c68f8d3f7ffb8b5cbbf46c0c44c5760e2e560f", 0x97}], 0x2, &(0x7f0000000580)=[{0x58, 0x112, 0xf152, "e668fe72a1bef03728a932777d6d638063fc4a0d50fa642f06587b746b46ecaefd12770cc59bfba8cbac310c31010ee7dde15a6c8f72a0f319a0955e1ae3315795e616c12719"}], 0x58}, 0x4000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x400fffe, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r7, 0x536ae464467e3929, 0x0, 0x0, {0x22, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x64, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) 14:53:26 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000524d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r1, 0x100000000000012) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', r7, 0x2f, 0x6, 0x80, 0x2, 0x0, @private2, @local, 0x700, 0x80, 0x4, 0x10001}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1531.915100][T10752] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1531.920323][T10734] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1531.925367][T10752] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1531.948334][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1532.017937][T10742] device bond0 left promiscuous mode [ 1532.023505][T10742] device bond_slave_0 left promiscuous mode [ 1532.037040][T10742] device bond_slave_1 left promiscuous mode [ 1532.060440][T10742] device bond4 left promiscuous mode [ 1532.086141][T10742] device bridge7 left promiscuous mode [ 1532.106360][T10742] device bridge8 left promiscuous mode [ 1532.125116][T10742] bridge302: port 1(bond0) entered disabled state [ 1532.209035][T10742] bridge303: port 1(bond0) entered blocking state [ 1532.221782][T10742] bridge303: port 1(bond0) entered disabled state [ 1532.244994][T10742] device bond0 entered promiscuous mode [ 1532.264936][T10742] device bond_slave_0 entered promiscuous mode [ 1532.275899][T10742] device bond_slave_1 entered promiscuous mode [ 1532.299673][T10742] device bond4 entered promiscuous mode [ 1532.309105][T10742] device bridge7 entered promiscuous mode [ 1532.322607][T10742] device bridge8 entered promiscuous mode [ 1532.338102][T10742] bridge303: port 1(bond0) entered blocking state [ 1532.344637][T10742] bridge303: port 1(bond0) entered forwarding state [ 1532.361740][T10743] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1532.424662][T10734] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009907000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1532.686321][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1532.707071][T10753] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000d0ee19aa404c65070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006387efb5f5e92ddda98c05d99d711c720e023952ec478e882940ed18e183339a4f8a10fdbb61425d1e89441172cce1df8368a9da315fb6a085dc6d8b92c2184d4867434302cdf0f6028cf059dc7eb860782245155a68e2a99bd888be2e646d7b359d214e32e612cc23fcb894dfca9b4cbf695078c05a91334ca635585a33f0781c4a908eea4caba23b20f4b8d885dbe66925"], 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) r5 = accept$phonet_pipe(r2, 0x0, &(0x7f00000000c0)) recvmsg(r5, &(0x7f00000007c0)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/211, 0xd3}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/25, 0x19}], 0x6, &(0x7f0000000740)=""/111, 0x6f}, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) splice(r7, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1532.744279][T10780] device bond0 left promiscuous mode [ 1532.749841][T10780] device bond_slave_0 left promiscuous mode [ 1532.760889][T10780] device bond_slave_1 left promiscuous mode [ 1532.767209][T10780] device bond4 left promiscuous mode [ 1532.774026][T10780] device bridge7 left promiscuous mode [ 1532.779882][T10780] device bridge8 left promiscuous mode [ 1532.787545][T10780] bridge303: port 1(bond0) entered disabled state [ 1532.821143][ T28] audit: type=1800 audit(1596725607.242:395): pid=10789 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16362 res=0 [ 1532.844971][T10780] bridge304: port 1(bond0) entered blocking state [ 1532.856541][T10780] bridge304: port 1(bond0) entered disabled state 14:53:27 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x6) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=""/18, &(0x7f00000000c0)=0x12) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x5c) 14:53:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000b119970cf10c9c5e17e6d014b5f374f0e291bd99dad51479f9fff40adea2b397eb18d0fe0d06d67e51adff420d01f0a2746057f6b84dbe28655f1a6673c8d4647290ec31789dc89a08c719645ab452ae6cd9749c18645a1e0facf1f9306eae7b9f55e8ae847be4541a934202146fa513742ffdbd79b9ed0e75b06f35c09d41eb"], 0xb8}}, 0x0) [ 1532.876109][T10780] device bond0 entered promiscuous mode [ 1532.911751][T10780] device bond_slave_0 entered promiscuous mode [ 1532.931395][T10780] device bond_slave_1 entered promiscuous mode [ 1532.950834][T10780] device bond4 entered promiscuous mode [ 1532.970491][T10780] device bridge7 entered promiscuous mode 14:53:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {0x5}, {0x0, 0x0, 0x0, 0x40000000000}}}, 0xb8}}, 0x0) [ 1532.985838][T10780] device bridge8 entered promiscuous mode [ 1533.011410][T10780] bridge304: port 1(bond0) entered blocking state [ 1533.017992][T10780] bridge304: port 1(bond0) entered forwarding state [ 1533.057850][T10781] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x4888}}}}}, 0x62) 14:53:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xffffff9e, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009a07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:27 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1533.303836][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000002100010100000000000000000200000000000000000000000ce117006e19910e3b435b9d6be623d71bcd3895c3da5853af7153254b3935e28d084a335a59e06476c60595f95f06463a0b6a899c0bcf0558dff473543b1c976ada08d6cfe3ea463abebc9212e21af063fd46515848fe85458f4e363b170dee381ff98548be7d7858c5eae862f0bed925d0d11cc23b882015e70769f50d20a428f1d3a81c329aef", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="29f050f6dc1760506e0f827a97572ebe26f9e6ee9998c9b297231c3a26b3dceeb03943458c62dfafa70298d529458eb75be2651e011782429b72321c7bfda0af1215636da6233992e9e454992e481a74dcb04e11bc7ed2816c99ff4ec832d2c208187283ec05bb795203d43ce24e8c1493b12a083de2f583d71b6d5086370c2e0195548073a3e2d54e65baca61e795b751f2bb75832cec7b14d34c56085838b442aac6d3c92225dada10c7"], 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r5}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) splice(r8, 0x0, r6, 0x0, 0x400fffe, 0x0) getpeername$netrom(r6, &(0x7f0000000000)={{0x3, @default}, [@remote, @netrom, @netrom, @netrom, @bcast, @null, @rose, @netrom]}, &(0x7f00000000c0)=0x48) 14:53:27 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000525d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1533.397657][T10826] device bond0 left promiscuous mode [ 1533.407724][T10826] device bond_slave_0 left promiscuous mode [ 1533.433564][T10826] device bond_slave_1 left promiscuous mode 14:53:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xfffffffe) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1533.453012][T10826] device bond4 left promiscuous mode 14:53:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000001c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xe808) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r6, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r9, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, 0x6, 0x7ff}, 0x90) [ 1533.481978][T10826] device bridge7 left promiscuous mode [ 1533.501014][T10826] device bridge8 left promiscuous mode [ 1533.520884][T10826] bridge304: port 1(bond0) entered disabled state [ 1533.585330][T10826] bridge305: port 1(bond0) entered blocking state [ 1533.606886][T10826] bridge305: port 1(bond0) entered disabled state 14:53:28 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x40001) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r9, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1533.644720][T10826] device bond0 entered promiscuous mode [ 1533.671640][T10826] device bond_slave_0 entered promiscuous mode [ 1533.696771][T10826] device bond_slave_1 entered promiscuous mode [ 1533.741056][T10826] device bond4 entered promiscuous mode [ 1533.768591][T10826] device bridge7 entered promiscuous mode [ 1533.795694][T10826] device bridge8 entered promiscuous mode [ 1533.828619][T10826] bridge305: port 1(bond0) entered blocking state [ 1533.835225][T10826] bridge305: port 1(bond0) entered forwarding state 14:53:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x400fffe, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0x10000, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x4, &(0x7f0000000180)={[0x409]}, 0x8) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) splice(r7, 0x0, r1, 0x0, 0x400fffe, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0x1a8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@algo_auth_trunc={0x70, 0x14, {{'cmac-aes-ce\x00'}, 0x120, 0x40, "fef85dfcf4bd338d8103e4b1fe8509e868a935c070af1e33d4ec058f1da163c538a29455"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e24, @in=@rand_addr=0x64010102}}, @tfcpad={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd27, 0x70bd28, 0x70bd2b, 0x10001, [0x0]}}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@mcast2, 0x0, 0x1, 0x2}}]}, 0x1a8}}, 0x200020c4) 14:53:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009b07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xffffffc3, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1534.378360][T10880] device bond0 left promiscuous mode [ 1534.384037][T10880] device bond_slave_0 left promiscuous mode [ 1534.404299][T10880] device bond_slave_1 left promiscuous mode [ 1534.431310][T10880] device bond4 left promiscuous mode [ 1534.436610][T10880] device bridge7 left promiscuous mode [ 1534.449054][ T28] audit: type=1800 audit(1596725608.862:396): pid=10883 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16375 res=0 [ 1534.460222][T10880] device bridge8 left promiscuous mode [ 1534.491046][T10880] bridge305: port 1(bond0) entered disabled state [ 1534.568218][T10880] bridge306: port 1(bond0) entered blocking state [ 1534.582021][T10880] bridge306: port 1(bond0) entered disabled state [ 1534.592016][T10880] device bond0 entered promiscuous mode [ 1534.597655][T10880] device bond_slave_0 entered promiscuous mode [ 1534.617980][T10880] device bond_slave_1 entered promiscuous mode [ 1534.628005][T10880] device bond4 entered promiscuous mode [ 1534.637060][T10880] device bridge7 entered promiscuous mode [ 1534.646633][T10880] device bridge8 entered promiscuous mode [ 1534.658514][T10880] bridge306: port 1(bond0) entered blocking state [ 1534.665063][T10880] bridge306: port 1(bond0) entered forwarding state [ 1534.725315][T10875] validate_nla: 8 callbacks suppressed [ 1534.725358][T10875] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x6488}}}}}, 0x62) 14:53:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000000)=""/119, &(0x7f00000000c0)=0x77) 14:53:29 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0xfffffffd) 14:53:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009c07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xfffffff0, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:29 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000526d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1534.963301][T10925] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1535.036578][T10932] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1535.447778][T10923] device bond0 left promiscuous mode [ 1535.456811][T10923] device bond_slave_0 left promiscuous mode [ 1535.468535][T10923] device bond_slave_1 left promiscuous mode [ 1535.475726][T10923] device bond4 left promiscuous mode [ 1535.482494][T10923] device bridge7 left promiscuous mode [ 1535.488360][T10923] device bridge8 left promiscuous mode [ 1535.498301][T10923] bridge306: port 1(bond0) entered disabled state 14:53:30 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x2, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000002100010100000000000000000200000000000000000000000ce117006e19910e3b435b9d6be623d71bcd3895c3da5853af7153254b3935e28d084a335a59e06476c60595f95f06463a0b6a899c0bcf0558dff473543b1c976ada08d6cfe3ea463abebc9212e21af063fd46515848fe85458f4e363b170dee381ff98548be7d7858c5eae862f0bed925d0d11cc23b882015e70769f50d20a428f1d3a81c329aef", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="29f050f6dc1760506e0f827a97572ebe26f9e6ee9998c9b297231c3a26b3dceeb03943458c62dfafa70298d529458eb75be2651e011782429b72321c7bfda0af1215636da6233992e9e454992e481a74dcb04e11bc7ed2816c99ff4ec832d2c208187283ec05bb795203d43ce24e8c1493b12a083de2f583d71b6d5086370c2e0195548073a3e2d54e65baca61e795b751f2bb75832cec7b14d34c56085838b442aac6d3c92225dada10c7"], 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r3}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {}, {}, 0x3, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) [ 1535.563967][T10923] bridge307: port 1(bond0) entered blocking state [ 1535.576569][T10923] bridge307: port 1(bond0) entered disabled state [ 1535.596936][T10923] device bond0 entered promiscuous mode [ 1535.610643][T10923] device bond_slave_0 entered promiscuous mode [ 1535.636701][T10923] device bond_slave_1 entered promiscuous mode [ 1535.653977][T10923] device bond4 entered promiscuous mode [ 1535.670364][T10923] device bridge7 entered promiscuous mode [ 1535.688123][T10923] device bridge8 entered promiscuous mode [ 1535.716968][T10923] bridge307: port 1(bond0) entered blocking state [ 1535.723617][T10923] bridge307: port 1(bond0) entered forwarding state 14:53:30 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x3e) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xe808) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r4, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r7, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @remote}, 0x40, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)='veth1_macvtap\x00', 0x10000, 0xfffffffffffffeff, 0xfffd}) [ 1535.895642][T10946] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009d07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6513}}}}}, 0x62) 14:53:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1536.004108][T10926] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1536.031275][T10926] __nla_validate_parse: 8 callbacks suppressed [ 1536.031285][T10926] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:30 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x50000091}, 0x24000890) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000060053c400d3d73102dbdf25070000001400060076657468305f746f5f626174616476002800070073797374656f5f753a6f626a6563745f723a736f756e645f6465766963655f743a73300014000300fe8000000000000000000000000000bb149058000300fe8000000000000068bfee59cdf581cfd11e674450fd993a5d983d291479c171058c5004b82d6aef088da623d584faaff3d43f5fd8b0b1a49a74a8f0cab9474a00896f8c1cc735e843a273c2af21df2b14b3262132"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x42}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0xc871}, 0x4000) r3 = accept$alg(r1, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x400fffe, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xa, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x8, 0x7}, &(0x7f0000000100)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xb09}}, 0x10) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) [ 1536.218395][T10986] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x1401, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8baff4941edb43b2}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:53:31 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000527d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1536.545280][T10986] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1536.566716][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1536.619553][T10998] device bond0 left promiscuous mode [ 1536.625264][T10998] device bond_slave_0 left promiscuous mode [ 1536.641857][T10998] device bond_slave_1 left promiscuous mode [ 1536.658777][T10998] device bond4 left promiscuous mode 14:53:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x28, 0x2, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xe4, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_acl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x50000091}, 0x24000890) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000060053c400d3d73102dbdf25070000001400060076657468305f746f5f626174616476002800070073797374656f5f753a6f626a6563745f723a736f756e645f6465766963655f743a73300014000300fe8000000000000000000000000000bb149058000300fe8000000000000068bfee59cdf581cfd11e674450fd993a5d983d291479c171058c5004b82d6aef088da623d584faaff3d43f5fd8b0b1a49a74a8f0cab9474a00896f8c1cc735e843a273c2af21df2b14b3262132"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x20700088}, 0xc, &(0x7f0000003240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000f070715670899fa1cc59b4085098a8cdc9f51f43aec0a26edaf86ee0a118b1a8", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf250100000014000200fe8000000000000000000000000000aa050001000000000005000100000000001400030000000000000000000000000000000001080005000a010101"], 0x54}}, 0x4000080) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1536.679933][T10998] device bridge7 left promiscuous mode [ 1536.686747][T10998] device bridge8 left promiscuous mode [ 1536.695473][T10998] bridge307: port 1(bond0) entered disabled state [ 1536.727654][T10998] bridge308: port 1(bond0) entered blocking state [ 1536.735555][T10998] bridge308: port 1(bond0) entered disabled state [ 1536.745262][T10998] device bond0 entered promiscuous mode [ 1536.751973][T10998] device bond_slave_0 entered promiscuous mode [ 1536.758976][T10998] device bond_slave_1 entered promiscuous mode [ 1536.767298][T10998] device bond4 entered promiscuous mode 14:53:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000001c40)=""/11, &(0x7f0000001c80)=0xb) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600040000c30000db8cba32043d42edf3ee83bb3415cbec785c46864b56f0ec68fc1bf2ee011805c877a777fe4417d0e22de1a0b3cb01aa29780499b5948f0f9c94e1ca67dd4da15bf25e5cc1175b"], 0x1c}}, 0x0) sendmmsg(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000180)=@generic={0x3, "fac3f6ec8f4dd9e2fce65ee3c2c5476e087842e03ef4ca739c44ffae66e591d4a6ef00aa81b41d82bd5bc0bdba8257f8235d943172f804dc801a1f9180a9eb32765cdf52fdaa5fb8f5947733f8f876096e484ef615342a05604db20dfe3b143477be724046810e1102f980678721f7a343c63a0e852ee78b67913543974c"}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)="aba30bd194f6d999516a070f3d574e70385e843e9fc639fb", 0x18}, {&(0x7f0000000240)="694f297cf6273e52b189d35715db7ad51cc412914e4363b5bef6d9fb34a24bad056b737ab208aee91aa333fa14e9358a99c1600429", 0x35}, {&(0x7f0000000380)="80dbd8b28dd4ae831f4e50fe3215d4cbf75b4cf4e58f08809afce4b07316b7a27e8eeed018b55928f111989a8d5177a6849a0a79d00b455a85457c5e269b5c581df2d109cd74e57dda4646097dbba72e1446d09315a5be58f905fcc73c8a314338d74491d93173b266fe988d020a1d8d97d0615f4405683a1f3677ded66bed6a7b4ca46117486ffbae3e6617fa997619581719d136ecc6786da66192ddaa7227657e1bbdcc9e5810b381281687d1", 0xae}, {&(0x7f0000000440)="54d910fa432ebe11077b6165bc3277c377fa09989ecbb73f3d523cec87626e56fc5531f78fc04c8bf8e87828495a744c0fd4c605b9e1d654e72235ed34ea92dd8eea37c5a7c3dc979f86f50ffdf28e56e4d8c7b82995ca0906ceafd52cc5112724cd270d762609a5d4ad78caaa9f9076b23553f1d766f89b76db4adf7f956eabe18fda71b83b184653f694242860251c0de93a9e7cebeb03b57ad2c1f889e446392bc2bfbfa7fa8428f7827287ab9df937aea6c282a4778aa00d27d31df6511e65dfa763cf9e3dcc4519049bef470f047fd2a6cbe4e684001afa6dca66b8c74d78330244da0eb769b6b6a8f8398e408d", 0xf0}, {&(0x7f0000000540)="809dd1574c1496623c5f5e8fa923dadb7b8721b009d6dfbd", 0x18}, {&(0x7f0000000580)="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", 0x1000}], 0x6, &(0x7f0000001600)=[{0x108, 0x0, 0xfffffffe, "fbc7298d351019e45c8f83d0f2b54fe864750e2b87485e6438fdfb2dd2722c9aa943748a282ac646ae08b931bc4a874c0b176d32567587542575ee59407dff15c008084e900f8c8c7c3336794355d61d6e9d0359af229db322413a22816d7f78f8f8b3abc6a84c322d1069f90e6cb1aea962385e641feab2ff27f92a099afb55595ae6084dfe3e9c6b050bd223a0f43bac19dcb6bf4cbfc62c988f74c271d226f353db2e2dc0b49156a9d97604723ce65f3e8e98671c602d143ef122d873c354c431b4d3d1a82deffa687a85a40fa2a08f3aadac20929fdd219f4ca77475f366d3b36796377606e76d613d1a4a07fadd0934"}, {0x18, 0xff, 0x4, "755462fffe3fe9"}, {0xf0, 0x0, 0xfffff02b, "bc27550d392015a6833f3e23617cad630b24b50ce4bedd73be7aad71bbd8d0c12f8e8b61509b8024e9c09e6aaea015c3c83d6f160768e75c61cc4e3b33700737323e2401525e5d3719871adce8c99809d2d7a3f336e5b398b524d6a95b152480e8b4f8a23b72eccfae08d44792cf0bee8335d418850478eafb90367eae0d53431b4d09a1c77ec6add1185efc667e11a95b98dac25c394f8d17037e38e09ce282fcd4381fa38c8392acff9c009a8888b62c9311937f78ad17a4f817ce7ef5d31e3b174ca6b512e00e2b293936ee6b5fabb708b826e71ca6697083d8fb"}, {0x30, 0x10a, 0x3ff, "5f404e7c477fbaf8467044ce022c2a08f78dbde906ae1fb0ae739981cdee11"}, {0x38, 0x1, 0x1, "e826c89e5d38d18b65f8fb7016cbbf518a97a7c1358d82b548181cd243f3610720d96ed20a"}, {0x78, 0x10c, 0x8000, "3544af05d0ca8aaba29ee3aefb6e96243aec2be0946d50fde3aa60b9bb4e58ba3b1901626dfcf61a5dd4a588e796ad835e3c17c69b1796f5b7dd00c48b5575cf41ec85b75aee7250b5ab6c074ed043300e11aa150fd63a5d959232e0c2677f780677c5b5e8722b"}, {0xe0, 0x1, 0x7, "30d24e522cdede2dad699397f468db3c74cbdedccd0256f83ec7a9fe6d1a9171a78dbe5fdf4dc8943f42c18f00a0f3b5d2039ddcf22936b0718a7144e7e8ba0f623771a875d3f097f856be842c352dd0825c9b93466824a2fcdb288693740237cb36a1bfb9c736746090ef3705c5c67860754b7ecb7069879847178a40b2b85e4a0f576d03899db6795aec8dfa5be4290e2d1b529731b756e24f544d95f62966742d82327c7ae66313ecee8bb895eb32730c418717ac8f2145270d1dc7720ec720d7dfd62b76a48b19ad754917"}, {0x90, 0x101, 0x848, "16875493e5e549556c14bcbac08be91c743f800f67326170074d285d553a7d5bcbe9943e226c3d5d794e9e96017481d497830603fa1709a2bf1e0134b325bf7c74821a2a3cf3c17844c8d85d38d5a64c1aed19bb23323826536c30f7abc4fbbe536aea987bb5120b532af3f5a76f910d6df341bc21dab2eeba04557570"}, {0x20, 0xff, 0x800, "b3383e80f220f1ae47c2"}], 0x480}}, {{&(0x7f0000001a80)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)="a1c6c577cd44d719fef914e4d46ba0b32c3a57", 0x13}, {&(0x7f0000001b40)="eea15c906f05fb0890ab33633f1d7af672fccda6e211b1a0bbb3d1d14512127da58a915bf3", 0x25}], 0x2}}], 0x2, 0x1880) [ 1536.789128][T10998] device bridge7 entered promiscuous mode [ 1536.799938][T10998] device bridge8 entered promiscuous mode [ 1536.809932][T10998] bridge308: port 1(bond0) entered blocking state [ 1536.816541][T10998] bridge308: port 1(bond0) entered forwarding state [ 1536.833461][T10986] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1536.852306][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009e07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6514}}}}}, 0x62) [ 1537.023841][T11035] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:31 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x400fffe, 0x0) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @local}}, 0x24) listen(r0, 0x100000000000012) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000700)='cpu.stat\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000740)="0accd83f6bacee3a8799af8dcf02e63155b26b6ef415da8fd70a5dbed9de5d341267d704e65ed53092f3956cc6311425d204e1b52dffed104094829661f4cd6b", 0x40) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@getqdisc={0x4c, 0x26, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {0x10, 0x2}, {0x3, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000180)=0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x1000, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 14:53:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20100000}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1537.064754][T11035] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1537.097979][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1537.153926][T11035] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1537.173025][T11046] device bond0 left promiscuous mode [ 1537.187916][T11046] device bond_slave_0 left promiscuous mode 14:53:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, {}, 0x0, 0x10000000}}, 0xb8}}, 0x80000) [ 1537.208730][T11046] device bond_slave_1 left promiscuous mode [ 1537.242438][T11046] device bond4 left promiscuous mode [ 1537.265387][T11046] device bridge7 left promiscuous mode [ 1537.292715][T11046] device bridge8 left promiscuous mode [ 1537.322640][T11046] bridge308: port 1(bond0) entered disabled state [ 1537.432096][T11046] bridge309: port 1(bond0) entered blocking state [ 1537.438870][T11046] bridge309: port 1(bond0) entered disabled state [ 1537.452150][T11046] device bond0 entered promiscuous mode [ 1537.458077][T11046] device bond_slave_0 entered promiscuous mode [ 1537.464946][T11046] device bond_slave_1 entered promiscuous mode [ 1537.472802][T11046] device bond4 entered promiscuous mode 14:53:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06009f07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1537.478770][T11046] device bridge7 entered promiscuous mode [ 1537.485566][T11046] device bridge8 entered promiscuous mode [ 1537.501062][T11046] bridge309: port 1(bond0) entered blocking state [ 1537.507675][T11046] bridge309: port 1(bond0) entered forwarding state 14:53:32 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x1, 0x20, 0x4}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=@newsa={0x4dc, 0x10, 0x400, 0x70bd29, 0x25dfdbff, {{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x6, 0x4e21, 0x2, 0x14, 0x40, 0x80, 0x4}, {@in=@rand_addr=0x64010101, 0x4d4, 0xff}, @in=@local, {0x10000, 0x200000000000009, 0x2, 0x7, 0x7, 0x7, 0x1, 0x765166cf}, {0x1000, 0x4, 0x80000001, 0x8000}, {0x3f, 0x1, 0xe1}, 0x70bd26, 0x3502, 0xa, 0x1, 0x42, 0x1c4}, [@sa={0xe4, 0x6, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e22, 0xc9, 0x4e22, 0x0, 0x2, 0xa0, 0xa0, 0x88}, {@in=@empty, 0x4d6, 0x2b}, @in=@empty, {0x8, 0x80, 0x8, 0x1, 0x1, 0x746, 0x2, 0x3}, {0x7fffffff, 0x7, 0x400, 0xfffffffffffffffc}, {0x3, 0xa808, 0x8}, 0x70bd25, 0x0, 0x0, 0x4179a52a64de5a2c, 0x2, 0xa5}}, @algo_auth={0x68, 0x1, {{'nhpoly1305-avx2\x00'}, 0x100, "fd00917169802efd78e5f5fdb14f4c17a0a3923171683029472a1650b8465e2f"}}, @tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x32}, 0xa, @in6=@loopback, 0x3503, 0x2, 0x3, 0x8, 0x2, 0x81}, {{@in6=@dev={0xfe, 0x80, [], 0x32}, 0x4d2, 0x6c}, 0x2, @in=@remote, 0x3503, 0x3, 0x2, 0x40, 0x1c00000, 0x4, 0x5}, {{@in=@broadcast, 0x4d3, 0x33}, 0x2, @in=@rand_addr=0x64010102, 0x3504, 0x2b6a8c0f4d8a9e36, 0x0, 0xa4, 0x0, 0x4, 0xfffffff7}, {{@in6=@dev={0xfe, 0x80, [], 0x44}, 0x4d6, 0x2b}, 0x0, @in=@local, 0x3505, 0x0, 0x2, 0x74, 0x80000000, 0x6b7, 0x1}, {{@in=@multicast1, 0x4d5, 0x3c}, 0xa, @in=@rand_addr=0x64010102, 0x3501, 0x1, 0x1, 0x1, 0x7f, 0x5, 0x4}, {{@in6=@dev={0xfe, 0x80, [], 0x11}, 0x4d4, 0x33}, 0xa, @in6=@private0, 0x3503, 0x0, 0x1, 0x0, 0x669, 0x1ff, 0x77a}]}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@rand_addr=0x64010101, 0xa, 0xff, 0x3}}, @algo_comp={0xf4, 0x3, {{'lzjh\x00'}, 0x560, "7cf5f711697a6c2811b1123e5ef68d514ae81367dad8a27bfc4a184e80920f5f263a3a80f694e0a5b9ac2f47086d899b4de5c57a66217bce8179e09a205a6e0c4e5234a41e60fe17deaa25536a82a179801e003a04d55334450185bbe724e25770c76c2376619274b2757b5e72d736090fd001a4a36a246ccf0305c7f550c54be38f8678764f1c1fe441af99627095e1e1b55f6042cc2afa8a7e0824f22fb9b154661e3774cf3f73916349d6"}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=@newspdinfo={0xfffffffffffffe70, 0x24, 0x1, 0x4, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}, @XFRMA_SPD_IPV6_HTHRESH]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000240001000500000000000000002ab7ca00040000c30000894a911d773999df320e83254f4692ae12c1b580c3a71f53a3d6477fd5e50b7d00ffc61886d14db3034f9458600cccb18ee9da76cecb362e97"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) 14:53:32 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000528d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1537.821734][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1537.837379][T11064] device bond0 left promiscuous mode [ 1537.842878][T11064] device bond_slave_0 left promiscuous mode [ 1537.854813][T11064] device bond_slave_1 left promiscuous mode [ 1537.861178][T11064] device bond4 left promiscuous mode [ 1537.866638][T11064] device bridge7 left promiscuous mode [ 1537.873855][T11064] device bridge8 left promiscuous mode [ 1537.879685][T11064] bridge309: port 1(bond0) entered disabled state [ 1537.913271][T11078] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1537.921637][T11078] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1537.953917][T11070] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@newtfilter={0x500, 0x2c, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xe, 0xfff1}, {0x2, 0x3}, {0x4, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4b0, 0x2, [@TCA_CGROUP_ACT={0x4ac, 0x1, [@m_tunnel_key={0x180, 0x5, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xfb, 0x6, "9d64dc4c471fc1eb69cd830a1634b7eb5692aaabb988cf19ddb925a28aa829fedf73a9822e4a11c9e9be51ab8c2d1b71ccc87678f438184607159a04bdc5b7228e1e5f8d2524a2485392dd28b283bb2549be0d7f1c98f3480f5b8a0912e73b8a07b4626bd8625cab44c567828376c103f79372ec474965e474f1fa7b3b1da91e6267c1ec3720e2949cfcaf4ed1013ea7d1584d803b7007e04d9135be0f76a532f318673ba14a60b999752ecbc48cd0ead2b7fb177c5868d185570326fd59c6c5aec4317d568ef66081037fdbc0f3473a1c5369125ee439f6b1033b47e8fddaaa3243dc9c43b34f58b001e0de6f32ada20346b8d6813566"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0xb8, 0x9, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0xffffc2a7, 0xffffffffffffffff, 0x5, 0x80}, 0x7777}}]}, {0x6b, 0x6, "4d8481d1ca7ea9ddd1d49de25eebe62695afb57237c04614f0a924ab58891db2df87609dee977ac9693f2249cef905cfe8586a8cda76a90f8a92d48c99977fe85e1c744827c87dfc6d99d1f4809e2016d2ebeb4bd4e0c5756f23809ced89803a9c09d2789a6c97"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x34, 0x18, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0x7, 0x6, "b869c4"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_nat={0x11c, 0x18, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c9, 0x0, 0x7, 0x10000, 0x7ff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffc1, 0x8000, 0x20000000, 0x9, 0x3}, @empty, @rand_addr=0x64010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x1, 0xffffffff, 0x8}, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x81, 0x8, 0x7, 0x1fe7df53}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1ff, 0x0, 0x3, 0x2}, @empty, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x7ff, 0x10000000, 0x4, 0x2}, @loopback, @multicast2, 0x1ff000001, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x120, 0x1a, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfff, 0x2, 0x80, 0x6601}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7ff, 0x4, 0x3b, 0x6}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x235, 0x0, 0x20000000, 0x2, 0x1f6e}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1ff, 0x5, 0x3, 0x3}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x5, 0x1f, 0x7fff}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc8c, 0x1, 0x2, 0x0, 0x100}, 0x1}}]}, {0x4c, 0x6, "4dfacd4aa83eebc28e9808e43d8ffa5d8cd47564733949d4d4030667b0b6612a3d6fd7e8b0e8808c5778a3f11df05be6575ee786a164cc707547ea7548c1c5741f77db5e1e90a73d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x500}, 0x1, 0x0, 0x0, 0x4880}, 0x800) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r6, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a007000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1538.545366][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1538.573793][T11105] bridge310: port 1(bond0) entered blocking state [ 1538.581752][T11105] bridge310: port 1(bond0) entered disabled state [ 1538.591598][T11105] device bond0 entered promiscuous mode [ 1538.597611][T11105] device bond_slave_0 entered promiscuous mode [ 1538.605177][T11105] device bond_slave_1 entered promiscuous mode [ 1538.617161][T11105] device bond4 entered promiscuous mode [ 1538.626061][ T28] audit: type=1800 audit(1596725613.042:397): pid=11115 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16097 res=0 14:53:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) [ 1538.628133][T11105] device bridge7 entered promiscuous mode [ 1538.661429][T11105] device bridge8 entered promiscuous mode [ 1538.677059][T11105] bridge310: port 1(bond0) entered blocking state [ 1538.683595][T11105] bridge310: port 1(bond0) entered forwarding state 14:53:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a107000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x2, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:33 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000529d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000105000000416f62961a38111d97000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000004) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r4, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @mcast1, 0xfffffbff}, 0x1c) r7 = accept$alg(r6, 0x0, 0x0) splice(r7, 0x0, r5, 0x0, 0x400fffe, 0x0) accept4$x25(r5, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) [ 1539.268100][T11128] device bond0 left promiscuous mode [ 1539.280496][T11128] device bond_slave_0 left promiscuous mode [ 1539.286839][T11128] device bond_slave_1 left promiscuous mode [ 1539.302407][T11128] device bond4 left promiscuous mode [ 1539.307947][T11128] device bridge7 left promiscuous mode [ 1539.322135][T11128] device bridge8 left promiscuous mode [ 1539.336600][T11128] bridge310: port 1(bond0) entered disabled state [ 1539.405202][T11128] bridge311: port 1(bond0) entered blocking state [ 1539.412189][T11128] bridge311: port 1(bond0) entered disabled state [ 1539.421032][T11128] device bond0 entered promiscuous mode [ 1539.426987][T11128] device bond_slave_0 entered promiscuous mode [ 1539.438505][T11128] device bond_slave_1 entered promiscuous mode [ 1539.445581][T11128] device bond4 entered promiscuous mode [ 1539.452118][T11128] device bridge7 entered promiscuous mode [ 1539.458379][T11128] device bridge8 entered promiscuous mode [ 1539.468117][T11128] bridge311: port 1(bond0) entered blocking state [ 1539.474736][T11128] bridge311: port 1(bond0) entered forwarding state 14:53:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a207000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1539.715492][ T28] audit: type=1800 audit(1596725614.133:398): pid=11141 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16097 res=0 [ 1539.934484][T11165] validate_nla: 8 callbacks suppressed [ 1539.934495][T11165] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1539.983245][T11168] device bond0 left promiscuous mode [ 1539.988577][T11168] device bond_slave_0 left promiscuous mode [ 1540.017505][T11168] device bond_slave_1 left promiscuous mode [ 1540.032051][T11168] device bond4 left promiscuous mode [ 1540.037646][T11168] device bridge7 left promiscuous mode [ 1540.052622][T11168] device bridge8 left promiscuous mode [ 1540.059141][T11168] bridge311: port 1(bond0) entered disabled state [ 1540.123732][T11168] bridge312: port 1(bond0) entered blocking state [ 1540.130294][T11168] bridge312: port 1(bond0) entered disabled state [ 1540.137516][T11168] device bond0 entered promiscuous mode [ 1540.144757][T11168] device bond_slave_0 entered promiscuous mode [ 1540.151750][T11168] device bond_slave_1 entered promiscuous mode [ 1540.158004][T11168] device bond4 entered promiscuous mode [ 1540.164641][T11168] device bridge7 entered promiscuous mode [ 1540.171326][T11168] device bridge8 entered promiscuous mode [ 1540.178238][T11168] bridge312: port 1(bond0) entered blocking state [ 1540.184769][T11168] bridge312: port 1(bond0) entered forwarding state [ 1540.196707][T11165] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x2}}}}}, 0x62) 14:53:35 executing program 1: r0 = socket$inet6(0xa, 0xa, 0x1fffc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x400fffe, 0x5) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9000, @fixed={[], 0x11}, 0x3}, 0xe) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a307000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:35 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500052ad25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) r5 = accept(r4, &(0x7f0000000880)=@nl, &(0x7f0000000900)=0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000850000002c000000950000e3004f718958377757bfcc00"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r6, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r7}, 0xc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000940)=0x9, 0x4) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x3c, r3, 0x536ae464467e3929, 0x70bd25, 0x0, {0x22, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x6000000000000000, 0x0, 0x20008001}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f30244c9", @ANYRES16=r3, @ANYBLOB="04002dbd7000fedbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044011) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000790cdd0f14a2b1e000000000000000000000000000000000000000000000000000000001000"/112], 0xb8}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x21}, 0x14}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) [ 1540.823430][T11193] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:35 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000180)=0x10) [ 1540.910925][T11203] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:53:35 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x3f, 0x80000000, 0x5df, 0x3, 0x3}) [ 1541.287924][T11197] __nla_validate_parse: 10 callbacks suppressed [ 1541.287935][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1541.348418][T11204] device bond0 left promiscuous mode [ 1541.364236][T11204] device bond_slave_0 left promiscuous mode [ 1541.381754][T11204] device bond_slave_1 left promiscuous mode [ 1541.401952][T11204] device bond4 left promiscuous mode [ 1541.407476][T11204] device bridge7 left promiscuous mode [ 1541.413834][T11204] device bridge8 left promiscuous mode [ 1541.420635][T11204] bridge312: port 1(bond0) entered disabled state [ 1541.474939][T11204] bridge313: port 1(bond0) entered blocking state [ 1541.487123][T11204] bridge313: port 1(bond0) entered disabled state [ 1541.497209][T11204] device bond0 entered promiscuous mode [ 1541.508424][T11204] device bond_slave_0 entered promiscuous mode [ 1541.515320][T11204] device bond_slave_1 entered promiscuous mode [ 1541.526838][T11204] device bond4 entered promiscuous mode [ 1541.533063][T11204] device bridge7 entered promiscuous mode [ 1541.538894][T11204] device bridge8 entered promiscuous mode [ 1541.551033][T11204] bridge313: port 1(bond0) entered blocking state [ 1541.557632][T11204] bridge313: port 1(bond0) entered forwarding state [ 1541.572391][T11207] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001900010000000000000000838b44424eaeb4962ea4d98e2500ff029906000000000000000000000001e0000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000001000000000000"], 0xb8}}, 0x0) [ 1541.631712][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1541.655288][T11193] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1541.714338][ T28] audit: type=1800 audit(1596725616.133:399): pid=11208 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16258 res=0 14:53:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x5, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a407000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r1, @ANYBLOB="ff830a00000016000a00", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb80d}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4040000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x200, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe4, 0x3, "c7d42110b15ce4c5a8d75587a030ce677ac39f3dbfcb14f92fb446e49a694f5fec8f6d03bcdcd1b6d760a2d956181225efc773e293cb69026b9072dcd764c7d0a391361057e5819b381c63b2126df0fc5dcbf4abc991ab2f18c689f31f1a1d3ce7c3ed2ca32b3a8aee6a2299d574e5f227f4cf5505319cc11557e92a50c075765b5875ef6da56151d363fde5ca4f47304d25088485661ea678f471ab76fd45016dd19873d30e0297cdae0081582d7a31df5d6851d6a1442bf7433ef2402040829f1e51c63be80daeb800a361c649bafb954e21ff050cd06a17e21b0c2ac0b40c"}, @TIPC_NLA_NODE_ID={0x70, 0x3, "0cf28dc749ba32c399977eaa112967454aa1cf702cc577835b91054ebf8edf50aef77c82064dd4f91448a76f68b18b4e392da60f75bae3b11028b65ab98dcc2e3c7bd3e0cb369a76c7891d20940166640e6df7519c9b7f9ca944899d4bff93eeceb84f767bd34cba185a3d17"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x80000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0xa08, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x4050810) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) write(r5, &(0x7f0000000180)="e7654d2bc7", 0x5) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000ffffffffffffff00000200000000698285a6f62ac149216a00001bb28dd5850e26ae37f40012a676aa6334728d13f2eae9322e62b732c1c91c4d1dbf8d6d311d0ca8e5dae311b7d851072f45af0cb86fef0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) [ 1542.135544][T11250] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1542.145106][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1542.177051][T11255] device bond0 left promiscuous mode [ 1542.184330][T11255] device bond_slave_0 left promiscuous mode [ 1542.193380][T11255] device bond_slave_1 left promiscuous mode [ 1542.205005][T11255] device bond4 left promiscuous mode [ 1542.211690][T11255] device bridge7 left promiscuous mode [ 1542.217245][T11255] device bridge8 left promiscuous mode [ 1542.225686][T11255] bridge313: port 1(bond0) entered disabled state [ 1542.274032][T11255] bridge314: port 1(bond0) entered blocking state [ 1542.280715][T11255] bridge314: port 1(bond0) entered disabled state [ 1542.288068][T11255] device bond0 entered promiscuous mode [ 1542.293853][T11255] device bond_slave_0 entered promiscuous mode [ 1542.303884][T11255] device bond_slave_1 entered promiscuous mode [ 1542.310805][T11255] device bond4 entered promiscuous mode [ 1542.316343][T11255] device bridge7 entered promiscuous mode [ 1542.324112][T11255] device bridge8 entered promiscuous mode [ 1542.333647][T11255] bridge314: port 1(bond0) entered blocking state [ 1542.340192][T11255] bridge314: port 1(bond0) entered forwarding state [ 1542.349313][T11256] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x3}}}}}, 0x62) 14:53:36 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) 14:53:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="02d21a0c6a982db2af8d915c5facd807a67c6709bad19da6e7bca3a2178bee5b", 0x20}, {&(0x7f0000000180)="3e3cdacb65ebc15818195612aec3e9eeede4f3ec0db77a72f2bf832cfcb8081e36dcb93a6b8554b2071639386b2f8144c1f0f49c76f381fd0498e86e1510949ab76e772ceabecf7fcd7bfc655514e774796ee5004ce227b158bc52e8b2f38a0a5b447809894fb9d56a747c04fee477cd89a1db485e4c8f6ab34ca73fc45baa2dc521eddecbc7bbde8c2afa7f6314a6c81e2e35c292b63a8908", 0x99}], 0x2) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x94d, 0xfffffffffffffff7, 0x100000001, 0x9, 0x9, 0x5, 0x3, 0xfffffffffffffffe, 0x3f, 0x1, 0x5, 0x9, 0x7af, 0x10001, 0x800]}, &(0x7f0000000280)=0x100) r5 = openat$cgroup_ro(r1, &(0x7f00000015c0)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000001600)={0x1, [0x97c]}, 0x6) getuid() splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x30000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x10) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffffffffffe}}}, 0xb8}}, 0x0) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0x6, 0x7f, 0x8}, 0x10) 14:53:36 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500052bd25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1542.368377][T11250] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) [ 1542.402273][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1542.430622][T11253] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a507000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:36 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0xe00, 0xf000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=r3, @ANYBLOB="bd1568c43460e8e714c8c377d1129ce8276a983a2a26acdec30489f33003441821279903ffe9cf599245f139322c211613acbc131e5cee2bd1fc2caed5740112b3c996cc8ead03f3c6fa853d40aa9516f580fd687ab76a26800bc3ee790cc68e607ddb8f527a174995b2cc35516aad4d201056f98f8fe5a8f2bb54f964f937e931e3e148fa62633d0ee9fd7361b72f7d0baaa2d628f0a1a93ae0d237a956635ead4aa02c980757070034877523", @ANYRESOCT, @ANYBLOB="b8c94d9651da7c8c73278136d38181b83c7d071dc23e6dc8f24d2b9bddb6634dfd5b77d805cca25be6b0c71b4e69", @ANYRESOCT=r4], 0x3af4701e) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000180)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x14, 0x1ff, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24048005}, 0x0) r6 = accept$alg(r2, 0x0, 0x0) splice(r6, 0x0, r1, 0x0, 0x400fffe, 0x0) sendto$inet6(r1, &(0x7f0000000200)="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", 0x1000, 0x1, &(0x7f0000000080)={0xa, 0x4e20, 0x80, @remote, 0x1f}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x58, &(0x7f0000001200)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x800, @mcast1, 0x3}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x68b8, @rand_addr=' \x01\x00', 0x692}]}, &(0x7f00000000c0)=0x10) 14:53:37 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x40000400fffe, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) close(r0) 14:53:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000180)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000002100010100000000000000000200000000000000000000000ce117006e19910e3b435b9d6be623d71bcd3895c3da5853af7153254b3935e28d084a335a59e06476c60595f95f06463a0b6a899c0bcf0558dff473543b1c976ada08d6cfe3ea463abebc9212e21af063fd46515848fe85458f4e363b170dee381ff98548be7d7858c5eae862f0bed925d0d11cc23b882015e70769f50d20a428f1d3a81c329aef", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="29f050f6dc1760506e0f827a97572ebe26f9e6ee9998c9b297231c3a26b3dceeb03943458c62dfafa70298d529458eb75be2651e011782429b72321c7bfda0af1215636da6233992e9e454992e481a74dcb04e11bc7ed2816c99ff4ec832d2c208187283ec05bb795203d43ce24e8c1493b12a083de2f583d71b6d5086370c2e0195548073a3e2d54e65baca61e795b751f2bb75832cec7b14d34c56085838b442aac6d3c92225dada10c7"], 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r6}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0x244, 0x19, 0x712, 0x70bd27, 0x25dfdbff, {{@in=@multicast2, @in=@private=0xa010100, 0x4e23, 0x7fff, 0x4e23, 0x0, 0xa, 0x80, 0xa0, 0x3c, r4, r6}, {0x52f1be46, 0x81, 0x4, 0x2, 0x40, 0x3f, 0x8, 0x9}, {0x9, 0x0, 0x5, 0x3}, 0x8, 0x6e6bb0, 0x0, 0x0, 0x0, 0x3}, [@srcaddr={0x14, 0xd, @in=@empty}, @algo_auth={0x77, 0x1, {{'sha224-avx\x00'}, 0x178, "6eccd7fdd5000e7b63fe341e4f2660a1aeb0d0b3af37713025d4e1183362645fe2b48a89a6823e83add01dfb42a79b"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e20, @in6=@mcast1}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0xf4b, @in=@remote}}, @tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4d4, 0x33}, 0x8, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x7, 0x2, 0x11, 0x20, 0x5, 0x100}]}, @XFRMA_IF_ID={0x8}, @algo_auth_trunc={0x71, 0x14, {{'blake2b-256\x00'}, 0x128, 0x60, "debe806362eb6d961d19187661c7ab05ff8dd29657a5cf07c3fd821a623c919fde04bfb5a0"}}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x244}, 0x1, 0x0, 0x0, 0x8000}, 0x4e6817d9dbc3a680) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1543.085394][T11282] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1543.097966][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1543.147372][T11289] device bond0 left promiscuous mode [ 1543.156317][T11289] device bond_slave_0 left promiscuous mode [ 1543.179912][T11289] device bond_slave_1 left promiscuous mode [ 1543.186019][T11289] device bond4 left promiscuous mode [ 1543.199698][T11289] device bridge7 left promiscuous mode [ 1543.205366][T11289] device bridge8 left promiscuous mode [ 1543.221575][T11289] bridge314: port 1(bond0) entered disabled state [ 1543.262259][T11289] bridge315: port 1(bond0) entered blocking state [ 1543.268862][T11289] bridge315: port 1(bond0) entered disabled state [ 1543.276869][T11289] device bond0 entered promiscuous mode [ 1543.282654][T11289] device bond_slave_0 entered promiscuous mode [ 1543.291336][T11289] device bond_slave_1 entered promiscuous mode [ 1543.297787][T11289] device bond4 entered promiscuous mode [ 1543.303580][T11289] device bridge7 entered promiscuous mode [ 1543.309812][T11289] device bridge8 entered promiscuous mode [ 1543.317666][T11289] bridge315: port 1(bond0) entered blocking state [ 1543.324254][T11289] bridge315: port 1(bond0) entered forwarding state [ 1543.343562][T11290] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1543.353104][ T28] audit: type=1800 audit(1596725617.763:400): pid=11304 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16290 res=0 [ 1543.378662][T11282] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1543.393263][T11289] device bond0 left promiscuous mode [ 1543.398922][T11289] device bond_slave_0 left promiscuous mode [ 1543.408100][T11289] device bond_slave_1 left promiscuous mode [ 1543.414655][T11289] device bond4 left promiscuous mode [ 1543.420456][T11289] device bridge7 left promiscuous mode [ 1543.426245][T11289] device bridge8 left promiscuous mode [ 1543.433174][T11289] bridge315: port 1(bond0) entered disabled state 14:53:37 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500052cd25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1543.621713][T11315] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1543.637389][T11315] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1543.809282][T11316] bridge316: port 1(bond0) entered blocking state [ 1543.829865][T11316] bridge316: port 1(bond0) entered disabled state [ 1543.841822][T11316] device bond0 entered promiscuous mode [ 1543.847393][T11316] device bond_slave_0 entered promiscuous mode [ 1543.872174][T11316] device bond_slave_1 entered promiscuous mode [ 1543.878532][T11316] device bond4 entered promiscuous mode [ 1543.899510][T11316] device bridge7 entered promiscuous mode [ 1543.905416][T11316] device bridge8 entered promiscuous mode [ 1543.931850][T11316] bridge316: port 1(bond0) entered blocking state [ 1543.938350][T11316] bridge316: port 1(bond0) entered forwarding state 14:53:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x4}}}}}, 0x62) 14:53:38 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x173) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a607000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0xa8, 0x10, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, [], 0x3e}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x20}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={[], [], @multicast2}}]}, @AF_BRIDGE={0x4}]}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0xa8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', r7, 0x2f, 0x5, 0x5, 0x5, 0xd, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x9, 0x6e44}}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 14:53:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x8, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a707000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000000c0)=0x2c) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) [ 1544.448399][ T28] audit: type=1800 audit(1596725618.863:401): pid=11322 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16383 res=0 14:53:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) r5 = accept$phonet_pipe(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r5, 0x0, &(0x7f0000000180), 0x80800) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000f000000000000002cf77956c64600"/118], 0xb8}}, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000001c0)=0x7f, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 14:53:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001900010000000bb1407e0000ff020000000000000000000000000001e00000010000000000e3ffffff0000000000000000000000020000000000000024f5f945764b280a00c5278afd5579130ebce35dd149ea68f5c41586ff0908ecfac720dfeb8d9501df543e2119c495d297d44d8da7896f5726569529dc660d8595acf4880de38d62e1ef9d4656a2e23976f277102af0b77709ea8f45be6051ec55de3002fb217c8343848343accba7584028ceb5dbeed8e06ac1bcce30ae938768b96b94c57b2eecee7611666760f5fd14db0cdfb888c34913ced700b6a4298400e5a86a87a42a", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000012f9272e758d00"/118], 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_dccp_int(r3, 0x21, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r2, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @remote}], 0x20) [ 1544.707281][T11346] device bond0 left promiscuous mode [ 1544.712833][T11346] device bond_slave_0 left promiscuous mode [ 1544.718968][T11346] device bond_slave_1 left promiscuous mode [ 1544.726404][T11346] device bond4 left promiscuous mode [ 1544.732407][T11346] device bridge7 left promiscuous mode [ 1544.738089][T11346] device bridge8 left promiscuous mode [ 1544.745831][T11346] bridge316: port 1(bond0) entered disabled state [ 1544.802738][T11346] bridge317: port 1(bond0) entered blocking state [ 1544.810580][T11346] bridge317: port 1(bond0) entered disabled state [ 1544.818245][T11346] device bond0 entered promiscuous mode [ 1544.825521][T11346] device bond_slave_0 entered promiscuous mode [ 1544.832534][T11346] device bond_slave_1 entered promiscuous mode [ 1544.838905][T11346] device bond4 entered promiscuous mode [ 1544.845429][T11346] device bridge7 entered promiscuous mode [ 1544.852043][T11346] device bridge8 entered promiscuous mode [ 1544.860691][T11346] bridge317: port 1(bond0) entered blocking state [ 1544.867208][T11346] bridge317: port 1(bond0) entered forwarding state 14:53:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a807000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:39 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500052dd25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x6}}}}}, 0x62) 14:53:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4}}, &(0x7f0000000040)=0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@getpolicy={0x198, 0x15, 0x200, 0x70bd29, 0x25dfdbfe, {{@in=@multicast2, @in=@local, 0x4e21, 0xa101, 0x4e22, 0x101, 0x2, 0x80, 0x80, 0x2c, r3, r5}, 0x6e6bbb}, [@encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e22, @in=@loopback}}, @policy_type={0xa, 0x10, {0x1}}, @sa={0xe4, 0x6, {{@in6=@empty, @in6=@loopback, 0x4e24, 0x2, 0x4e24, 0x1, 0x2, 0x80, 0xa0, 0x8, r8, 0xee00}, {@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, 0x4d6, 0x2b}, @in6=@local, {0xbae, 0x2, 0x8, 0x4, 0x4, 0xfffffffffffffff9, 0x3ff, 0x100000000}, {0x8, 0x1, 0x7f, 0x4}, {0x3, 0x2, 0x3}, 0x70bd27, 0x0, 0xa, 0x2, 0x3f, 0xd3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0xa, 0x6}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x198}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) [ 1545.007451][T11385] validate_nla: 4 callbacks suppressed [ 1545.007461][T11385] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1545.035869][T11385] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:39 executing program 1: sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xd, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c040}, 0x880) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x3f7, 0x10, 0x70bd2d, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8008020) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000), &(0x7f0000000180)=0x10) 14:53:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x9, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600a907000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1545.152698][T11396] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:53:39 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x10000) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) socket(0x3, 0x800, 0xbaa10147) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@private2}, &(0x7f00000000c0)=0x14) listen(r0, 0x100000000000012) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xe808) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 14:53:39 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000980)=""/104, &(0x7f0000000a00)=0x68) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x400fffe, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4b4, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb8, 0x3, "8c806bbb08b49da9ebc8c0ae4099b0e2c4ca226c16841eb8972d71a53c930dfbe20b827294f43faa22d14a59d0de294b069039e6c9ddd4a4b3240d9242ebd17974e24cf3e9a60ce96f3905b7c0dd5a2625c544920b2c95dc6356be9543ef93fdc4886ced6c8653cb4f4bb3a561de86e26fe1a13daa476963b8c4459d80a0a7d4001c025d1d2a2797fcf8515c915d8c0ee0b73b4d1e787f507e39c2c8d30223a93943b1bb04ed1956096422becc37baf002b5d4da"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ID={0x23, 0x3, "295131a7d8a5ea5ecd1af47288cec51b351408115397bbe53cd18b5c2e557f"}, @TIPC_NLA_NODE_ID={0x19, 0x3, "6aeba34099f3156d3dde9ee93aa89e3dca5df9e068"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "19bcca86ba00191574f35ed34448fe71cfae15ac"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "726e25ae8025a6405df9f89d99ab4b6b1efc7ed0bfd6a01bf1"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "69125c7d3b9bf3520ff5c8b8336bc31745c4cbcdd48e47c146059f22d932625cb33c59"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90b1f735acb62b3d97cb79d48f7509d407d0b439e9caa85638"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "55b1915355eb5069c2c39760ad68dbbf1b9edb49929130ea6028b8ee"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x54, 0x3, "75e1cfb9901baa2f030c738b68ba0221dce8f6403ce64361dc083bcb22f0c0a2cd5ee11602ab1deee8820bb726ad5d128131db5caa963c981468f0085e7bf7f00aa8940ad2222f9e435fddd99b36ae6d"}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400080}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5aaf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb69}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x231}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f54}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x101}, 0x40000) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1545.764406][T11400] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x400fffe, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x1, 0x3}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) [ 1545.833932][T11411] device bond0 left promiscuous mode [ 1545.839602][T11411] device bond_slave_0 left promiscuous mode [ 1545.872016][T11411] device bond_slave_1 left promiscuous mode [ 1545.903526][T11411] device bond4 left promiscuous mode [ 1545.926496][T11411] device bridge7 left promiscuous mode [ 1545.952212][T11411] device bridge8 left promiscuous mode 14:53:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x800) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100)) [ 1545.973184][T11411] bridge317: port 1(bond0) entered disabled state [ 1545.991520][T11412] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1546.023432][T11411] bridge318: port 1(bond0) entered blocking state [ 1546.038756][T11411] bridge318: port 1(bond0) entered disabled state [ 1546.059135][T11411] device bond0 entered promiscuous mode [ 1546.071935][T11411] device bond_slave_0 entered promiscuous mode [ 1546.080576][T11411] device bond_slave_1 entered promiscuous mode [ 1546.088066][T11411] device bond4 entered promiscuous mode [ 1546.095112][T11411] device bridge7 entered promiscuous mode [ 1546.102017][T11411] device bridge8 entered promiscuous mode 14:53:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xa, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1546.108230][ T28] audit: type=1800 audit(1596725620.523:402): pid=11442 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16382 res=0 [ 1546.131744][T11411] bridge318: port 1(bond0) entered blocking state [ 1546.138319][T11411] bridge318: port 1(bond0) entered forwarding state 14:53:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e1020000000000000000000000000001e0000001000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'netpci0\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x1}, 0x81}) [ 1546.228167][T11400] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1546.312176][T11454] device bond0 left promiscuous mode [ 1546.317703][T11454] device bond_slave_0 left promiscuous mode [ 1546.333606][T11454] device bond_slave_1 left promiscuous mode 14:53:40 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500052ed25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1546.365505][T11454] device bond4 left promiscuous mode [ 1546.376455][T11454] device bridge7 left promiscuous mode [ 1546.384925][T11454] device bridge8 left promiscuous mode [ 1546.392215][T11454] bridge318: port 1(bond0) entered disabled state [ 1546.435648][T11454] bridge319: port 1(bond0) entered blocking state [ 1546.444894][T11454] bridge319: port 1(bond0) entered disabled state [ 1546.471565][T11454] device bond0 entered promiscuous mode [ 1546.477149][T11454] device bond_slave_0 entered promiscuous mode [ 1546.488168][T11454] device bond_slave_1 entered promiscuous mode [ 1546.497875][T11454] device bond4 entered promiscuous mode [ 1546.504491][T11454] device bridge7 entered promiscuous mode [ 1546.512729][T11454] device bridge8 entered promiscuous mode [ 1546.520358][T11474] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1546.534043][T11454] bridge319: port 1(bond0) entered blocking state [ 1546.540649][T11454] bridge319: port 1(bond0) entered forwarding state [ 1546.575948][T11474] __nla_validate_parse: 10 callbacks suppressed 14:53:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x7}}}}}, 0x62) 14:53:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600aa07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:41 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x6) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1546.575956][T11474] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xc, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000001400)=0x8, 0x4) r7 = accept$alg(r3, 0x0, 0x0) splice(r7, 0x0, r2, 0x0, 0x400fffe, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x1060, 0x0, 0x5, 0x301, 0x0, 0x0, {0x7}, [{{0x254, 0x1, {{0x1, 0x4}, 0xc, 0x8, 0x8, 0x3, 0x0, 'syz1\x00', "f37cc445f7d0c2b3e19c568d2438f562d545fab01fd880bca4c296df2c073892", "f5a41b830586fe2b5e172fb3de140bd1e8e7579d2f0de424e8b8e16e3815f035", [{0x30, 0x3, {0x0, 0x8}}, {0x43, 0x7fff, {0x7, 0x9}}, {0x7, 0x5, {0x2, 0x6}}, {0x0, 0xfff8, {0x3, 0x400}}, {0xfeff, 0x4, {0x0, 0x80000000}}, {0x1f, 0x9, {0x3, 0x7}}, {0x80, 0x8000, {0x0, 0xc8}}, {0x7, 0xffff, {0x2, 0x4}}, {0x6, 0x1, {0x3, 0x101}}, {0x3f, 0x5b, {0x1, 0x6}}, {0x5, 0xfff7, {0x0, 0x54}}, {0xfffd, 0x2, {0x1, 0x400}}, {0x1953, 0x400, {0x2, 0xede}}, {0x6, 0x1, {0x2, 0x401}}, {0x4, 0x1, {0x2, 0x8000}}, {0x7015, 0x2, {0x2, 0x200}}, {0x80, 0x8409, {0x2}}, {0xf800, 0x1b1f, {0x3, 0x4}}, {0x5, 0x2, {0x2, 0xc0000000}}, {0x7, 0x4, {0x1, 0x10000}}, {0x0, 0x2, {0x2, 0x78f13060}}, {0x81, 0xfffa, {0x1, 0x800}}, {0x81, 0x82, {0x1}}, {0xd6, 0xa827, {0x3, 0x3}}, {0x200, 0x8001, {0x0, 0xfffffffd}}, {0x0, 0x8, {0x2, 0x9}}, {0x5, 0x9, {0x2, 0x23572201}}, {0x8, 0x0, {0x2, 0xf4a5}}, {0x0, 0x400, {0x3, 0x100}}, {0x0, 0x8, {0x0, 0x7}}, {0x6, 0x9cb, {0x3, 0x9}}, {0x1, 0x8, {0x0, 0x2}}, {0x9, 0x4, {0x1}}, {0x0, 0xbca, {0x0, 0x1}}, {0x4, 0x51c1, {0x2, 0x9d9}}, {0x60ea, 0x6, {0x2, 0x10000}}, {0x6, 0x6, {0x1, 0x1}}, {0xffff, 0x100, {0x3, 0x9}}, {0x1, 0x10b0, {0x2, 0x10001}}, {0x3, 0x46, {0x3, 0x80000000}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x9, 0x81, 0x3ff, 0x8000, 0x1a, 'syz1\x00', "acb44af3af55e2e42df1739c15969200fce3e2d26cb2a4b96a5f8775800a8520", "04cd1a166c980c9cfcf16968c7e63d1283b60ce975e7c007b1a9e44c7c6dd3ac", [{0x7, 0xda0, {0x3, 0xfffffffb}}, {0x8001, 0x1ff, {0x3, 0x80}}, {0x0, 0x1, {0x1, 0x8}}, {0x7, 0x4, {0x1, 0x400}}, {0x0, 0x6, {0x2, 0x40}}, {0x5, 0x7, {0x1}}, {0x8001, 0x2, {0x1, 0x4}}, {0x5, 0x7, {0x1, 0x80000000}}, {0x9, 0x5, {0x1, 0x80000000}}, {0x7, 0x1000, {0x1, 0xffffffbb}}, {0x6, 0x3, {0x3, 0x3ff}}, {0x81, 0xfffb, {0x1, 0x8}}, {0x7fff, 0x7, {0x3, 0x2}}, {0x8, 0x8, {0x2, 0x400}}, {0x70c7, 0x3ff, {0x0, 0x10001}}, {0x3, 0x5, {0x1, 0x6}}, {0x1, 0x2, {0x2, 0x400}}, {0x8, 0x1, {0x0, 0xe000000}}, {0x3, 0x62b, {0x0, 0x3}}, {0x3, 0x40, {0x0, 0x6}}, {0x80, 0x79e, {0x2, 0x1000}}, {0x6, 0x3, {0x1, 0x8}}, {0x200, 0x8, {0x2, 0x7fff}}, {0x1, 0xfffe, {0x1, 0xe0000000}}, {0x0, 0x1, {0x2, 0x6}}, {0x81, 0x7, {0x3, 0x3f}}, {0x7, 0x1, {0x1, 0x8001}}, {0x1, 0x4, {0x0, 0x3}}, {0x0, 0x800, {0x3, 0x4}}, {0x2, 0x2, {0x1, 0xbd}}, {0x7, 0x1, {0x0, 0x2}}, {0x51c, 0x400, {0x0, 0x5}}, {0x3, 0x6, {0x3, 0x4}}, {0x7, 0x7fff, {0x2, 0x2}}, {0x1, 0xb0, {0x3, 0x4}}, {0x9, 0x7, {0x1, 0x4}}, {0x0, 0x4, {0x1, 0xfff}}, {0x3, 0x5, {0x3}}, {0x4c5d, 0x5d6, {0x1, 0x6cd}}, {0xe65d, 0x7, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x8, 0x3, 0x5, 0x8, 0x25, 'syz0\x00', "67b82cb73d00ef3b8001dc355b2f52630d9e1dbc87c4c2c31755024e93b5cb69", "31da0435014762e9b4da26c01bfe323993c4935aea5f05983c04baa21686a81a", [{0x3fe, 0x6, {0x0, 0x1}}, {0x3, 0x0, {0x0, 0x9}}, {0x1, 0x4, {0x1, 0xbeb0}}, {0xfeff, 0xfff, {0x2, 0x6}}, {0x1000, 0x6, {0x1, 0x4}}, {0x400, 0x5, {0x3, 0xbcf}}, {0x3ff, 0x4, {0x2, 0x80000001}}, {0x5, 0x1ff, {0x2}}, {0xadf, 0xff01, {0x0, 0x45468af4}}, {0x9, 0x5, {0x1}}, {0x3b, 0x7fff, {0x0, 0x7}}, {0x400, 0x8, {0x2, 0xb48f}}, {0xff65, 0xf470, {0x1, 0x62f}}, {0x3ff, 0x5, {0x3, 0x1}}, {0xd2, 0x3}, {0x200, 0x20, {0x1}}, {0x80, 0x8, {0x3, 0x6}}, {0x6, 0x70, {0x2, 0x1f}}, {0x6, 0x401, {0x2, 0xfffffe01}}, {0x3, 0x5, {0x0, 0x7a6}}, {0x8, 0x100, {0x1, 0x4}}, {0x7ff, 0x81, {0x0, 0x2}}, {0x2, 0x4, {0x3, 0x7f}}, {0xff, 0x8, {0x0, 0x4}}, {0xa37, 0x1000, {0x0, 0xd1e}}, {0x7, 0x0, {0x0, 0xfffffffc}}, {0x5, 0x7, {0x0, 0x800}}, {0xff, 0x9, {0x2, 0x8}}, {0x200, 0x737, {0x1, 0x7fff}}, {0xf001, 0x7, {0x2, 0x3f}}, {0x0, 0xff, {0x3, 0xd84d}}, {0x81, 0x400, {0x0, 0x3ff}}, {0x5, 0x3, {0x2, 0x4}}, {0xdf16, 0x40, {0x3, 0x1}}, {0x7fff, 0x7, {0x0, 0xffffffe6}}, {0xffff, 0x40, {0x3, 0x7}}, {0x1, 0x7a26, {0x2, 0x7}}, {0x1f, 0x6, {0x3, 0x79a}}, {0x63, 0x0, {0x299a29a72a0a0eae, 0x7}}, {0x7, 0x9, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{}, 0x2, 0x80, 0x0, 0x9, 0x11, 'syz1\x00', "27a789270ff19c6035f3b09f55beb168940f5d49860a73a433e3a8badf40a1b0", "f9e93e2e2cd89eb264bd5d0271e09a1fac71e81b994f91aef3a04e9cd9134a7d", [{0x32, 0x4, {0x3, 0xff}}, {0x5, 0x200, {0x3, 0x4}}, {0x5, 0x20, {0x1, 0x800}}, {0x80, 0x400, {0x2, 0x3f}}, {0x80, 0x70c, {0x3, 0x1}}, {0x35c, 0x7, {0x0, 0x101}}, {0x6, 0x40, {0x2, 0x3}}, {0xcf, 0x2, {0x3, 0xbdf}}, {0xffff, 0x1, {0x1, 0x71c}}, {0x1, 0x8001, {0x1, 0x6}}, {0x6, 0x100, {0x0, 0x7ff}}, {0x0, 0x3, {0x3, 0x2}}, {0x1, 0x80, {0x2, 0x952}}, {0x7ff, 0x4, {0x3, 0xfffff801}}, {0x2, 0x9, {0x0, 0x6}}, {0x1000, 0x101, {0x3, 0x1}}, {0x4, 0x1ff}, {0x8001, 0x8001, {0x3, 0x80}}, {0xc1, 0x6, {0x2}}, {0xfff, 0x0, {0x3, 0x1}}, {0x12e4, 0x1, {0x2, 0xff}}, {0x4, 0x6, {0x1, 0x6}}, {0x2, 0x0, {0x1, 0x3}}, {0x6, 0x8001, {0x0, 0x20}}, {0x9, 0x100, {0x3, 0x5}}, {0x6, 0x800, {0x3, 0x7}}, {0x1f, 0x7, {0x1, 0x6}}, {0x2, 0x4, {0x2, 0x1}}, {0x2, 0x4, {0x1, 0x200}}, {0x9, 0xc2, {0x1, 0x101}}, {0x80, 0x0, {0x0, 0x100}}, {0x1ff, 0x2d8a, {0x2, 0xfff}}, {0x20, 0x5, {0x2, 0x9}}, {0xe3, 0x7, {0x0, 0x5}}, {0x7, 0x40ac, {0x1, 0x13}}, {0xdd7, 0x3f, {0x2, 0x2739}}, {0x0, 0xff, {0x0, 0x2}}, {0xffff, 0x8, {0x2, 0x4}}, {0xf1, 0xff7f, {0x3, 0x8000}}, {0x362, 0xaaf, {0x2, 0x7467}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0xa2, 0x3, 0x5, 0x3f, 0x15, 'syz0\x00', "9f45567fabccab66d16bab3a4c4c7c50306dcdec3116ce5ae3b6eb983d3be135", "1a1e9707b42b5505ed32510f0e56f908d875742b04110594b7a35fde4bb27a38", [{0x6, 0x8000, {0x1, 0xfa6}}, {0x2, 0x400, {0x2}}, {0x6, 0x1, {0x2, 0x7}}, {0x81, 0x21, {0x2, 0x18}}, {0x1, 0x0, {0x3, 0x7fff}}, {0x7, 0x8000, {0x0, 0x4}}, {0xaf41, 0x1, {0x1, 0x6}}, {0x81, 0x40}, {0x0, 0x9, {0x0, 0x2}}, {0x5, 0xee04, {0x1, 0x7fffffff}}, {0xf6, 0x100, {0x1, 0x9}}, {0x8001, 0x6, {0x0, 0x4b}}, {0xff81, 0x1, {0x1, 0x6}}, {0x2, 0x81, {0x2, 0x3}}, {0xfffa, 0x80, {0x0, 0x5}}, {0x2, 0xffff, {0x0, 0xffffffff}}, {0xff, 0x200, {0x1}}, {0x1, 0x8, {0x3, 0x7}}, {0x5, 0x2, {0x1, 0x10001}}, {0xf1, 0x5, {0x0, 0x6}}, {0x8, 0x9, {0x3, 0x1000}}, {0x6, 0x4, {0x0, 0xd3c}}, {0x9, 0x4, {0x3, 0x9}}, {0xd7f3, 0x2, {0x1, 0x8}}, {0x1, 0x7, {0x3, 0x9}}, {0x7, 0x0, {0x2, 0x7}}, {0xfcae, 0x8, {0x1, 0x1}}, {0xfff, 0x6, {0x0, 0x400}}, {0x5, 0x3f, {0x3, 0x4}}, {0x0, 0xfe97, {0x1, 0x5}}, {0x9, 0xc003, {0x2, 0x3}}, {0x2, 0xffff, {0x2, 0x1751a048}}, {0x40, 0x0, {0x2, 0x9}}, {0x2, 0x5, {0x0, 0x2}}, {0x9, 0x1ff, {0x1, 0x5}}, {0xfffe, 0xe9ea, {0x3, 0x7ff}}, {0x3, 0x2, {0x0, 0x2}}, {0x5, 0x100, {0x2, 0x6}}, {0x101, 0xffe0, {0x0, 0x6}}, {0x1, 0x9, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x2}, 0x0, 0x6, 0x3f, 0x1, 0xe, 'syz1\x00', "8e08cb1cdb2a82c729db9f2bd175a1feced35b4b64458f0b224a49a49589113b", "f6a58087dbe181edbbf315e3a9431a8eae48e7e4ca2e2199d68a1242eda45398", [{0x4, 0x800, {0x1}}, {0x9018, 0x6, {0x2, 0x8}}, {0x20, 0x0, {0x1, 0x5}}, {0x9, 0x2, {0x0, 0x29c}}, {0x80, 0x4, {0x3, 0x5}}, {0x4000, 0xd29, {0x1, 0x2}}, {0x9, 0x2, {0x1, 0x1}}, {0x9, 0xfff, {0x1}}, {0x4, 0x1fc, {0x3, 0xfffffff8}}, {0x800, 0x8, {0x3, 0x1}}, {0xfff, 0x81, {0x2, 0x6}}, {0x9, 0x4, {0x3, 0xf96e}}, {0x6, 0x0, {0x0, 0x2}}, {0x0, 0x8000, {0x0, 0x8000}}, {0x7000, 0x3ff, {0x0, 0x7}}, {0x6687, 0x7, {0x3, 0xfffffffd}}, {0xfff, 0x6, {0x2, 0x37d}}, {0x2, 0x101, {0x3}}, {0x7, 0xfffa, {0x3, 0x96}}, {0x100, 0x5, {0x3, 0x401}}, {0x80, 0x1, {0x0, 0x80}}, {0x0, 0x3, {0x3, 0x8}}, {0x4, 0x5, {0x2, 0x4}}, {0x100, 0x2, {0x2, 0x6}}, {0x7, 0x5a, {0x1, 0x8f}}, {0x7, 0x6, {0x3, 0x1}}, {0x20, 0x1, {0x3, 0xffffff76}}, {0x3ff, 0x3, {0x1}}, {0x81, 0x7, {0x1, 0x1}}, {0x5, 0x46, {0x0, 0x1}}, {0xab, 0x5, {0x1, 0x401}}, {0x400, 0xe5, {0x3}}, {0x9, 0x6, {0x2, 0x4}}, {0x20c, 0xffff, {0x1, 0x7f}}, {0x4, 0x1f, {0x2, 0x70ca}}, {0xfc, 0x4, {0x0, 0x3}}, {0x9, 0x0, {0x1, 0x8000}}, {0xbc, 0x9, {0x0, 0x446c}}, {0x400, 0x73, {0x0, 0x5}}, {0xfff9, 0xfc01, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x7f}, 0x9, 0xc4, 0x6, 0x5, 0x28, 'syz1\x00', "d884d79a7d8d532fe8cb1a976d1c29488d86be62713957dfa467762ff31f1a3d", "046231b285f3f3431db7f45ef20d1e91c5e42ccdadc896e87c13dbd8ca496ffa", [{0x2, 0xe129, {0x3, 0x1000}}, {0x3, 0x0, {0x2, 0xa3e}}, {0x1000, 0x0, {0x1}}, {0x8000, 0xffff, {0x2, 0x3}}, {0x9, 0x9, {0x2, 0xd395}}, {0x3, 0x3, {0x2, 0x101}}, {0x5d, 0x7, {0x3, 0x1f}}, {0xff, 0xbe66, {0x1, 0x2}}, {0x2, 0x81, {0x2, 0x8001}}, {0x2, 0x5, {0x3, 0x40}}, {0x5, 0x3e, {0x1, 0x800}}, {0x4, 0x400, {0x1, 0x9}}, {0x1, 0x1, {0x2, 0x173}}, {0x2980, 0x6, {0x2, 0x2}}, {0x7, 0x4, {0x1, 0x1}}, {0x24b, 0x101, {0x1, 0xffffffff}}, {0x0, 0x2, {0x2, 0x1}}, {0x4, 0x8, {0x2, 0x5}}, {0x4, 0x1000, {0x2, 0x8}}, {0x1ea, 0x8001, {0x2, 0x2}}, {0x9, 0x9, {0x0, 0x80000000}}, {0x7f, 0x3, {0x0, 0x7}}, {0x9, 0x1, {0x2, 0x1}}, {0x6, 0x8, {0x2, 0x80000000}}, {0x6, 0x0, {0x1, 0x6}}, {0x4, 0x5, {0x3, 0x3}}, {0x4, 0x400, {0x0, 0x1ff}}, {0x0, 0xffff, {0x3, 0x8}}, {0x0, 0x0, {0x3, 0x8}}, {0x1, 0x4, {0x0, 0x9}}, {0x8001, 0x9, {0x0, 0xfffffeff}}, {0x40, 0x7, {0x2, 0x10e}}, {0x6, 0x7, {0xf399011a7d97d3d6, 0x101}}, {0x6, 0x7, {0x2, 0x8468}}, {0x6, 0x2, {0x1, 0x4}}, {0xffff, 0x2, {0x2, 0x100}}, {0x5, 0x1, {0x0, 0x20}}, {0x6, 0x3, {0x3}}, {0x6, 0x100, {0x3, 0x9}}, {0x3, 0x1, {0x2, 0x7fffffff}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x800}, 0x8014) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x70, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x100}}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x9a8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x80}}, @NFQA_EXP={0x24, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7b3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3f}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xff}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bbb}}, 0xb8}}, 0x0) 14:53:41 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x89e3, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002400010000000000c30000"], 0x1c}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) listen(r1, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1546.746731][T11488] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1546.801189][T11488] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1546.848626][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000240001ff0300000200000000000000000600040000c30000"], 0x1c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x0, 0x8}) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x80000000, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0xd11}, 0x14}}, 0x4000880) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x17, 0x8}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048005}, 0x44041) [ 1546.901222][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1546.920484][T11508] device bond0 left promiscuous mode [ 1546.926030][T11508] device bond_slave_0 left promiscuous mode [ 1546.937843][T11508] device bond_slave_1 left promiscuous mode [ 1546.954262][T11508] device bond4 left promiscuous mode [ 1546.971825][T11508] device bridge7 left promiscuous mode [ 1546.989386][T11508] device bridge8 left promiscuous mode [ 1547.011635][T11508] bridge319: port 1(bond0) entered disabled state [ 1547.073748][T11508] bridge320: port 1(bond0) entered blocking state [ 1547.085897][T11508] bridge320: port 1(bond0) entered disabled state [ 1547.107501][T11508] device bond0 entered promiscuous mode [ 1547.122112][T11508] device bond_slave_0 entered promiscuous mode [ 1547.137046][T11508] device bond_slave_1 entered promiscuous mode [ 1547.153298][T11508] device bond4 entered promiscuous mode [ 1547.167714][T11508] device bridge7 entered promiscuous mode [ 1547.182597][T11508] device bridge8 entered promiscuous mode [ 1547.201467][T11508] bridge320: port 1(bond0) entered blocking state [ 1547.208094][T11508] bridge320: port 1(bond0) entered forwarding state [ 1547.241934][T11488] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ab07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1547.315449][T11478] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1547.348999][T11478] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1547.706768][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:53:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xe, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1547.898932][T11529] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ac07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:42 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', r6}) recvfrom$packet(r0, &(0x7f0000000080)=""/106, 0x6a, 0x100, &(0x7f0000000140)={0x11, 0x3, r7, 0x1, 0x94, 0x6, @broadcast}, 0x14) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e2b, 0xffffff38, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) listen(r8, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:42 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500052fd25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1548.024434][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1548.137847][T11546] device bond0 left promiscuous mode [ 1548.152611][T11546] device bond_slave_0 left promiscuous mode [ 1548.194468][T11546] device bond_slave_1 left promiscuous mode [ 1548.224573][T11546] device bond4 left promiscuous mode [ 1548.247143][T11546] device bridge7 left promiscuous mode [ 1548.277193][T11546] device bridge8 left promiscuous mode [ 1548.296226][T11546] bridge320: port 1(bond0) entered disabled state [ 1548.354885][T11546] bridge321: port 1(bond0) entered blocking state [ 1548.364508][T11546] bridge321: port 1(bond0) entered disabled state [ 1548.381299][T11546] device bond0 entered promiscuous mode [ 1548.387233][T11546] device bond_slave_0 entered promiscuous mode [ 1548.396236][T11546] device bond_slave_1 entered promiscuous mode [ 1548.404010][T11546] device bond4 entered promiscuous mode [ 1548.410666][T11546] device bridge7 entered promiscuous mode [ 1548.416897][T11546] device bridge8 entered promiscuous mode [ 1548.426470][T11546] bridge321: port 1(bond0) entered blocking state [ 1548.433109][T11546] bridge321: port 1(bond0) entered forwarding state [ 1548.445527][T11545] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x11}}}}}, 0x62) 14:53:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000024000100000000ff7f000000000000000600040000c30000"], 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0xa0, "54ba69dd8f518d0485e2f27a70402295e43f6e5db41f6baf3b62f54e711ef3ad682f381a17dd8058b8b9bce120150642facd1fec230eed8badd989e6441ffa5f48929973b77619abc6c89888ddb4b591e277139d44f93a53110d0b827a36a52380fa4993ce5ea304ff74729203ef2c84f6c641559461074716de4b20200119e6a0507412ecc874853ab848f9ff4ede1a646d5894a084393e00dc4b3750b2e95a"}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000640)={r0, 0x9, 0xfffffffffffff55e, 0x3f}) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000680)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) gettid() getuid() r5 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="97b7a415a1b40c10020018fdd18d24255053e728cf79d431fdee1315c06d1d195a689ca7674946c4e9af792b620bdcb6659e51501c7663caef449c043562f84646004abea1a9575e783802", @ANYRES64, @ANYRESDEC=r1, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYBLOB="5d97a00ceb682cdb90f4921bc5d6e1f2b5ab2cdffe397998c44973981870f349af73b88c331aff26710e15a55d0fe49812990f5536968715ae0f41dc4f6bf81033cb1fdd79593b78691d47895c35a4c28bd0be2d04f8bc84de3a5f3fcfa37f97e5a7ecdef9b9bd0b0b38fc35cbcfc284f4854142b527c1e7f34dce7c2cfef7337d410fa36087bce4f62996adc7d3293e35bdae6edcba3af7dcc7e6598652bf3470f5e1449a83ef567903eb9f0c339e7cec0aecd399feb88c46912dddeca4f1a8a810286dcc0f3981d0f915b34ed7c798f94c2ca212b9959ba0700cad86187f294fa3aebf212ee4b0e277d5bbb6e8a6"], 0x3c, 0x24000010}, 0x20040015) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, r5}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r4, 0x0, 0x0) splice(r6, 0x0, r3, 0x0, 0x400fffe, 0x0) bind$bt_sco(r3, &(0x7f0000000000), 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 14:53:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x10, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:43 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x1, 0x2, 0x1, 0x1, "01d3394865f8561ea5c31222a99b5306e6ffcd9f274fa339439686228b5fca836dd70a17d6fd7d635dc0dec885fdca550a3d454024208ad00df88f0c64c52c5e9aeebaf7eb8e"}, 0x56) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x3, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40845) 14:53:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ad07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1548.671524][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1548.775716][T11583] device bond0 left promiscuous mode [ 1548.783238][T11583] device bond_slave_0 left promiscuous mode [ 1548.812936][T11583] device bond_slave_1 left promiscuous mode [ 1548.853518][T11583] device bond4 left promiscuous mode [ 1548.874966][T11583] device bridge7 left promiscuous mode [ 1548.897309][T11583] device bridge8 left promiscuous mode [ 1548.915338][T11583] bridge321: port 1(bond0) entered disabled state 14:53:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) [ 1548.973191][T11583] bridge322: port 1(bond0) entered blocking state [ 1548.987428][T11583] bridge322: port 1(bond0) entered disabled state [ 1549.029098][T11583] device bond0 entered promiscuous mode [ 1549.049774][T11583] device bond_slave_0 entered promiscuous mode [ 1549.071957][T11583] device bond_slave_1 entered promiscuous mode [ 1549.096093][T11583] device bond4 entered promiscuous mode [ 1549.102217][T11583] device bridge7 entered promiscuous mode [ 1549.108471][T11583] device bridge8 entered promiscuous mode [ 1549.116556][T11583] bridge322: port 1(bond0) entered blocking state [ 1549.123209][T11583] bridge322: port 1(bond0) entered forwarding state 14:53:43 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000530d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200)='mptcp_pm\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x54, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000041}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) splice(r8, 0x0, r1, 0x0, 0x400fffe, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2a000300a2003e85ef80031ccd96aa3ecae5980f61e4", @ANYRES16=0x0, @ANYBLOB="090e2bbd7000fbdbdf250200000006000b000f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:53:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ae07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x48, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:44 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x4}, 0x10) listen(r0, 0x100000000000012) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @remote, 0xd4d}, 0x1c) r2 = socket$pptp(0x18, 0x1, 0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x400fffe, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000940)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f0000000140)=""/3, 0x3}, {&(0x7f00000003c0)=""/26, 0x1a}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/12, 0xc}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/106, 0x6a}, {&(0x7f00000007c0)=""/36, 0x24}], 0xa, &(0x7f00000008c0)=""/110, 0x6e}, 0x40000000) recvmsg$can_raw(r6, &(0x7f0000000dc0)={&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/70, 0x46}, {&(0x7f0000000b80)=""/61, 0x3d}, {&(0x7f0000000bc0)=""/16, 0x10}, {&(0x7f0000000c00)=""/6, 0x6}, {&(0x7f0000000c40)=""/10, 0xa}], 0x6, &(0x7f0000000d00)=""/138, 0x8a}, 0x40000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1550.053589][T11636] device bond0 left promiscuous mode [ 1550.059473][T11636] device bond_slave_0 left promiscuous mode [ 1550.071672][T11636] device bond_slave_1 left promiscuous mode [ 1550.087342][T11636] device bond4 left promiscuous mode [ 1550.098004][T11636] device bridge7 left promiscuous mode [ 1550.104549][T11636] device bridge8 left promiscuous mode [ 1550.114778][T11636] bridge322: port 1(bond0) entered disabled state [ 1550.156551][T11617] validate_nla: 9 callbacks suppressed [ 1550.156562][T11617] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1550.183671][T11636] bridge323: port 1(bond0) entered blocking state [ 1550.195741][T11636] bridge323: port 1(bond0) entered disabled state [ 1550.215900][T11636] device bond0 entered promiscuous mode [ 1550.222918][T11636] device bond_slave_0 entered promiscuous mode [ 1550.232622][T11636] device bond_slave_1 entered promiscuous mode [ 1550.243272][T11636] device bond4 entered promiscuous mode [ 1550.249951][T11636] device bridge7 entered promiscuous mode [ 1550.255985][T11636] device bridge8 entered promiscuous mode [ 1550.271235][ T28] audit: type=1800 audit(1596725624.693:403): pid=11623 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16017 res=0 [ 1550.272906][T11636] bridge323: port 1(bond0) entered blocking state [ 1550.296021][T11636] bridge323: port 1(bond0) entered forwarding state 14:53:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x44}}}}}, 0x62) 14:53:44 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = accept4(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x80, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830a00000016000a00", @ANYRES32], 0x4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5d2b921316774154}, 0x24000000) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:53:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600af07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4c, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1550.434593][T11659] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1550.481307][T11659] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b007000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xe808) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={r5, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r8, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r8, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r9 = accept$alg(r2, 0x0, 0x0) splice(r9, 0x0, r1, 0x0, 0x400fffe, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 14:53:45 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x800}) 14:53:45 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000531d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:45 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) r3 = accept4$bt_l2cap(r0, &(0x7f00000039c0)={0x1f, 0x0, @fixed}, &(0x7f0000005580)=0xe, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000055c0)=0xffff, &(0x7f0000005600)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmmsg$inet(r4, &(0x7f0000005400)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="d25a719048faba5ce8", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="1b45476fab13b533f95ecc380ee6918f382736e017f9691221a9eb64cc2c51e725a2c48642a4927067ab10c119c7232546d6d59222dae963a49c35a954b14171c2a214d5702abb66ac8b0b086a79325216c554c80cc5bca3eb62e9841cdadfb7d2533a4b4649e8675cc310a5a338069f70680d62e4c29f0ec2413b3fdea5ba2278c3", 0x82}, {&(0x7f00000001c0)="e8f1eca53719731e9b2fc3032f8efe57d8273c7c41ca1e94c55163c6a8312fa69a7d0ab07b7386825849e24fb008ae432c5133a7e25d6dfc1540ad4636c9504bbf16cb2d3559d4c3d6bf90b795b3ef786db42571f721ded047c6fdff1fe9cf4e0ca5", 0x62}, {&(0x7f0000000380)="352c600dfa7b459ef6102c7788b36a76b83dddcd55ba91bd047bf1699d16816e62418a0f97c235c91d10fd9990454d5fcb892f6c3f89f0dbb55a8e4be29bbda2278c32ba7528381ef10f4b52ea2044701e67b7b9213920d155fc5d37c478031b55542d0656a39370dbfa8fe76aa862e057b24f235396e44725598abe2cb82bddd69ed454fb64115a6c4226824b42790a99763929d0bb71ea3341ad218f0a4c6f31c0f5c3c7b318d98c8d6c1be381b327afc7366fe40260c6e90140c376640007702f4e967d12f10470183608da3276d764cc208cc3681322b714ee1fa3093d5c4c6dc40f19d8e9b02055085498bfac867f27307f1f94025d91116e61207de9133131be228e3701a176e5f9961001184f279ea2230b718245115b0784fb4e9577892ce3290862158cbf44052bca991bf81ab4aed1388f916e29066ab508264b97723fecd86d211392ce13977e9d232ce9f91bef1bacae9c79f6a140f59cefc7ab674a8c67c3f39492619ef61793adef0ca45fb51f8971e8dae0860e441a63062e196698e0b38bbd1b283d53f3d04d621642a3ca263c2007d6e0aee7b9f2b3ee89cbb23d5d4f1791477d551b968534a78119857236348a562daefcb728828f0cbf2f194069c2fbc7b58ef6c7fc6761c6e98b8d0a2d4e50652c4fb7611e6f36f5877c0704262b33d020859bd78e2e654b799b2b127f32929c6047833efa413ef7c5fa9ec25f4323c3915be8e9959d9cbfb431c6f70f8554df32d11d7f77a1c17d8cd5a9f7eb065b228af3558859b8a231f2e5854224d64f98dedc0b031bf6f8cf74cddd8a6e62f024455da2731eda7a1e6d754286b3d66d40fc611d203cde214162155a28e996f24c93892219c8a8066580e84418e22255b1980e5307942e151c524e2e6e4de1be3a05ebde1f9e8967c2d2b848d3d76aa3677375b789358f8ef08aa3755e3f4e743ef8e62b00d1d936230cf1836c5e9670e8e743da8de00e8850fcd6478cc8d9c8fa31273de322d0e47064717e3d93ffa742ed0f18b4f3b5933f9d875fe105915faad16f7639ad61e8408efdb631d5e29c1e046133bc66987ad57c3991eeda324a6b28edb49e217bf465a68c300ea761a3e9ad929bac5ffa9ea330e47f5c75227758504b072559a91898e158f536ba53197ed99fe2752b62f5ff7d60a9945cfcc0ffb934e5609cdba27f4e9cfe5daa02654db656cb03939cc48d4f9e336514ead80eb6e15bb3303ef6706801b77e345b18375eef90a614173d7defadcc6d204437e171dc137fd22e490e3706fd00a7dd722c640b559328c5d5fe3411a42141f87d3535870d352659bc77eaa593900aeeebed359a26209dc1a1e28a567deb2f522a034a853af2208dfe95f45c8c66163ac2a3dab73582fe85d71389cb0a5ef01fbcc26b2a620c854118aa814152861d2699368b80562f2b604f720c413b1381ec74e39b5a7dca419a40fcee02abc7236488771a25a5dc20b188b394c0cd9ad0a2285978a45a9814c0c1872ebdeeacabc687a4a707ac2695909f9f14e85d1c61ee243903747670a391ad6e9aa97328c6ee9920473d72e0a1dad36879ec5f5da0cdc5f6a99f3f61a0305b78bf159643ea69c90bdfd461d254f1bb824612f8a3848f7da32bb377ea5fb748306374eff04470dd16be7ce02f76cafdbedb14906b639702b88a067e746da2e34274779857f7ae387a9752a74914489a1e8d45cd7d26fd3a7f7757b3efc9a32721cbcf6e5f0d8403c2119e8cce2035a950e423cbd947d475c78eb9d7d40c6548a9cbd19ee1c89386303822b3979b1432a24df6a091d49265911cb681280961845b638fae9aaaf1d55b2775e75dd9caea3dd2368f74a1ec5fba9f5809c8ad0521ec2512fd609978e5166891594d4ea7005f0f8e9ff43e0b7059131e405a877ed12d9ccb1a32fefe0c289b3731dd091e662aa82c974d5a115ac10efcdb945c953f79f5aafb06be44b67389454b9e5b3ed48b5c3e720c6562c11956e7f9ba7c6d899cdb3c48b2f79e0d56420d29a34c54b6c6900c094bed0570974aa4dc7d0b194a4c5ad9713a6ec8e5b80e55091211312f33e1a8dcad42d0bcef5cf306d7880bb9031f45c302d83f34986e08fec806062116ce973c8fa44566759f251d5ffd6943e156e12372b7ba01d9d3e44cff99e1647dbb6ff2dfda46c9bcb74558daf0588b1d47e087ab7fc07f9a2b42d71ee9ab430fb2e07addecd5f51fe0616708ebd75fdf995f9ca5ae638f3971d5da074d8418aab82f71ed7f563b5040ca9ddf8f665182a06114bd1ad841fcd96a4d6bbbd6f0dd6fd8df9b1f72e2a78318017277491a552c54f3bbb1e38974e7b4d9fc46e449d439c244cba8e79d2f17e3dd605f1cc603494aeb1ed2ed066920030d8f4b1b0c9e853858aaa01bd711cbb97ecc34fac3516f0334d03a8626b7d4bd847d58de81c339b937120834be8f574db7aa436ca9ee4978ebc7160bdb9cc3bdc55bc9438dff1617e8489255e2604ce5f25d7f4f36848bbe888000825b25f18055932afb271ff5e74d870ab9728bdf5258baa17d23d8f453c7ea8e13c0600f5e8f6c238b761962155dada8ba3ff7f1df32a0c210cc0ede21408862f09806be6d30883e952743026538e479232b1ef348a9e66c962ee37c56113a8106867373f46239f3c1099f7841f3e94f7f695eb35a9257cd4032536d1d728a8df4cd091d6a75da3c6286ed8bbbc895a7109d28cdf07c860168d16fe73723dd448dfd06c070312c085f7bd691e93e2a2a43461a87605e940d1c48a96aa06b57a8ac447348fc9687ea9b246c7d07508fe2944834b3af52e0139858766d34bff656bea748d4a3ec12e817f8062dbc84512ad7243283bd7841c853e0683b5ecae0e6a0ac246d75883fb23515c791950975867019a6cacdfd61ac744782f96721bb4ff07181e1e86469ecd1b10580d10009ba4b031c5315361877dc8e965e261835ecdd52adffefa738a7e4269ba61ab1e5cdc965372cdbcc2df281767e2426d8ef9f7bfcfe023f4843c8d013e9536e36ec804ac23db9cbcf53917fde507f00ec73aacf1a95a18a797b02114fe434e7fb5f5f8214ae6a857360b19b41204c286076f8374a0ffda7f8ca0b1912899f5824a3347fde3ed05d4fc0935ae21c37a6a659026b3f2084d5cc196bfdfab881493c8ac98a54c78b496e0ed005f051c070c202736b0930e98dac99c55d6c9239b20068def4eebe2bb2044b2faf1a425019da563f31414535904cc35cd4f266a194096bfcbeb177deeb42bd39768684cac56544fcac27ed644f4b55402e38803b307a29ef0e7fc9ce9892a7d696c0fa7d6c99161596e7c6da1971ff5b05dca5ae476eaa8bce3d9f93f14d2787de68b15a2e9bb16729ef57b8826ff7281aa16c6572ade3a91207dc505bf9e9c0eba9083c1b59c50041abd19c4838f3de08984166dcad942de9c60b75d32b3b8bcf202d05756f5e4ff789d21b9a0db1f6d9df4485850cda9a23553d58a68e64603afd8ee0b093a6a9baf25133339643829cf95a5d2b90f6d96ccaf27b162d9a599d5167d5f3d4ca7f979472320123ab7057f27c0d88056a131094d6206614ad0196cc53c95c8f44f5dbfaae2f5dde0cabab85ac2b8f430499854bc9a693255ae0a57d5c060cebb1184031fa7375732c585ee2038c1b5547d844e1db9db7305fed98a4a6b4fb27d0e89656546dbaab7bbecf9cedb701bec3ee3ac86b83525b39533c6e18037928544a37f3ab141c31ff5d9da5fa4664a4212180d0b924b5e31c6c6f9c9ad3872dfdd31b93e9c4b5c5e6ba72f12ada3d251310035efee7d260b0cf6d9ef7677e129a718097c6fb1d0cd31fb26bc648b65a3d27b52fb6aee8c7ff326c57046b5d75ab569721587da0ea5635742351fd169d13f16bf8ac1d038628c261ec785b4a9e3ac6f3026b7cf4912faba981864ed152334c9346fef7a562d547b2773fa46efffea15e20917e18301fc7131f6caceeffc3c3d41aca0b7f1d72678dc8bd53d2e94670d8a6d09f72ad9058da5effa64296b53c6c08bc44e283433249b0a3744e1ec8b3e275ca694a50f5bc5a2ade58b46305c4d65582067106db2bd911ec069257fdf4307ffefbd015b80e45a20fac0de42412fcafd29757d96b76e42170c0aca8a0cd496e3508700b234aa4f0d8cb4eb11c0b53e46182575c9c7c7a6c6e9673533aaaf8c9381758d1bcb5ac124d3fd5299d68af1f2ab7494493b18863c5f5e468c167170ce7381de0f01ad4d8bd7618411ebd5e7372b47789ab42df7c606d56db9d559c3d94f455f665305ba2535508decb248cff773fa82f1dffcbd687fbbe2fa22bd6666198055758ae26f7fdc4b1499a21f79c78380c7d9159c5a2ff1d3f94a87eb6254efda2c3a00e60e825e8e3c9c3b33bca21e6cc0c072da94133f27a0c154dd0de3bbe688ef49b25c6bd2c7ab832d947b995317df7518c89aef43ae7f959e1be8485dfe57eb286b0853d7c4a97f18340f92591212af55d8ba2a81c97bffc6443f723470a8432ca58e8ae8c15f481e5af250cec38cff8bcef4aa5d3f21e9ab362a7521c2ed31b6c1868236f5537427472634d8a739225f924c416c6672a74d55c5a3446e949a1305782aa2999058a4137d0319d1c3a4c60b66fac45a3161439504738277a5d441d3309579d926aeca0b39a25665505c6d3cf530ad267a2504bbb52fb954b7b4fcf6a921f3e55fc56585b8d144a60058ac4062a625b3a5d9f3143501a192263b3067d17a016ba5385147762425284ca8601fbd9436f861e8fb7b6a7471578fcb8b0af2f900445ae59a993cfd6e1203dd5a712646b2b2c795a91f9d937ae629cbf65acf55ae239abbc2dfc899005fd57e6404e6ed810669108c9291099983fb182d0bc8a48ebb34dfb696d003c06cb4eb67b7afc5cfcaadda7635a798e563d2e8c52e6cda25a36f8e37109e5adc42309fef47e056fb6c7522c72f4705f1ea02ba06a9b337023ab8b3c71842ff18b2054bf8552c74257d139d3d4b06cd9a1a83f84f0508e3bfaf6c022671eb2c9908316d9bf89a1a0caf1cd14e46aebb27d3812bb73e51c93dffb050b006be60a44d9df2dd7332f8703a616636e6442c6322a511f5e9cc4a07b9c581bfda4b50491a3cda59383de84f6f257a822510b579849e9fbe1a44e2f4c4e52431cb62ee6f04596fc8387372b4f34e8d9300ff568db3879ecfc9e10291c75c69b512d7211442cf3f68508ac129a77e22a72534a8733c89d6546287456bcd9294443944af766a546df2c12ef7dc3f7c99acc48a9bfa494c0e9db423828d7b5ddb7ef1df0aa0b4e8fba1500db078a538fd9a2f68ec49343d590af7abb82b94db8d56c6c1a02804996892c0c444f08e3a8f08068a876fb0f521e186d0053584b521f83f9bc591271a1fc743bf6612d189073840e71cff7639f83f227ad11f50234428647b77526105d0bdf37fce3fa0970da685a9f2cf48d7b0f845ade58210931589a3e96e0e26c76b1d5cd48094491b0926c45dcdc7fefe7ead99cda7b1661def85bbc7672ad9d10bcca35ae2096ef9f9dff6eb2c3326c94656616a675804b8a4034bd243fc9e0c23ef326006b637a14f7dea1488c34a8e0fa749ca9c2ccedfcf6a1d5969d0cfd4e9f61206ce4dddb68e0faeadc6070635df78f5ca2f4c37151722d9c1e8ae0e26a67fc40ad645451106eb0c8559f0ca80ef5660b5bbd413610bcd52c8693c1eb2916df1d52cbe84a5582ff7d06b34132cc6645b7552f0355df115e81a4ae424ac6ce9814cafdfe35f3b679fc88139640fdf3e241de5098", 0x1000}], 0x3, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}], 0x20}}, {{&(0x7f0000001380)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001700)=[{&(0x7f00000013c0)="672440df83c11fa475aa0ea5df7fd93ef7cadfaa9d839333f60c4829cb00b85fe46c948b4c11c085ab26e3cf982b05eaa77042949573a469a011f310e412c9d7f9e48556390d1b596eb88ca30779168c74dda9fda3daaa65358abf4896ec0f5f170bf3a5a1509184a419d59eca0eba76e10b1f3914d1995fc4ea41cfe1019d778527ee7a15e1f5c0e2bf77a24e9a2fef2ffd20b865543eb1e904b2f0201d1dc123b53ac80e41a60dde0b0ef7c1c93eaf28aa9d9c09cb65386326ae68bf739fed0c0eee6d3e55f4d96930587a0585eb", 0xcf}, {&(0x7f00000014c0)="a9307cd3fe73bab6f7e0757f3ba6e261eb5801398d61ed3115f460a0707f9be2751d54e37cc94de72cad8cf25ccd15a85632aa0fac35298aac9145164ccf194bce99db907b1f269b8bab18354917a12afc29035a01867f8e965e975ee93bff335ac58b40c08b2fbae48b6d6e62a0263b70b7b9dcb35e9500bfcbd14e6ffa5a12d3025ee68dc6257a534c73340d640e1351da8b38faafeb5d76145055b728e32bc9ac0f5fb3cf3e5b5e6f4ef4cb6c1a4c1f59f0407e2eb5504373c5f46a559087b59632f144ea9a", 0xc7}, {&(0x7f00000015c0)="35199f2407d6c34604207d228f0fd9784ff77716fb7d82a4a0a0179196779b57612e44b1681b6918d4e130e6083ac9fde0f2f2e768d4b2ac5360e9dace5c5d937c54a324", 0x44}, {&(0x7f0000001640)="6d3ee685dd3dd1899d5741fcadfdd40e2f65fa614d2bdfb7c8959c0472387e5d7158c2dc59923a9c1daae5ba08774027cb5bac8ae221057ee092cb58783b97be287a77bec0bafecaf192b492518503cd4feca4a429074325a3e44e4e0bf406182a282448f36f9046c5a58abc5e9f473c1b00abaa678c5eaf1d36f01ed71e9bf157c47d8b0371341f33cb4d73052feebe", 0x90}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="c1528e98f4f4003ed6796ffe127faf9be470409b54d6369877f15a4ba32eb4a06478583ca86c919f16a46b69559b046c3dc6836ad8d982aaf6d86a2100d7a3895f12986e95b95f26ce5c24e5b7a86bfb7c8cc576ddbdb3eb64e1b876d3e30063549893d66ade7e", 0x67}, {&(0x7f00000027c0)='Hm\x00n', 0x4}, {&(0x7f0000002800)="f399713d1fae98f7c503f70df00ffeab5383478614f3d636805ce3ba9d672d83edc08074eb6cdbac85987bfd95aa63fa3986fa356512d462114577e8b119359be3017c6be57a9ad9afd79cbe0d1ef41a2f5f7caae4a5d5801ab966543c76fab7624467945b354878e9b36107351ef6c1864706a29f35cf3c41bdd9846c0c8d0adba48ff5db4f6ee7ce096168198e4f09b2e473f76593997ae172e938398a8166dabdb001dc246f17960fe6e6eff83ad5ea856bfd606c66836cbd5139fbc26e73512a2250c9cb26fbd0f65447b57ccfb4b41213d7c0f6520553a22fd2a9206e425bf2d64c25abb29de7eb42ed449ac138e4b23d5363db80c5433f50720de959ea00c0bbb1e6c889379e68c3bcdc184aba7503f77065e39389cb3a04791b24e1d432f70ed56c027a6b4d65b00496977806b021018991f84d05136e7168391945daa5dd52d14c472e80a31c7d9b4d9599effc81495d9654725cc0a7c0f71662904dc5d315cbdef18b3f773958de9427f8b67602be0fb60d1405f4f78e30021f78d4f3fcb7288fca2eb4d1d656a55322ac9063ec6b5aefd47c225d28378cb8686a05caa9f060c97cb95b64c9d94eb1deb1230f5d0d9ad55b86f14821cf1b1edef9ce6d4a1f91cfbe7e5dd1742084a231c112012007e9ed493318a98ad09a1a896c982ea211525c1c97a3166c85753311e1c1d0f4e7cb4c63812b0ce6fdc19ddf7f32787f061389fb5371208fe37e26ad4ed2433c68274285de2ea308be5ec14956103de0dbd1f210d96cf3ec3adb1da484f36ca18cc83592d1d78f321c586f921405cb26ffbe3c7c5d2ebd894154699c6edd6e7c48314f9be332c9101cec90e97c8c886ebf680c2e4b375fb7b5b106140de4d00c5a29bfb5280b9b5bf3f646c1abe677f776aa7b91b9999d6ff523db661ab15bed321d3b642d3ffa49be07be88be8f91df5851d489ae2bfafae644abad8299644653d5069ffcd415ca1d15c4ab95136876f268d01dd370a4a928043a15a07f1673ecbfc79efbbf1babf88d902f3c9cb79115e2385c3001210af2ea296a921f7da29a76e6f596791500a5bfffb577bb7f81f5c3efbc7b183bf3cdecb9d7b569b8e47d677fef7fbf2e71c9de4194209ffd658c31f26881af24f74f73db90fd0a2250b79bc744152d0e23bfe4fb8ce6dfe642eeb274e730b9c2d22061f231caf8b70879629abd41a16e0dfc4e3ec3876e9d292d2ff9d8d3819b8ccdf905daa3f19080de244c9fb717716331d0d6e8e840dbdfe2c62c392075704c5f898dbfc75b07788007a2c996cc070fd82e3d2041bf8faebf7e6469e4d05b78e40b9d5878bb11db3defa647e56ed3bbf1fca63bfa486d7a1231c691de740d6ea8b23dbd620c152686a875e423c86733da2b24b2ea937bcd9c7c8af553cc9672504bb03cbf9f8923eb04b7b47f8d295997aa52936f5cc86d0263f3a051fa42ef4f569db0d986198c1ccb1e76adc3390b0febcbb2a622b4d7754c26fe4d51334ff56b1002a722bf044f7a7a25802a39f59269fd47292cac33a314b85fe82c9a9498f3f5dc4db7d4cd0e3a15f5133d9fc093bd4072634377be1c035eed2f6131518c22fc8c95caab05506fb5d80676895aeb8e425bebe1d16c52d035260bab04ac3e4e755bdc55e268a81859fe11b0a88da4cf1ca2c593820637bd8300f75356496441cbabfeaf3bd8df0e19479caee1786475f519e50029d044491ef27e4526896df811b41fcb54c7a4d1e6ee9d7ad00064ef73e8a3d9038cd002392f7ec0385d56b6913e644581aeead7e0b7344d1554790ed46ecc517fe275bf8e65e07a880f9d4258d52cd4a31c430903f07467c46005130233c441fd0bf5ede9f2e6526d620f49016b31bc96a1973ceb22bd68fc2cdc869a4c9f5fb3d4e787d7aa27a2352ce0bbd38f67a6ce47aa89094ed9fd2d3f5397a86d98cd39c991fdf7910e4f316cad4d94f6db1b27f4269cf2dead5dd3fa30cdb71c2b9230373743d837882b6ed9cdc61e40650d32890819154b5319cec3913adb5c3bc397d11a1cff89b7d482c8ee9700e69a7c9bfc69d17ac5a166615298a20552199cd86907d9e7ecc9373aae726950980b758108f590e9d609f0a8575a43e1faf5faab378ed00b07640ec62f8af2ae3b44ab52849373cbd0fc86cf108c94d6d2fef4f4402c4f41c58890c6fa6017664c2add2cbdd11b0674d4b3357a0c447e531d994eb64e099be16581d56d1242d16540da6884b46bd20cbb4e85478d34fcebfead89321d21313fef54da4d778cc35aec29839ed99e3c563850fbcdd7324e43eb3014d1aa9d295b491ced7c96f14882f4b2595595b074a454485a405878ff3a198ff39d414d9a4030e1acc86541d05f3fea977fb2b1695861c2210042ca0e486c1241d59dc079fd77edad67b7861729130f91a60c301213c6579416852f096429113bb8ffc8bfa927d2b8ed75942e9a1dc4a229d8bdb2ee635391263cb4c43b79dde2d3d82ab6f4810d9de7a6cf9fbd4fd862534fe7cf1db80d9b6bffa69573cfc6b289421773c32452cf3352583fd58139ccd34f4697dd7369092a7056314c4d54ad7106ef0d85b9fa3da3731ef99e1e7261f28835f8385c35823a5c862b743e44663986ed9a50ccf3abdcfe1f726131805b740afed8668d05a9545b4cfb8fab6b0cf85e68041cd1c06098102f087b178f4c57daad8e9ec20e7cf29099250dc3f1bd4f437ea35af6c2ab6a8a59e331f7af308ada2d6f58a82c0d894f008e70bff3bf7e06895c90fb97ee01bc165a75ee3a59eb5fa70f52fba42c01fe60f3aff64dd922a403c12063f7c442631a26e57f51066254f2a76c07facce8bb2db15a2d4dfcd96db1f43a1ad12c5fed5bf52a49ac66eaeced75090e50d12e22812bda81e7a97d704f7086f13bd58a02008d2ff06ac21c5bbddc142985a568d657ab58715aa2d4ad36336015ae187b94c0ee3cc1ce5ca302f0c51776625197e75418ee98caaaefc3943c5d4623650c2d0bc26f1f91c9faac51be97d79c033870d4f1705526c188c34cc461f653000a6bc298256dd829de1465dcd8cf063b6ddc8e82261565469a61758ff31f977b8f3561fe65e82c7571ba158a5ea97b0a389e8745e2df80e24eab0c6c5eac827a8515125a7a994391991d42e094e1f664c5340b5945a5030b03898903586fe821c3f347e2e76150a26ed318a71669be381cba63553f7473ee48afef32d74eb4c3322a8b8df145c4ccaf8bd60955fd3bd26e2afba4623c8b8204aa66ebedf7bcb788b439aa3fe9128db5ad826337de86515bba0b64b7412c23c2e51a6603e7e1731bfd05f2c81d13847b91602596b3a6d4553058fc681aa4a134cdb8e44724134af766861268c7fb1df9d692b1f46ae28e65b3c27f9135d11b0b112014e3e9a7d05690afaa73aa22f910ce5a2938cbff7e70609c0ee5791b492fcd22ea96d20caaae8bd52ca1987658cecf59aeec29a1d2d81560d53daa4f65fc5f556657515457085811e977633bf5ed4c8472fa6356d7d5d110a206e6a53bf001215eb155418f74f53c8671d5f25ae6b11727c566ecdab15c1855a6d91f9fe6ed76739ed91429c3769e954cefa5fdc9761f47da045b3d1232b8fb4de40542d339e76605edeb3d8f858471939c9576e1acb9b9e69223bdb6e9a8e9a08cc23431b96fa3c62ea2c9b576e1f0e408488e77b48c876efeb4ca2e49ae5f1f151aedf12c859b3f68df06c2b025824514808e8e2243c2f297f6426c789260934f70798e494719a32f406d906541f16ffcf8ed76c8ee353e688f0fa6ae3b081bcd4df6a74702bb3ee6e37b12314ed9d0b3d5be4b1f933961f823a49102a4c4c56b42661b620cb7f4108eaeffe4d8d0f5ce7349124d1eec3df4558cc8dd49823e9d24c3b83911e5684d636042986a350fde0f845055ddf92eb890ae6c0378629cd71b8dbb5c410a475de27b10125b7e3dd24f9159fb78d51c1ae34dc74bbc8175cdd1f3a9d5e37ef45d7ee152258d339590759e5f15197c47fb51b1729adfca1796a899006baf1228ceb3e7b1fdcb904bf02f30074960860d8567be8319cc206557f7903e66e764d622c1e7f5b9d69fa5e3e2c978c736db987b3a4e30bd5488bfd1968539f40d31b9ae4f7ef7a523d149a5dd262610ac7ef72a819c289cc9f8329b1fbad2912ff21c20dcab0caca003262f52c888076c986ee5bb38ab6b2db7f374550a8c0404db5e75421b0a17150c8bc1893c3dae140122d79ef361c1636905c6ea7e5b326101d6e4c4ac1d7787bd2c61973592136249b068cbd4c0dfa750af2a283f51724074cb3b623f3a422f19fb132fea5c150a2e33e82fbb9170e798298c374bf1ae62d0267172eba5d93433e4b0c2be402d47dde24a3454b362c793193bcb66a08074cbd2898ac6a7af2150a00af08f4a1793757914a96544ca5271696a90161e7ebdff5f21ae2b3522ae180f0a55c1065daec1683160d41aadb52384aa26b5035f2e3bc883b9c9d3b52fe72554477831f3adf4c4dd6c05689f8ec35e0bda0edf96b473ad99f33712098cad017a2a966f5f199df0d1eb0af4bb0cbf19411c43f50ea2ac014eeb7de8d1ee73cb7403e32ccfc7f77354b7af949d77a95cfc3a178584c7b83162442f58a2b2d365feb460464967a06a65f46b5a5880a38b79573f7c94cea12f94e3de050eb9780484e9745fe5aba16cefe0f341df06f5843e794b4c69ccff3ec2962ea06941dc679cd54999109ba0c47cfd3ac9ef5b73d109747bf85213b02b46aa77ed1d98d67129bf1cbb7e7aa3836238f6c91f12bd27bb97aceb8c22dad35c8fba779f489043b9fcea129653d919426f7677f1a424e6e1fefe96e9dca21fe713b2f9a7e04ab3fa4986cb1cdb75371a352b64b380467ecded48e3e105d6c378c51d033330d9b48e3ce258401cc1f814587750de2af205f90b68fd56c3efc0b2b8e0c4cb5bb1a3fb0b940b2ce93b273c9c1c3b3d59ad4462fa3cd83a0180a5c2d3ae54b76fc14e392361283202bee3b2fe6ccc229be56f84b987f2763c84c046110118fb5ba6d2dd42df47e92d3d87ebcc8f4932c6aded598e757864c10916af0aea0b57eb92b60d7ab6f9616aeed6ddb6f8f004d246a3511b317cfb11718589281bb150ac88d4683e068f5b9bc419f71a6a57946d47019a69118efbf245dfe6a17239f9380dd057a5f4c1f5ba56c30218212b5f38711c7b05ee9874667a4a8b2e144fab2488d4a9a03f2cdec7beed543bc615c03afa857f60e90740e8adffc2e0dcda850420516e5d386076567feb6cdd09e756a5994444a45a61153f7be3a6408d9afff739fc5aba12c5ac182c212087d28d79efdf5ccab00ef43968b2bee10570d26a257e018cdb2b30862ec55e12c73b4ee37acdcd294703f7dca5af58d7ea117558d09c5f991b28e60b132c56ab5106bc24ba75e7ef2138ede9962e8b7268b56037a69221f03cbb45405b345ecd5e9e888200488ff024003bc01a9c511a0c0e9ba2d7384558b2627ae49b7bd779f5827332f438022ca7bb9b5efccb58fdd52079100d71ccea0ec8f73a9d5f34bfdae3523feebd4c4aa2f25d8ef4f8195931b88a6c3c9f0ef2c59efe34152af648c5f704ab1ff59248259891408ff20498cb28e4ae97ac24449c1b6781e36b1037b8aafcec422cdbe81a48c4825129db7a2654a830e6e953412eb6f1b4ee58bd521cb77f3e23dd1bfb5850fca14e381334d3807a6ec4a3d9a5507c2ad0af9fcdf40c6a2352b1a44ceed4be0c365cf13d2330ca6e7ebd2f5c090ba044139e9dc4b04f3aef9f4bd5956b01", 0x1000}, {&(0x7f0000003800)="fad4df0f8b16d117d55e70f2842c64d725be6a278fa4f3bae4eaf41b2d15f646c101f6317cb355f7434f81b3524d323d7efd4f4f86d931368746bcfedfa4d8b7695bc2e87a0d7dcfd8c715450ceea5c99b83b6258c1e5340bdfacb5b5f872db844b30e3eaae53a3ed2a4cbc6019b54c87dcbd5cf5221bc5db3dff02923419910a59ab41e637748b033f35ed04fb4f32d05a8e91f0323bd51f699478d562a1759c6c352b2aaf2a334fa13", 0xaa}, {&(0x7f00000038c0)="dc3e7fd9142cf39c51b3e1a202645830c72b572e39e4ec666c63a4c7f787bb3b852fc3603c8c4ffbe941b5684a23398e57bc127eae61aed1e7ef28720212a926343563b5475e1b2c18201418027300646db6838e8144043ee93ae7d94730507dc7c597d61cf466e21890c1f7312821007965cc8ae39f7098610e1939e577cf475e9b250c1f13be6cca97d0c51078c9b64929d7edd7d43961fc3101d3e7e0d827c5b0ebe3bf0614ee37313844c0b6367dfad83cf826f61fdaed55f9d2dfeb0717a4c788eda2816ddd32673a866195f0c73c5c6e64cee5e2deeec49395", 0xdc}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)="348c7c14a9a1d6a93ce9361f068ceb13f0f85ea6be3f7c33cac3c28355564d65b4b9fa832c", 0x25}], 0x8}}, {{&(0x7f0000003ac0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000003c80)=[{&(0x7f0000003b00)="26bdef80b0f52af62efb40822581a9e36b17829a5940ac53ccc5beb665d45878df97d8628d8fbf55f6d8a07e8fe61a58cdd432544eea2df2ebb7878c90c2856fd54807fd6b43a1b75521a5dc4cd360bcbd285dc4f44389a0796914cfe950c8e75c875464d0d7799d2b49146c58d8acdbbcb3c0bd86d44c8e5494f8174a434489db4854ff211a8469fa5cc875b1872374509c7dd76953e2f1a670abbfc3ce922ac04f0797b4b23a62e2d1fd", 0xab}, {&(0x7f0000003bc0)="85c3cda839e4c7fb191d0deb8889e4d4fd20322aab890714e73df97adb6bb41e6cbb0f244cda52f7174763558f8f4e648fb71fa68203fe7b2cf532b4ae74af8332dd93bcf1c58e1de3dd8305a967", 0x4e}, {&(0x7f0000003c40)="12d13a0436bd0d5ec1c802e7fd4dc1c07f688471cf71d9186b8f3ea0da3744e5212c1b4b76f82a906147faca66", 0x2d}], 0x3, &(0x7f0000003cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x4, [{@broadcast, 0x2}, {@multicast1, 0x2f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @noop, @end, @lsrr={0x83, 0xf, 0xc0, [@local, @rand_addr=0x64010102, @rand_addr=0x1ef]}, @end, @lsrr={0x83, 0x1b, 0x4f, [@loopback, @local, @private=0xa010101, @loopback, @rand_addr=0x64010102, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x108}}, {{&(0x7f0000003e00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000005240)=[{&(0x7f0000003e40)="77b833f7a89da241c7b703efbc02d1cb3166d167b23fed7f68ed11f833bb2a1eddf84f394e966353c6e958ea42ba35f826cd6eadd56acf5d20328c8fd0b0963588a4", 0x42}, {&(0x7f0000003ec0)="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", 0x1000}, {&(0x7f0000004ec0)="aec00e4823f129f45112bd497b977566d18d9ff5e9ddd7e9c63e6078617a5fdef8720d101bc85637e9feead6c385cac9939704ea628dfb1474ea61352637baaf3972d6faaae2249aa969d55625c1ecb0e64f969425d38157d22086f7e7cc1e46bf3cc38708", 0x65}, {&(0x7f0000004f40)="99bdfc53223a93f8a8ac394ff315e0f24f0c6038fdc6df7c2bc53b3be2cf1f17a9bdb5a1d15ad9d356bacd063675de", 0x2f}, {&(0x7f0000004f80)="6d6db85b475bee13ea143bbf90be62fd18f448fb02933084c6f70610a02a414cb82ec0e187cfeae2137b595cbdd3f0e1a31392f35b0124e170c36b3c7b4ffdd4d94081dde310292003f1612ebaa1d937485fde3af2256f48e602dc2a98cf2eb7f49152b915ba9596a6a699b42cfc3ba02e91d3345f2750ff7d6d0720ebfc2eaec81dd29f3a66e6c4da70c720ab77aa195d5b97d0ef101780f59e6bf79cb1ccd855dafc5322b84d89d75278133dd3935a2961577a8016a4ebdc", 0xb9}, {&(0x7f0000005040)="06e395e8e9384fc26023dfcf3975b10ef17d9b6e8936a05dad47d585e56d03fadabaa1f301dc67a343e29c9f39fff335d6e9854e9eaa334d84317e9d678b43e4c3c132f66afcee59606fd0c236ebd7079c775e757baed01d2ccd0b994b778968895f95e76e8af69aa445de33a4a87482ec960551047498df9dbcd1291893551d3eab870def7a8ec29bdcf43d8765cb3dcd455c90250a7ca6884010cb6235eb1afb2c5e3c3330b5ddd34506fba547ad2b1cc6166111cde9c1ca1087bf247302801d95e6", 0xc3}, {&(0x7f0000005140)="98e1dd03c8d7374ae37bd8060290e5fe84959bfd8f9530be10b0951cc980f2589472be74a507aee0d5d70075102e2c3fc9c657bfac7bdff87d3c594b4190e7250e5fe02ed7b333ff7343b757f6523164d0c42932b17fc5225389f7b8bbfbe6ebb1ff3ba5bae29500365a32c4b88cc9c461316dd679a08a9c8cef494bd3e783c4e1edfdbda45598126d687f6d2b084c90bddb0a46be66575cbf595e6e97e56c627bef64ec09cf2053e8ae97231c923b90c48a924df2178298bd55743ba36589023b775bc8820d65fb637434e7693daec1d46796f197c243bedaaa4693ffc9fede66c3027654fae09ef5", 0xe9}], 0x7, &(0x7f00000052c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x54, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, @broadcast]}, @rr={0x7, 0xf, 0xbc, [@remote, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1]}, @timestamp={0x44, 0x28, 0x16, 0x0, 0x4, [0x80000001, 0xfffffe3a, 0x2, 0x1, 0xffffffff, 0x1ff, 0x3f, 0x7, 0x8]}, @ssrr={0x89, 0x27, 0x4b, [@rand_addr=0x64010102, @broadcast, @broadcast, @empty, @broadcast, @private=0xa010102, @broadcast, @rand_addr=0x64010100, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x70, 0x3, 0x7, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@empty, 0x9}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa286}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}], 0x110}}], 0x6, 0xc000000) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1550.886917][T11689] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1551.006704][T11672] device bond0 left promiscuous mode [ 1551.015759][T11672] device bond_slave_0 left promiscuous mode [ 1551.034072][T11672] device bond_slave_1 left promiscuous mode [ 1551.047125][T11672] device bond4 left promiscuous mode [ 1551.055073][T11672] device bridge7 left promiscuous mode [ 1551.067429][T11672] device bridge8 left promiscuous mode [ 1551.075781][T11672] bridge323: port 1(bond0) entered disabled state [ 1551.133304][T11672] bridge324: port 1(bond0) entered blocking state [ 1551.146687][T11672] bridge324: port 1(bond0) entered disabled state [ 1551.164933][T11672] device bond0 entered promiscuous mode [ 1551.173888][T11672] device bond_slave_0 entered promiscuous mode [ 1551.186568][T11672] device bond_slave_1 entered promiscuous mode [ 1551.196963][T11672] device bond4 entered promiscuous mode [ 1551.208173][T11672] device bridge7 entered promiscuous mode [ 1551.216647][T11672] device bridge8 entered promiscuous mode [ 1551.228289][T11672] bridge324: port 1(bond0) entered blocking state [ 1551.234833][T11672] bridge324: port 1(bond0) entered forwarding state [ 1551.247034][T11676] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x60, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0xffffffffffffffff}, 0x2}}, 0xb8}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1551.551838][T11676] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1551.657772][T11689] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1551.668296][T11689] __nla_validate_parse: 9 callbacks suppressed [ 1551.668476][T11689] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000000c0)={0x23, "218d0830a1d98f75cad3f30989dfa360b907347db2c7366a429039591fbdf483ae96d78543e5cecfc64bb7442529355aefd5976569f4c0fdab8189b0690f754e3a614440aa80fb970f5b7f56c8a0359555a8673e654a7f4cfeec9e20bc683da142568ce3d5a08e248e7f70c433af3acb837e356f5a734ff998970cb6487bed65"}) [ 1551.782682][ T28] audit: type=1800 audit(1596725626.203:404): pid=11694 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16017 res=0 [ 1551.948827][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1552.013678][T11726] device bond0 left promiscuous mode [ 1552.019287][T11726] device bond_slave_0 left promiscuous mode [ 1552.039343][T11726] device bond_slave_1 left promiscuous mode [ 1552.045914][T11726] device bond4 left promiscuous mode [ 1552.058005][T11726] device bridge7 left promiscuous mode [ 1552.067784][T11726] device bridge8 left promiscuous mode [ 1552.086391][T11726] bridge324: port 1(bond0) entered disabled state [ 1552.132111][T11726] bridge325: port 1(bond0) entered blocking state [ 1552.139094][T11726] bridge325: port 1(bond0) entered disabled state [ 1552.146947][T11726] device bond0 entered promiscuous mode [ 1552.155246][T11726] device bond_slave_0 entered promiscuous mode [ 1552.162707][T11726] device bond_slave_1 entered promiscuous mode [ 1552.169385][T11726] device bond4 entered promiscuous mode [ 1552.175018][T11726] device bridge7 entered promiscuous mode [ 1552.182618][T11726] device bridge8 entered promiscuous mode [ 1552.190170][T11726] bridge325: port 1(bond0) entered blocking state [ 1552.196605][T11726] bridge325: port 1(bond0) entered forwarding state 14:53:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x58}}}}}, 0x62) 14:53:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900c270fd7079a6c001000000000000000000ff020000000000000000000000000001e07a471e9442000001000000000000000000000000000000000000000002000000000000002487e30c17ec9a4f550d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) 14:53:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b107000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:46 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) socketpair(0x26, 0x1, 0x534c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0xf, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044014}, 0x20000400) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0xe00, 0xf000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=r4, @ANYBLOB="bd1568c43460e8e714c8c377d1129ce8276a983a2a26acdec30489f33003441821279903ffe9cf599245f139322c211613acbc131e5cee2bd1fc2caed5740112b3c996cc8ead03f3c6fa853d40aa9516f580fd687ab76a26800bc3ee790cc68e607ddb8f527a174995b2cc35516aad4d201056f98f8fe5a8f2bb54f964f937e931e3e148fa62633d0ee9fd7361b72f7d0baaa2d628f0a1a93ae0d237a956635ead4aa02c980757070034877523", @ANYRESOCT, @ANYBLOB="b8c94d9651da7c8c73278136d38181b83c7d071dc23e6dc8f24d2b9bddb6634dfd5b77d805cca25be6b0c71b4e69", @ANYRESOCT=r5], 0x3af4701e) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x2}, 0x4) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r7, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r8 = accept$unix(r1, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) accept4$unix(r8, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x80000) 14:53:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x68, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:46 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000532d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1552.293957][T11749] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1552.349966][T11758] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00', r7}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r5, 0x0, 0x0) splice(r8, 0x0, r4, 0x0, 0x400fffe, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000040)=0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000080)=@flushsa={0x1cc, 0x1c, 0x400, 0x70bd25, 0x25dfdbfd, {0x32}, [@policy={0xac, 0x7, {{@in6=@private2, @in=@private=0xfffffffe, 0x4e21, 0xffc0, 0x4e24, 0x5, 0xa, 0x0, 0x80, 0x9c1bd79390e20791, r3, r9}, {0x5, 0x100, 0x15c, 0x3, 0x401, 0x5, 0x0, 0x2}, {0x1, 0x7f, 0x7, 0x2f}, 0x20, 0x6e6bb5, 0x2, 0x1, 0x2}}, @algo_crypt={0xfc, 0x2, {{'xchacha12-generic\x00'}, 0x5a0, "3a6562c476d241d4de1fa3e875356eae9c73e5b49e9653b2c6e4ba5219ef54e112efc85d30b94d42d61b9bea7bd7ebb4b6e5580681cb138b00c6845ee9cdcbb7f4a786838f8bb754eb20eb7b4c56c5740ad5ad6a5595b7a3f1d0191aedd610ea675cca7cd5bc34110a83e70e75ced209c7ee68cad4165e797f9b29368218a3ef97134e531c0d6a3ea0c37b5daf5196ab479516a50a88dba3ac6321baa49313bcef66f4cd579566bfaec038c84324651e22044681"}}, @extra_flags={0x8, 0x18, 0x80000001}, @tfcpad={0x8, 0x16, 0xffffffff}]}, 0x1cc}}, 0x0) [ 1552.398568][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1552.427104][T11759] device bond0 left promiscuous mode [ 1552.434769][T11759] device bond_slave_0 left promiscuous mode [ 1552.441609][T11759] device bond_slave_1 left promiscuous mode [ 1552.468180][T11759] device bond4 left promiscuous mode [ 1552.481784][T11759] device bridge7 left promiscuous mode [ 1552.491330][T11759] device bridge8 left promiscuous mode [ 1552.504600][T11759] bridge325: port 1(bond0) entered disabled state [ 1552.527629][T11770] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1552.538412][T11770] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1552.562588][T11759] bridge326: port 1(bond0) entered blocking state [ 1552.569888][T11759] bridge326: port 1(bond0) entered disabled state [ 1552.588564][T11759] device bond0 entered promiscuous mode [ 1552.596231][T11759] device bond_slave_0 entered promiscuous mode [ 1552.603900][T11759] device bond_slave_1 entered promiscuous mode [ 1552.611986][T11759] device bond4 entered promiscuous mode [ 1552.617750][T11759] device bridge7 entered promiscuous mode [ 1552.625495][T11759] device bridge8 entered promiscuous mode [ 1552.634218][T11759] bridge326: port 1(bond0) entered blocking state [ 1552.640800][T11759] bridge326: port 1(bond0) entered forwarding state 14:53:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r2 = accept(r1, &(0x7f0000001480)=@caif=@util, &(0x7f0000001500)=0x80) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000001700)={0x1134, 0x12, 0x800, 0x70bd2a, 0x25dfdbfd, {0x2c, 0x1f, 0x2, 0x4, {0x4e20, 0x4e23, [0xfffffff8, 0xffffffff, 0x3], [0xff, 0x9, 0x1, 0x6], r6, [0x6, 0xf99f]}, 0x2, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "1724b491b23aefd1c98d387b4fb69cef650258bd9a342b005c97074593108ec214799cd6130281cf33cedaeb354109e9ce853cdaf8a90daaf6841045b66ac336e172dadcfb887f4ef4ed1ce72f6b0be0a9af57a665e3ac41662823b9bfb97ec3e268418290979b16e9d00a284c8fe3ec021f4ab88b965edf9adfa00cdb790f7699dd65a5f431f36757049435bc65c09528a94a2111f86f715e71bac5de2a5ae5ab334398d40c95ab78aee37011597604ef9a1f5940916283cbc4437949bff0da94e55253134e47ab70ca56656f6d365621f21f361547db25d8857b6941892bf7f656eb259589eda679d88ef5e9d099a7613b12e4806ed2d9f128df0bb41e241fd9ebcf67711ea5b4fa727ca0e2eb709d4cddae5d3dc57531da538e6c4b9a8f31f6e5475255c7eaa28cf0e5171dc1d895c2b76babfa54cd6cf4215fff0f96e4b0fd817beca11988f320b3e3fb00969e1e29d27653e19b564db149905dc9d82514e62e15bf01869fcae6749df4d43e3a7819a9857a1d4cd3184485b2db7ee78fac5740b0ff05744714004db457c5fddaa94837066ed4bd5d310000d92574343ddfc0e83706fe0f988bf52f28ad67c74080590a717f07bc1aedf055f4ccb133edcd576c693c452449d8c6f4684630e1a1f9a72a7f94d9b1a07d408dbc001fcb762e38776942a2a21abbf76158486fddade0d8d0b72a36dd312fe6670576812b1afc8cdea2fa814e5923a89e5749edbaba51f5c309788ff0bc6d607d49b0b8b6dabe261668f1bcad3c9cce5beaf5afc386214a191f83ee623e607c112c6a4f5c2bace736ee77ca236121d3e8dfa784ed23f4e971d45fc634fdadd4549b65dc638cb643de64288dd06d1fdbe9c5e01465c88a173eebaff42d86fb61edb9300563014ff2b57f997d9e1b06e61e71e71c87d05d32931aa9a8131f3d9910936bc28834bc1b221402f7540b521f1ce709907f14e68e178e9ceaab50ffb419e9e767e68b22e89b8d0217a3d204bdfa7d415b9520efeda225f5d3a403e4b7660143bf3f573ad70ccf74c6cd18f781d5c27965df619ed882987b3b1114782db1273772cac258141c698c37cc89a9decad717d0f82f0a97ac38e38be4d225e8eb18a008dd944e3747171cc7d69c2c37b7e2b81def0cfbb0454c7d3898d314224ac42c7fdbbb7d78363fb50ddb08b7380a07153ae9048de7fa1b6ee69dfd534ab3f394c6a80dfcdfb9d9457d6be8f72051f47e514d00d994f13ba2ee030247726955107aa396be6f5e914177decf13ec4605d7f1def8c3075e607aee4a0a0f28451e807e0138cddfae80bcc231063ff07c0c930161a75e8f9275f59d4ea1bc9bb07ab1e1b694fb15a3d6902389753773510ebe26a25fa4cc6e15aa4eeabb17896fd6fc28eb42772f9da22b691ab804326cbec6419ae9a072dd7ba33123fe18f75bfa37ada2be21860f88978ad39d0aa8555f8ffeb24a1b63859c704851b979ffd296894bbdc6877700e87d07d4bd981951314982a9d73b78b7dcf1cd6753ddb9f3b70183931e44721a88ee1f5353ca767a9234092cbc944d2f6175933e0bef1e3e81894055e6906b8af49dbd3fc0a5f1a1fce14e80fa02c0e932683639d849756a01ad352b0b26effce3f84f2aa0d1a25d5f05d401c5e1d88fe17fa3b63e4c2518b155341c8ae0faf5d52b9e4f6bddf808eda26ea1f6223fb30d47f1bfdfdb938ce2e8f68e18ea3cf3ba03c60a6e7da561908f16a940ab3a0052cbbda985d6242d81132127f152594c08924869f1a135fa57f284f849750b4a474b3f88585214c5d7814e765604c386e073f83d751d35df648bb7c1894c3815ac7242dbd25123923dc77589d533b6f087b3131b5576747d14f21f6badb3299df5bc210bb974fe1a95f189dae3ae48482ba3bee65fd5b27c6c1ce0e532f6c60b95c30034cb807c9db104fecb85d0b0b7bb98421ce8e9b9f6565182705f7d3ca36d7f818f64a9900a4204bee2cf314ad705fa3fd3660f0057231e9d4126bc6c3c791c90223fc21b678adee18f7f3d171744ee5bac6d77562c2eec3f39a971da1563bbc89ba2b590ec9cb44b7b9ed6db18f98bb2d9b7002c880b3336f767acdc7895a807c852e1e7fb710b32ad68af09cb41caa98cbc721d2a0472f119ebf8b0bac6f6dc537919e7537bd6f4bcc628238c07097c45c749cf2158d9e2f5d4e596397b7dc29afa11cdaf9146414bbd9eef0fa5cffcb71246a231506369d52da2a1cc9ad69dcf32dfe64a793cde61e3dd51ccc85fd6da0febe0bce0d68b727a558cc4ec5dc6bcff5730acb31abf9e06b8064fa220969e3e74d6dc2cb0b748e7e8564c2704eafb95e7bc507fa20f48f7d77e252175543e287efac253c5ad951e47e827c8d36193b01f03b759a6b2bb8699d6f42b996fe4edb53cad9b930b9e24cc6d798dd72d669b8cb6d8b66f4125c914fbceb220fb894094578ccdea34457e5ebf0e8130c48a222c6a2d35405e411e57a8c070e5d3a799f43f4601460cf88f403feb4be580e8d9e18bce7f398f7bf9e6ee86e6644548307121d5f6e977ebde05dc30d3f8c95b215bd5b10a4f67fae010d9513c41883017a0725d3ea7f081f7f79e42da6379828e37732445728b5b2787eeaa5ee3408f7068da3e3dfd3427d7ef28981707e72f2c24b0b83d2f4de2763ddc6c38e49a3cda343795386adc48eb3ecdb3c2e5fb69f0620614a4a2398d7b9ed9dd003b1f3f720a64d0439f0ebdfb217473e142800db326988fb4dc9f9144668f14cb87b9c168639b70d4398ce4b24da56cb72bcd3b656a53eeb2995f906ed5832911cff3154f55830d2a38dfa1a206b8694e34b05f33d19e9a918ccc0376c836c508c0032a9a22848d4cd38285fd8a9321dc01071269b55bc925e3d58b36a75883d9a691ee5f2f0ebabbbf7239edd4fb5142afffe8fdc15ebd89416416c1ba1ed6bb86d2815b4de3e1e54047cfa7bc886ffa440ada11fe9be4687155583100c2e00d83f036f4ac617896368b7754d742b5a03b36b9a958bb551431bafb50fa7c2fa2934daf78fc450991202421c70d7757eafa7e954ea8e4c8db79b699e7db4e7383bf9d0daf939457780d77672f1d6a73b49e0a511f5954de0c2201f19a4ced3cd2b81d90f994e379663f4e1ae7d02b7b719243b818980f4f8b93d8929db99d488c4eca0caf3b46809f6ae24779c421ab2efccb89fd0ba603af3981d679202bd9dea273d8de2d94f25f3e22ea4b5ff0fe986a53b44a9edadd34fe8e091fd47fbebb4ce5f5c8a663f75c3181fa58a420e55b060c2d7a1608c529fce43c4de9a3ae723d39407d544e2ba8be86e27481c89f068011f4aec67b1921448265264f7df954cdeba4cf51459d2a756ae49871eb0ec58d6bc918807be1b126b2855d425d2819e683672bca2eb23e8c1d98012d2b4f286cef6f0b4eae4f59f81b0532a15eb399722a9535c006236fccfbad90861d28d6fc412c4422b7d9c903699fee1ec7c856f42d7bb9f99792dc4149d8e1c2e50444bae74ab4a94c21a8b321c558c33c63600cce1eec4f2e47ba67dcc4d06a6c5f2d88b8bb6eb650ea22d9f75ee552a222e64d3c3d9362dceaa2bdf77cf8ed940c1c5fb026ff76bd48cfffcf6651db73bc85512bbb17e50fae17c0e34156c54137ea89874a5f1b951690bbc1f0cfdccd32b54e1c5c83fd2332fe099e87430652f1e3229d6c111befdfb774c1fdabab46d15f09abac173253c7eca4ca80f0ba7159fa5be055592a1a6b810001a18cf1f4c5b4567bcbf9263a36a0245fa05a5994a0d819cf80288988b8f3a3a3de521f03e7d5faed4abcee30938fa0c8c2c2ba1059f7a34d3c94d0a56e94c5242dae53662aacc63236d8a69b4e10557bbe7731d368048daed6d4754facc4963c9ad35df28798926a6046f9b3dd42cdd4e9d2cf1a275ddea11dc6d1170ac17000c39f1fdeef1eca96674e020dc8f89a40277b50c557c0f19f5b96e840e80ca3af91c9e52a67c539efa9bae3f023871e19b7377c57e44ec909435427359b41f05280faf40dce86b4953786a59c348073023ab5f188fb2e81d819682900d36b7fe017a86edf319456fa7b99a50e4e1eda5e0c5d9ca9df3bb2bdf64bf10f88c67badea5470792ca6df50a8fbbd22769c02fa5945acd750ccc184f6e201ec64338560ad89fd0806dd115a4cd577b531767a8518601bbf0968e6ef9b10380851d81106ee123fb36426e3471c8dda6ecfe4ffaabd9e9a612bb818904ab653874c74c2dad800d45aed4e87f4d9a102288e39e12f3ec7fead1bf3870175aff4480cd65ed2078a3183b3998774d6ddccf487d6bc1e9049bd47b4ec5ff6da8a05dcd6cc61392f4543191c4bee6c59552e7a1d2a567b9154aee96e22ac84a353070499d7a9e3717a74dfb7f11de8f693826fef021db423eb67533b563e7004edd690be0e78d1e88d57136e496abf6c7b4413a39162fcd8053d7bfb90447dfaf257eddd4eee40b0e8d0582f30666ed5dc5a9f2648a9bd04af96a863b52d29afc491d3b2325ef3ca3612df8c9ee91e07f40533ea6dd10ca3b3dceeeb297b7d6b68c4576ca5387830c3a7ec1f12139206ce64fff5f6a391f7a98399aec00738a147a745f0d0e5a036ae9360168233e38971f08a2870d4633532957532071e071d632aba1b31dcc0815ecae58315e1d2bd64df88d8ad9e2094c19b8a7b57e7c409a7833b894cfaeacce4b0e7f37b1f95cf812554ec2b4720b06119ab1da9f9c440cfa4db3eb467f04eee473682008c0dca9d06e44766ac93b640949b3c95923aaec8aa8c306002e15342c9577205eda5be07fb9e88594ea04c3852aed460e9c65654bc2d1f4640f4c5bd2fa4413480ee38dde27a75fb67a5782c3fb5a6f93aaac2fc11f6e1179b2ab7f8bd652e184b65af5560c653253599a8bbbe0e0d0e77028630f5d99f6a4ee9b512920d824224f61711761375460445d5cd6c8627d2d009ddf7ddecc671a38de66822af3f8d11af345e691ee2f2cb3fe5e285e32dd7072ac58a5d55bdaed181ec323a9c5243616add95185b3196b7f4209c1dd34e69057de2f66c3160eab48d32d375ffb15e9f0352e316532088f7b7886745dca00c0b6a4c230972c9af06202085bb06faa49ed36643f733151fe3a5b84d9b6229090102bdbfe613bba539b31ee7c34835c40a69187bbc3262ed7e932b108a7e43d2fcc830c4e3d16aea937ee58f516ffac2cc421b84cfda5876c2d24974a79dc7edb824413fe17c521fdfd91fec0bf6a6c4e1313e456b00f8ffcbbf151f4cf8bb6c884f5385e51fd4ccf61d26ffce2d5878cde37ecb44986a026626eef28e8e9ec7bf1ee96eff54616387b42da5259cb78e40a5e538970435702ea83c7d1086656db7c173c5321c5141e59576f8c2128216f50e1ecbbd48c38fbb7535c82126c5cdc1cdd2a1ec8501690ee8b8c8893de661fc0b4b47f66227037bac37b66d23bfb896404bfa29062306292d661bc75b5fd3ef94dc3dad31e29d123b52b5fbed0e18abbb3690fe1365f1df640382331e780bdbbf669c47bec159c6cd75b9723ea01c8913109bb7457f5dd74b78dbf87ef96368cc495518d0fdb10a44dfff3a6e19f4870d12c0600e8ebf6611c091aa2a9e53fb83c1482429e2feb29519b487488c39fe90f9e8d29b60fbe01f02df76befda91246574e246e78236c435679aea28d413f23383bf964deabf72ce41d97cfc21fb5f7fbcce9754fc909ffe06c5bcc95f23903a1f72e791bd19ae6a0fae23e9eb0d26616d48b854286da8d503407cf20f9197c3f13a55db211787088c7d6"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "48b561cc05aee3b5244fb00fb66bda032934bcd3cb9162145966acb1d068ca9fb4180cf8ee450f10ecfef43366feb51f39926ae0b41eff6e8d524d316f8289504fec30a91ce60001215681887d88beb6d3cea8a875e7f8a1eab8249d3f1fdbf626eed7ce761560b2bdb7988a05cdb4ef52c7e17f03d22bca9b063412b7c7ed510af4752e71651f5e5cf4d433a055b842a75bdfce1cb1d07dddfdbc0c96a2160cb61b3589df8f0c2f8d5dba90fa71420b3a1f8e590ca152d3a7e8a9655a845ba7081551daa17d40a08cbb5ebd7b43f737dd483b942ea228ecec6301907723"}]}, 0x1134}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x4004) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001580)=0x0) sendmsg$nl_xfrm(r2, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)=@polexpire={0xc0, 0x1b, 0x100, 0x70bd2b, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, [], 0x2c}, @in=@private=0xa010102, 0x4e21, 0x6, 0x4e23, 0x9, 0xa, 0x20, 0xb0, 0x33, r9, r10}, {0x1f, 0x7, 0x3c, 0xe, 0x8280, 0x2, 0x0, 0x4da8}, {0x4, 0x8, 0x2, 0x9}, 0x3, 0x6e6bb9, 0x2, 0x1, 0x1, 0x3}, 0x2}}, 0xc0}, 0x1, 0x0, 0x0, 0x802}, 0x44000) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005931962800"/112], 0xb8}}, 0x0) [ 1552.931241][T11749] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6c, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b207000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1553.039745][T11765] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x71}}}}}, 0x62) [ 1553.155880][ T28] audit: type=1800 audit(1596725627.574:405): pid=11775 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16052 res=0 14:53:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4}, 0x14}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'gre0\x00', r8, 0x20, 0x7, 0x0, 0x7ff, {{0x25, 0x4, 0x2, 0x1c, 0x94, 0x67, 0x0, 0x68, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0x2, [0x9, 0x10000, 0x7, 0x6, 0x52, 0x0]}, @timestamp_addr={0x44, 0x3c, 0xd7, 0x1, 0x0, [{@broadcast, 0x1000}, {@loopback, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x400}, {@broadcast}, {@empty, 0x7fffffff}, {@multicast1, 0x101}, {@multicast1, 0xffff}]}, @lsrr={0x83, 0x17, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0x14, [@multicast2, @private=0xa010102]}, @generic={0x86, 0x5, "dc0dc8"}]}}}}}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0xfff}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x71}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4dd}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) [ 1553.234081][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1553.311729][T11808] device bond0 left promiscuous mode [ 1553.317998][T11808] device bond_slave_0 left promiscuous mode [ 1553.330278][T11808] device bond_slave_1 left promiscuous mode [ 1553.345532][T11808] device bond4 left promiscuous mode [ 1553.358077][T11808] device bridge7 left promiscuous mode [ 1553.372034][T11808] device bridge8 left promiscuous mode [ 1553.385139][T11808] bridge326: port 1(bond0) entered disabled state [ 1553.432750][T11808] bridge327: port 1(bond0) entered blocking state [ 1553.461782][T11808] bridge327: port 1(bond0) entered disabled state [ 1553.477557][T11808] device bond0 entered promiscuous mode [ 1553.484078][T11808] device bond_slave_0 entered promiscuous mode [ 1553.492689][T11808] device bond_slave_1 entered promiscuous mode [ 1553.499563][T11808] device bond4 entered promiscuous mode [ 1553.505203][T11808] device bridge7 entered promiscuous mode [ 1553.511186][T11808] device bridge8 entered promiscuous mode [ 1553.519510][T11808] bridge327: port 1(bond0) entered blocking state [ 1553.525980][T11808] bridge327: port 1(bond0) entered forwarding state [ 1553.547634][T11807] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:48 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x32, 0x1, [], [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x8}]}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0xe00, 0xf000) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0xe00, 0xf000) write$binfmt_script(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2, @ANYRESDEC=r5, @ANYBLOB="bd1568c43460e8e714c8c377d1129ce8276a983a2a26acdec30489f33003441821279903ffe9cf599245f139322c211613acbc131e5cee2bd1fc2caed5740112b3c996cc8ead03f3c6fa853d40aa9516f580fd687ab76a26800bc3ee790cc68e607ddb8f527a174995b2cc35516aad4d201056f98f8fe5a8f2bb54f964f937e931e3e148fa62633d0ee9fd7361b72f7d0baaa2d628f0a1a93ae0d237a956635ead4aa02c980757070034877523", @ANYRESOCT=r3, @ANYBLOB="b8c94d9651da7c8c73278136d38181b83c7d071dc23e6dc8f24d2b9bddb6634dfd5b77d805cca25be6b0c71b4e69", @ANYRESOCT=r6], 0x3af4701e) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:48 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000533d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x74, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1554.041323][T11807] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1554.078698][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}}}, 0xb8}}, 0x0) [ 1554.139757][T11841] device bond0 left promiscuous mode [ 1554.147762][T11841] device bond_slave_0 left promiscuous mode [ 1554.174430][T11841] device bond_slave_1 left promiscuous mode [ 1554.190476][T11841] device bond4 left promiscuous mode [ 1554.203619][T11841] device bridge7 left promiscuous mode [ 1554.217645][T11841] device bridge8 left promiscuous mode [ 1554.231647][T11841] bridge327: port 1(bond0) entered disabled state 14:53:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) getpeername$ax25(r4, &(0x7f0000000180)={{0x3, @bcast}, [@null, @netrom, @default, @bcast, @remote, @bcast, @default, @netrom]}, &(0x7f0000000000)=0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 1554.292635][T11841] bridge328: port 1(bond0) entered blocking state [ 1554.313715][T11841] bridge328: port 1(bond0) entered disabled state [ 1554.342232][T11841] device bond0 entered promiscuous mode [ 1554.353133][T11841] device bond_slave_0 entered promiscuous mode [ 1554.364117][T11841] device bond_slave_1 entered promiscuous mode [ 1554.382449][T11841] device bond4 entered promiscuous mode 14:53:48 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@mcast2, @private1, @empty, 0xfff, 0x7ff, 0x101, 0x100, 0x2, 0x3000000, r3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100000000ff0200000000000900000000000000000000000001e0c448010000000000000000000000000000000000000000020000e0a776c7e8f9f7761be558d2468eef82eba2d495da6b36958d368fc962433c614a4f856dceba8391630557204fd4e26d20a52c95eb9c3d837499571e59bebc520000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={'ipvlan0\x00', 0x4, 0x1}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) splice(r7, 0x0, r5, 0x0, 0x400fffe, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x97, "c98ce43e8cd2c1a92c726aabadd4c541049d983126265af82bc86ed1455d3ee668dfc92e0c2a63f55a1a11107bc9e6d5a69a29ca59fb41f75e1c8291aabe0d0596af99484d4d6426b3e57d056888f9580c7676716d8c7f1d1ec404ed29785d6028a8c25048268f5a874ae2192f328dab070afcdfd583d226742b7459a69464db21778fd604b77f7b29ede62fdd34021d557a949d6b6771"}, &(0x7f0000000000)=0x9f) 14:53:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7a, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1554.388271][T11841] device bridge7 entered promiscuous mode [ 1554.402905][T11841] device bridge8 entered promiscuous mode [ 1554.421403][T11841] bridge328: port 1(bond0) entered blocking state [ 1554.427926][T11841] bridge328: port 1(bond0) entered forwarding state 14:53:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b307000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x300}}}}}, 0x62) [ 1554.519099][ T28] audit: type=1800 audit(1596725628.944:406): pid=11840 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15794 res=0 14:53:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8, 0x10}, 0xc) [ 1554.617693][T11860] device bond0 left promiscuous mode [ 1554.632423][T11860] device bond_slave_0 left promiscuous mode [ 1554.643285][T11860] device bond_slave_1 left promiscuous mode [ 1554.657737][T11860] device bond4 left promiscuous mode [ 1554.671248][T11860] device bridge7 left promiscuous mode [ 1554.683363][T11860] device bridge8 left promiscuous mode [ 1554.697580][T11860] bridge328: port 1(bond0) entered disabled state [ 1554.763233][T11860] bridge329: port 1(bond0) entered blocking state [ 1554.784294][T11860] bridge329: port 1(bond0) entered disabled state [ 1554.810966][ T28] audit: type=1800 audit(1596725629.234:407): pid=11875 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=15956 res=0 [ 1554.819759][T11860] device bond0 entered promiscuous mode [ 1554.843381][T11860] device bond_slave_0 entered promiscuous mode [ 1554.856574][T11860] device bond_slave_1 entered promiscuous mode [ 1554.869399][T11860] device bond4 entered promiscuous mode [ 1554.875317][T11860] device bridge7 entered promiscuous mode [ 1554.883261][T11860] device bridge8 entered promiscuous mode [ 1554.892542][T11860] bridge329: port 1(bond0) entered blocking state [ 1554.899098][T11860] bridge329: port 1(bond0) entered forwarding state 14:53:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b407000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:49 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000534d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:49 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x9, {{0xa, 0x4e21, 0x33c7d2fb, @dev={0xfe, 0x80, [], 0x2d}, 0x3ea524a1}}}, 0x88) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) 14:53:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x977d, 0x5, 0x966, 0x1f, 0x5, 0x2, 0x73}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x1f8, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x110, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd526}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x983c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e6f1f08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11dc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x749ee80d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x578241ec}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x623650b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6413ca04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67e7ba04}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x781a2adc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c39a2fe}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf1698cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe1d9cc5}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52b84f81}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5317}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x463cb20c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a67551e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc68a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7adc9b03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdecc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45bfd20b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61141243}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c3cfec3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6dba}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47221201}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47c78d29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x434a6aa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x462e4dae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51a54c1c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db60815}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23e7fad9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2690fbb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48483fe8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000100) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r6 = socket(0x29, 0x5, 0x5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x28c, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfcf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d6c7e79}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30c891ad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5181}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x80}, 0x40811) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000001dc0)=0x1, 0x4) [ 1555.203950][T11894] validate_nla: 5 callbacks suppressed [ 1555.203962][T11894] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1555.378525][T11889] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xf0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1555.498007][T11889] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b507000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x600}}}}}, 0x62) [ 1555.744685][T11925] device bond0 left promiscuous mode [ 1555.750783][T11925] device bond_slave_0 left promiscuous mode [ 1555.774151][T11925] device bond_slave_1 left promiscuous mode [ 1555.798036][T11925] device bond4 left promiscuous mode [ 1555.829851][T11925] device bridge7 left promiscuous mode [ 1555.857855][T11925] device bridge8 left promiscuous mode [ 1555.882765][T11925] bridge329: port 1(bond0) entered disabled state [ 1555.962990][T11925] bridge330: port 1(bond0) entered blocking state [ 1555.986166][T11925] bridge330: port 1(bond0) entered disabled state [ 1555.999085][T11892] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1556.030626][T11925] device bond0 entered promiscuous mode [ 1556.060947][T11925] device bond_slave_0 entered promiscuous mode [ 1556.084811][T11925] device bond_slave_1 entered promiscuous mode [ 1556.131230][T11925] device bond4 entered promiscuous mode [ 1556.145293][T11925] device bridge7 entered promiscuous mode [ 1556.159583][T11925] device bridge8 entered promiscuous mode [ 1556.173828][T11925] bridge330: port 1(bond0) entered blocking state 14:53:50 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1556.180369][T11925] bridge330: port 1(bond0) entered forwarding state [ 1556.211130][T11931] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x300, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:50 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)={'syz1'}, 0x4) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b607000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1556.655524][T11931] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1556.688232][T11956] __nla_validate_parse: 7 callbacks suppressed [ 1556.688243][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:51 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x10, 0x0) accept$phonet_pipe(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRES16, @ANYRES64=r3, @ANYBLOB="b8d6c53788513d0e42cc8d544bfa7646d054cb97bb273e000f5b34a39b4da27f8bc904fed720ac8e7f13ce873d278dc667d0acb7a3e653ed5333379948df3787f940f1ae628121946eb6d8407783a2b702354032dd8b0b1726652d327b71d229a00dcf1fe1f951d6d1cb836c3a8f75ebd95ea1b853aad7bf22a296fa3dcad2c9cd10d21a13d1f5ff3419bfbed0e21e7ebb3fdc1f74ee9f661fdc3ae66439b023705d4ccace51b45c6a4196f9c39c8c", @ANYRESOCT=r0, @ANYRESDEC], 0xb8}}, 0x0) 14:53:51 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002500056cd25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1556.773769][T11959] device bond0 left promiscuous mode [ 1556.787710][T11959] device bond_slave_0 left promiscuous mode [ 1556.797076][T11959] device bond_slave_1 left promiscuous mode [ 1556.804646][T11959] device bond4 left promiscuous mode [ 1556.810690][T11959] device bridge7 left promiscuous mode [ 1556.816455][T11959] device bridge8 left promiscuous mode [ 1556.823553][T11959] bridge330: port 1(bond0) entered disabled state [ 1556.865902][T11978] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1556.880308][T11959] bridge331: port 1(bond0) entered blocking state [ 1556.886777][T11959] bridge331: port 1(bond0) entered disabled state [ 1556.894375][T11978] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1556.906768][T11959] device bond0 entered promiscuous mode [ 1556.920962][T11959] device bond_slave_0 entered promiscuous mode [ 1556.927336][T11959] device bond_slave_1 entered promiscuous mode [ 1556.946452][T11959] device bond4 entered promiscuous mode [ 1556.952872][T11959] device bridge7 entered promiscuous mode [ 1556.959533][T11959] device bridge8 entered promiscuous mode [ 1556.966962][T11959] bridge331: port 1(bond0) entered blocking state [ 1556.973510][T11959] bridge331: port 1(bond0) entered forwarding state [ 1556.996309][T11969] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1557.010508][T11977] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1557.072472][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000000c0)=0xdeba, 0x4) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:53:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x500, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:51 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@empty, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'ip6gretap0\x00', {0xffffff00}}) [ 1557.506779][T11969] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1557.525304][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b707000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1557.586407][T11996] device bond0 left promiscuous mode [ 1557.600888][T11976] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1557.612002][T11996] device bond_slave_0 left promiscuous mode [ 1557.622523][T11976] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1557.635730][T11996] device bond_slave_1 left promiscuous mode [ 1557.663883][T11996] device bond4 left promiscuous mode [ 1557.687593][T11996] device bridge7 left promiscuous mode [ 1557.700747][ T28] audit: type=1800 audit(1596725632.124:408): pid=11983 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16033 res=0 [ 1557.720017][T11996] device bridge8 left promiscuous mode [ 1557.726404][T11996] bridge331: port 1(bond0) entered disabled state [ 1557.799623][T11996] bridge332: port 1(bond0) entered blocking state [ 1557.806387][T11996] bridge332: port 1(bond0) entered disabled state [ 1557.815723][T11996] device bond0 entered promiscuous mode [ 1557.822480][T11996] device bond_slave_0 entered promiscuous mode [ 1557.829622][T11996] device bond_slave_1 entered promiscuous mode [ 1557.836312][T11996] device bond4 entered promiscuous mode [ 1557.843289][T11996] device bridge7 entered promiscuous mode [ 1557.849648][T11996] device bridge8 entered promiscuous mode [ 1557.856916][T11996] bridge332: port 1(bond0) entered blocking state [ 1557.863478][T11996] bridge332: port 1(bond0) entered forwarding state 14:53:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x700}}}}}, 0x62) 14:53:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x600, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1557.930673][T12020] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:52 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d26c80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b807000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1558.141088][T12041] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:52 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) socket$inet6(0xa, 0x4, 0x9b) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000140d7e0399bb8bafacf24000100000000000087e0a7b6bddd26b100040000c300006cca271710981feddb3cafc71380ea6ae4453f0de97bd23d77d8b1cb21d63197383b4b34b13ae331bc6f3433267229b2eb7bc9030a5bb4cb8813290d"], 0x1c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) splice(r2, &(0x7f0000000080)=0x8, r1, &(0x7f00000000c0)=0x1, 0x6cae, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1000, @private1={0xfc, 0x1, [], 0x1}, 0xfffffffd}]}, &(0x7f0000000180)=0x10) [ 1558.460476][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1558.506434][T12042] device bond0 left promiscuous mode [ 1558.512371][T12042] device bond_slave_0 left promiscuous mode [ 1558.521914][T12042] device bond_slave_1 left promiscuous mode [ 1558.535702][T12042] device bond4 left promiscuous mode [ 1558.549068][T12042] device bridge7 left promiscuous mode [ 1558.567561][T12042] device bridge8 left promiscuous mode [ 1558.583963][T12042] bridge332: port 1(bond0) entered disabled state [ 1558.651952][T12042] bridge333: port 1(bond0) entered blocking state [ 1558.674365][T12042] bridge333: port 1(bond0) entered disabled state [ 1558.689474][T12042] device bond0 entered promiscuous mode [ 1558.695044][T12042] device bond_slave_0 entered promiscuous mode [ 1558.708097][T12042] device bond_slave_1 entered promiscuous mode [ 1558.724227][T12042] device bond4 entered promiscuous mode [ 1558.733988][T12042] device bridge7 entered promiscuous mode [ 1558.741023][T12042] device bridge8 entered promiscuous mode [ 1558.747970][T12042] bridge333: port 1(bond0) entered blocking state [ 1558.754482][T12042] bridge333: port 1(bond0) entered forwarding state [ 1558.795180][T12047] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x700, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b907000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1558.964415][ T28] audit: type=1800 audit(1596725633.384:409): pid=12044 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16083 res=0 14:53:53 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80238c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1559.216043][T12083] device bond0 left promiscuous mode [ 1559.224325][T12083] device bond_slave_0 left promiscuous mode [ 1559.239255][T12083] device bond_slave_1 left promiscuous mode [ 1559.245582][T12083] device bond4 left promiscuous mode [ 1559.252840][T12083] device bridge7 left promiscuous mode [ 1559.259391][T12083] device bridge8 left promiscuous mode [ 1559.265599][T12083] bridge333: port 1(bond0) entered disabled state [ 1559.302847][T12083] bridge334: port 1(bond0) entered blocking state [ 1559.309653][T12083] bridge334: port 1(bond0) entered disabled state [ 1559.316956][T12083] device bond0 entered promiscuous mode [ 1559.330041][T12083] device bond_slave_0 entered promiscuous mode [ 1559.357827][T12083] device bond_slave_1 entered promiscuous mode [ 1559.378689][T12083] device bond4 entered promiscuous mode [ 1559.396429][T12083] device bridge7 entered promiscuous mode [ 1559.404238][T12083] device bridge8 entered promiscuous mode [ 1559.420112][T12083] bridge334: port 1(bond0) entered blocking state [ 1559.426622][T12083] bridge334: port 1(bond0) entered forwarding state [ 1559.867599][ T28] audit: type=1800 audit(1596725634.284:410): pid=12096 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16083 res=0 14:53:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14:53:54 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ba07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x900, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0xe80}}}}}, 0x62) 14:53:54 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80258c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1560.240924][T12119] validate_nla: 9 callbacks suppressed [ 1560.240934][T12119] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1560.276844][T12119] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1560.346439][T12133] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:53:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600bb07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1560.602938][T12134] device bond0 left promiscuous mode [ 1560.609570][T12134] device bond_slave_0 left promiscuous mode [ 1560.625090][T12134] device bond_slave_1 left promiscuous mode [ 1560.641460][T12134] device bond4 left promiscuous mode [ 1560.649325][T12134] device bridge7 left promiscuous mode [ 1560.655154][T12134] device bridge8 left promiscuous mode [ 1560.668871][T12134] bridge334: port 1(bond0) entered disabled state [ 1560.712480][T12134] bridge335: port 1(bond0) entered blocking state [ 1560.726185][T12134] bridge335: port 1(bond0) entered disabled state [ 1560.735962][T12134] device bond0 entered promiscuous mode [ 1560.747060][T12134] device bond_slave_0 entered promiscuous mode [ 1560.753924][T12134] device bond_slave_1 entered promiscuous mode [ 1560.764814][T12134] device bond4 entered promiscuous mode [ 1560.771450][T12134] device bridge7 entered promiscuous mode [ 1560.777292][T12134] device bridge8 entered promiscuous mode [ 1560.785823][T12134] bridge335: port 1(bond0) entered blocking state [ 1560.792335][T12134] bridge335: port 1(bond0) entered forwarding state [ 1560.820546][T12147] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xa00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1560.863688][T12147] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600bc07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x1100}}}}}, 0x62) 14:53:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000180)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_dellink={0x3c, 0x11, 0x20, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x1, 0x2000}, [@IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4040014) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f00000001c0)=0x100, 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r4, 0x0, 0x0) splice(r7, 0x0, r3, 0x0, 0x400fffe, 0x0) accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) [ 1560.992743][T12128] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1561.012077][T12166] device bond0 left promiscuous mode [ 1561.017404][T12166] device bond_slave_0 left promiscuous mode [ 1561.082286][T12166] device bond_slave_1 left promiscuous mode [ 1561.102311][ T28] audit: type=1800 audit(1596725635.524:411): pid=12133 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16322 res=0 [ 1561.107536][T12166] device bond4 left promiscuous mode 14:53:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x3) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1561.172386][T12166] device bridge7 left promiscuous mode [ 1561.202385][T12166] device bridge8 left promiscuous mode [ 1561.237963][T12166] bridge335: port 1(bond0) entered disabled state [ 1561.291935][T12166] bridge336: port 1(bond0) entered blocking state [ 1561.304330][T12166] bridge336: port 1(bond0) entered disabled state [ 1561.322749][T12166] device bond0 entered promiscuous mode [ 1561.352569][T12166] device bond_slave_0 entered promiscuous mode [ 1561.374268][T12166] device bond_slave_1 entered promiscuous mode 14:53:55 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1561.403089][T12166] device bond4 entered promiscuous mode [ 1561.425835][T12166] device bridge7 entered promiscuous mode [ 1561.445547][T12166] device bridge8 entered promiscuous mode 14:53:55 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xe808) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r4}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) splice(r7, 0x0, r5, 0x0, 0x400fffe, 0x0) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) [ 1561.468470][T12166] bridge336: port 1(bond0) entered blocking state [ 1561.475038][T12166] bridge336: port 1(bond0) entered forwarding state [ 1561.495162][T12172] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xc00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000e17326255edf093f000000000000000000776b2acabfe8f1b19adcf9c81094ea430000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) 14:53:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffd, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xc00}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) 14:53:56 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a802a8c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:56 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c) listen(r0, 0x100000000000012) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000200)=0x1, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000001c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "9400", 0x44, 0x29, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x76) [ 1561.955896][T12212] __nla_validate_parse: 13 callbacks suppressed [ 1561.955906][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1561.985681][T12216] device bond0 left promiscuous mode [ 1561.993903][T12216] device bond_slave_0 left promiscuous mode [ 1562.014671][T12216] device bond_slave_1 left promiscuous mode [ 1562.033352][T12216] device bond4 left promiscuous mode [ 1562.043267][T12216] device bridge7 left promiscuous mode [ 1562.059154][T12216] device bridge8 left promiscuous mode [ 1562.065419][T12216] bridge336: port 1(bond0) entered disabled state [ 1562.106638][T12239] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1562.116996][T12239] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1562.122179][T12216] bridge337: port 1(bond0) entered blocking state [ 1562.158653][T12216] bridge337: port 1(bond0) entered disabled state [ 1562.188127][T12216] device bond0 entered promiscuous mode [ 1562.193685][T12216] device bond_slave_0 entered promiscuous mode [ 1562.228263][T12216] device bond_slave_1 entered promiscuous mode [ 1562.234571][T12216] device bond4 entered promiscuous mode [ 1562.258043][T12216] device bridge7 entered promiscuous mode [ 1562.263936][T12216] device bridge8 entered promiscuous mode [ 1562.297650][T12216] bridge337: port 1(bond0) entered blocking state [ 1562.304247][T12216] bridge337: port 1(bond0) entered forwarding state [ 1562.340156][T12172] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600bd07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:56 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6(0xa, 0x7, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xe808) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r4, 0xbe, 0x49, 0x3ff, 0xffff, 0x4, 0x0, 0x4, {r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0xf, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="00194fd5001a"], &(0x7f00000000c0)=0xa) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r8, 0x8, 0x60, 0x1ff, 0x7e3}, &(0x7f0000000140)=0x18) 14:53:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x3f00}}}}}, 0x62) [ 1562.466067][T12216] device bond0 left promiscuous mode [ 1562.471990][T12216] device bond_slave_0 left promiscuous mode [ 1562.507422][T12216] device bond_slave_1 left promiscuous mode [ 1562.535536][T12216] device bond4 left promiscuous mode [ 1562.564469][T12216] device bridge7 left promiscuous mode [ 1562.589684][T12216] device bridge8 left promiscuous mode [ 1562.614726][T12216] bridge337: port 1(bond0) entered disabled state 14:53:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xe00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1562.974604][T12261] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1562.982957][T12243] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1562.995463][T12271] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1563.013730][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1563.045723][ T28] audit: type=1800 audit(1596725637.464:412): pid=12278 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15813 res=0 [ 1563.064367][T12276] bridge338: port 1(bond0) entered blocking state [ 1563.085158][T12276] bridge338: port 1(bond0) entered disabled state [ 1563.100990][T12276] device bond0 entered promiscuous mode [ 1563.106888][T12276] device bond_slave_0 entered promiscuous mode [ 1563.121205][T12276] device bond_slave_1 entered promiscuous mode [ 1563.133024][T12276] device bond4 entered promiscuous mode [ 1563.139070][T12276] device bridge7 entered promiscuous mode [ 1563.145260][T12276] device bridge8 entered promiscuous mode [ 1563.155490][T12276] bridge338: port 1(bond0) entered blocking state [ 1563.162209][T12276] bridge338: port 1(bond0) entered forwarding state 14:53:57 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xe808) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r4, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r7, 0xc230, 0x0, 0x2, 0x4, 0x6df}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r8, 0x7ff}, &(0x7f0000000140)=0x8) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x2000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600be07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:57 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a802b8c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1563.630031][T12321] sctp: [Deprecated]: syz-executor.1 (pid 12321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1563.630031][T12321] Use struct sctp_sack_info instead 14:53:58 executing program 4: [ 1563.725834][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1563.746447][T12331] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1563.810163][T12325] device bond0 left promiscuous mode [ 1563.815766][T12325] device bond_slave_0 left promiscuous mode [ 1563.835050][T12325] device bond_slave_1 left promiscuous mode 14:53:58 executing program 4: 14:53:58 executing program 4: [ 1563.857536][T12325] device bond4 left promiscuous mode [ 1563.865979][T12325] device bridge7 left promiscuous mode [ 1563.879075][T12325] device bridge8 left promiscuous mode [ 1563.885227][T12325] bridge338: port 1(bond0) entered disabled state [ 1563.952227][T12325] bridge339: port 1(bond0) entered blocking state [ 1563.981015][T12325] bridge339: port 1(bond0) entered disabled state 14:53:58 executing program 4: [ 1564.004102][T12325] device bond0 entered promiscuous mode [ 1564.014487][T12325] device bond_slave_0 entered promiscuous mode [ 1564.025531][T12325] device bond_slave_1 entered promiscuous mode [ 1564.036836][T12325] device bond4 entered promiscuous mode [ 1564.067540][T12325] device bridge7 entered promiscuous mode [ 1564.095391][T12325] device bridge8 entered promiscuous mode 14:53:58 executing program 4: 14:53:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x4400}}}}}, 0x62) [ 1564.112472][T12325] bridge339: port 1(bond0) entered blocking state [ 1564.119151][T12325] bridge339: port 1(bond0) entered forwarding state [ 1564.145255][T12332] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1564.197956][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1564.247268][T12324] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3f00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:53:58 executing program 4: [ 1564.371976][ T28] audit: type=1800 audit(1596725638.794:413): pid=12333 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16083 res=0 [ 1564.393915][T12358] sctp: [Deprecated]: syz-executor.1 (pid 12358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1564.393915][T12358] Use struct sctp_sack_info instead 14:53:59 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:53:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600bf07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:53:59 executing program 4: 14:53:59 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a802d8c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:53:59 executing program 4: 14:53:59 executing program 4: 14:53:59 executing program 4: 14:53:59 executing program 4: 14:53:59 executing program 4: [ 1565.076683][T12378] device bond0 left promiscuous mode [ 1565.082622][T12378] device bond_slave_0 left promiscuous mode [ 1565.107151][T12378] device bond_slave_1 left promiscuous mode [ 1565.129169][T12378] device bond4 left promiscuous mode [ 1565.147884][T12378] device bridge7 left promiscuous mode [ 1565.166548][T12378] device bridge8 left promiscuous mode [ 1565.174905][T12378] bridge339: port 1(bond0) entered disabled state [ 1565.250474][T12378] bridge340: port 1(bond0) entered blocking state [ 1565.257135][T12378] bridge340: port 1(bond0) entered disabled state [ 1565.275830][T12378] device bond0 entered promiscuous mode [ 1565.282323][T12378] device bond_slave_0 entered promiscuous mode [ 1565.295582][T12378] device bond_slave_1 entered promiscuous mode [ 1565.303965][T12378] device bond4 entered promiscuous mode [ 1565.310626][T12378] device bridge7 entered promiscuous mode [ 1565.316633][T12378] device bridge8 entered promiscuous mode [ 1565.326954][T12378] bridge340: port 1(bond0) entered blocking state [ 1565.333492][T12378] bridge340: port 1(bond0) entered forwarding state [ 1565.343340][T12381] validate_nla: 7 callbacks suppressed [ 1565.343349][T12381] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1565.400865][T12381] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:53:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x5800}}}}}, 0x62) 14:53:59 executing program 4: 14:53:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1565.456414][T12389] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@l2tp, &(0x7f0000000100)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x1}, 0x1) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) 14:54:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c007000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1565.599735][ T28] audit: type=1800 audit(1596725640.024:414): pid=12391 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16083 res=0 14:54:00 executing program 4: [ 1565.704595][T12428] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1565.733849][T12433] device bond0 left promiscuous mode [ 1565.741813][T12433] device bond_slave_0 left promiscuous mode [ 1565.764045][T12433] device bond_slave_1 left promiscuous mode [ 1565.785439][T12433] device bond4 left promiscuous mode [ 1565.803512][T12433] device bridge7 left promiscuous mode [ 1565.839341][T12433] device bridge8 left promiscuous mode [ 1565.847157][T12433] bridge340: port 1(bond0) entered disabled state [ 1565.887035][T12433] bridge341: port 1(bond0) entered blocking state [ 1565.898665][T12433] bridge341: port 1(bond0) entered disabled state [ 1565.907008][T12433] device bond0 entered promiscuous mode [ 1565.918946][T12433] device bond_slave_0 entered promiscuous mode [ 1565.925650][T12433] device bond_slave_1 entered promiscuous mode 14:54:00 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a802e8c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:00 executing program 4: [ 1565.938223][T12433] device bond4 entered promiscuous mode [ 1565.944139][T12433] device bridge7 entered promiscuous mode [ 1565.957000][T12433] device bridge8 entered promiscuous mode [ 1565.965810][T12433] bridge341: port 1(bond0) entered blocking state [ 1565.972348][T12433] bridge341: port 1(bond0) entered forwarding state 14:54:00 executing program 4: 14:54:00 executing program 4: [ 1566.146007][T12456] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:00 executing program 4: 14:54:00 executing program 4: [ 1566.523829][T12428] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x7100}}}}}, 0x62) 14:54:01 executing program 4: 14:54:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c107000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4800, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:01 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000200)=""/160, 0xa0}], 0x3) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:54:01 executing program 4: [ 1566.764293][T12490] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1566.821388][T12454] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1566.841521][T12491] device bond0 left promiscuous mode [ 1566.854436][T12491] device bond_slave_0 left promiscuous mode [ 1566.876838][T12491] device bond_slave_1 left promiscuous mode [ 1566.901501][T12491] device bond4 left promiscuous mode [ 1566.920226][T12491] device bridge7 left promiscuous mode [ 1566.927245][ T28] audit: type=1800 audit(1596725641.345:415): pid=12461 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16379 res=0 [ 1566.964716][T12491] device bridge8 left promiscuous mode [ 1566.978499][T12491] bridge341: port 1(bond0) entered disabled state [ 1567.021549][T12491] bridge342: port 1(bond0) entered blocking state [ 1567.032764][T12491] bridge342: port 1(bond0) entered disabled state [ 1567.041684][T12491] device bond0 entered promiscuous mode [ 1567.047413][T12491] device bond_slave_0 entered promiscuous mode [ 1567.062304][T12491] device bond_slave_1 entered promiscuous mode [ 1567.072648][T12491] device bond4 entered promiscuous mode [ 1567.083241][T12491] device bridge7 entered promiscuous mode [ 1567.110981][T12491] device bridge8 entered promiscuous mode [ 1567.134815][T12491] bridge342: port 1(bond0) entered blocking state [ 1567.141420][T12491] bridge342: port 1(bond0) entered forwarding state [ 1567.180043][T12490] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:01 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80308c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:01 executing program 4: 14:54:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c207000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4c00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:01 executing program 4: 14:54:01 executing program 4: [ 1567.539381][T12529] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1567.564301][T12529] __nla_validate_parse: 13 callbacks suppressed [ 1567.564311][T12529] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1567.812213][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1567.853657][T12530] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1567.879965][T12532] device bond0 left promiscuous mode [ 1567.885554][T12532] device bond_slave_0 left promiscuous mode [ 1567.904495][T12532] device bond_slave_1 left promiscuous mode [ 1567.916839][T12532] device bond4 left promiscuous mode [ 1567.926499][T12532] device bridge7 left promiscuous mode [ 1567.935462][T12532] device bridge8 left promiscuous mode [ 1567.945975][T12532] bridge342: port 1(bond0) entered disabled state [ 1567.995416][T12532] bridge343: port 1(bond0) entered blocking state [ 1568.012139][T12532] bridge343: port 1(bond0) entered disabled state [ 1568.019856][T12532] device bond0 entered promiscuous mode [ 1568.025631][T12532] device bond_slave_0 entered promiscuous mode [ 1568.032494][T12532] device bond_slave_1 entered promiscuous mode [ 1568.039125][T12532] device bond4 entered promiscuous mode [ 1568.044665][T12532] device bridge7 entered promiscuous mode [ 1568.052614][T12532] device bridge8 entered promiscuous mode [ 1568.060939][T12532] bridge343: port 1(bond0) entered blocking state [ 1568.067384][T12532] bridge343: port 1(bond0) entered forwarding state 14:54:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x800e}}}}}, 0x62) 14:54:02 executing program 4: 14:54:02 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000600040000c30000"], 0x1c}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000600)=0x3d, 0x4) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="bcc7197bb6091331866660fd8466630a65d488c1fd8672e0581173019bb5959fd3ebbee10d4ff6513d6319d9acceeb9e5173af958f722bb31972405e347911f05ba0b55b13ba4b02c853cb6bff5031892a9c6a7ca658cc7e7facd07133512e9f58aa6385008a0024aeb4c77c6fa0710eb45536efc46e7c8a62c063cc6123dfd74886912c788e323437096fdbaaaa56220b1ae5f1907ff257", 0x98}, {&(0x7f0000000140)="53b7f1b639e4efbe01cf3ca7c87befac7c45aeee97db36cfe1909c62a545ffb3bf3d0eeca59a3c590880a2209813f5ce1b51c10e1e8e2b", 0x37}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="92de8e433d199fd5b6383e5a902b1784777d684f948a8acc223a851317f852164683221ab49f591542fbe1f406e0db0343de12536ab595f4d2407dc8b4d257008fe62d859f8fc7a31b437fdac387695cee3aee5292", 0x55}, {&(0x7f0000000380)="32c131194fef8fb1df023a5442f4ae0bbc6777ccfab67be96438d3ee3ac8846118caa6fca45e4c521141e3df4bd7ff4ef9797207f80b62bf90816e516174fc34af309e0caccc12eceacedde605d72051ebafe5b97e260d4c67a94e08bb4aa20417962cb3412b960ec8ed3c7a5c831883a18169a8e71798fd888214a5255d8788601446816d26a0e72a2f338cecb4f09162156b97f4f57019b6c631ba9c37cf085d9df07188486d7b2d3e0a8c86d7b19fa592f566d71301f889c9e7fe1fe8c4f6f8c153244b21ab0adcc1799fa34b7b400507294315e735fade", 0xd9}, {&(0x7f0000000480)="96f94d47ad1e32b0d5977c3da889dec513a7c4829a6d7dd6d035747799a3dbfba1f151d5c2a96fede8c24f57c7ab90a59889aff985b2250db9bb01b0631cd93799553850dc14296d471f6281ca7155861912122a35f381f722d4017039667f664f74cac1fe485bc9e1ff49b7fbbe365cf214da1464a0d0d17ff21926d59a6b913fd80053678d25b11046bdd1e29583adb1419c04e1a19001e36c7169e700245f7e9fe4d62e8ffebe029375930679e6043bf6025252e4ff140de73016b39d336ff6a9ffcc8b5db284554a0bdc04a5a8", 0xcf}], 0x6, 0x3) 14:54:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x5865, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c307000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:02 executing program 4: [ 1568.231022][T12525] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1568.343011][ T28] audit: type=1800 audit(1596725642.765:416): pid=12535 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15937 res=0 [ 1568.354365][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1568.698296][T12567] device bond0 left promiscuous mode [ 1568.703626][T12567] device bond_slave_0 left promiscuous mode [ 1568.710216][T12567] device bond_slave_1 left promiscuous mode [ 1568.716279][T12567] device bond4 left promiscuous mode [ 1568.722189][T12567] device bridge7 left promiscuous mode [ 1568.728528][T12567] device bridge8 left promiscuous mode [ 1568.734532][T12567] bridge343: port 1(bond0) entered disabled state [ 1568.780900][T12567] bridge344: port 1(bond0) entered blocking state [ 1568.787425][T12567] bridge344: port 1(bond0) entered disabled state [ 1568.795576][T12567] device bond0 entered promiscuous mode [ 1568.805811][T12567] device bond_slave_0 entered promiscuous mode [ 1568.812752][T12567] device bond_slave_1 entered promiscuous mode [ 1568.819800][T12567] device bond4 entered promiscuous mode 14:54:03 executing program 4: 14:54:03 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80588c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1568.825383][T12567] device bridge7 entered promiscuous mode [ 1568.832838][T12567] device bridge8 entered promiscuous mode [ 1568.841360][T12567] bridge344: port 1(bond0) entered blocking state [ 1568.847901][T12567] bridge344: port 1(bond0) entered forwarding state [ 1568.868596][T12574] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c407000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:03 executing program 4: [ 1568.978268][T12594] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x1000000}}}}}, 0x62) 14:54:03 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x4) r8 = accept$alg(r7, 0x0, 0x0) splice(r8, 0x0, r6, 0x0, 0x400fffe, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000016c0)={'syztnl2\x00', &(0x7f0000001640)={'syztnl0\x00', 0x0, 0x4, 0x1f, 0x6, 0x3, 0x2, @loopback, @empty, 0x10, 0x8000, 0x3, 0x9}}) sendmsg$inet6(r2, &(0x7f00000018c0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x9, @local, 0xcaa1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="3c2e070bf1d7017531554721aa977dc6b548d1fa0cd7420f0cda2310baad59e2423a9c45524e697e22bd95f5de3a4a480c8714ae0b68c6734b32e5118c46fed01d668e5837ee26f376b6f5488c59e088749328ee821d27c19eab57620510f253beddc41eeb158415ecae0e4058c5e0a57514f0ee268c67a4ae5109c88f85a5ad95fd50fcb19799b6ce1320c74b3edc53e59edd7e410b8655ba80bc6c45b1eab198479e1720779a100d1a5419", 0xac}, {&(0x7f00000002c0)="a00f4dd7d39c74c68f4e44e06fd4e67b957ab21bc4ff7147edda5e715aeaf17e15759a5b", 0x24}, {&(0x7f0000000440)="fbb2390a976b26a0dd9efa4f497000588a6aa414d7591904f990f8e48d2ee1eb120a18993642825971bacd60d1b6c2fd85c1dba6789ac37d8b3125232652df71a5d750e7e90c91ee62c51b684d388c0a8a82c66a419fb45b38a05f4afbcc04000000000000006469eecbc0d2fe1e43c857297d38bc2a10ca2698862b8d6aa18300a109d56ef36e37768231ec420f1e3436ec4c02ea78928863e9ce10200bb1e2fc274f5d32cd0cd91b992a35a6ee507a0bc5bd20f78a93ad5fc95a33061c8731356ee09e727f6d12576a81cdde4e31c2f16bb07bec4209384422e3361936b7cd0b38c9c5bc54656350790f0d6c08", 0xee}], 0x3, &(0x7f0000001700)}, 0x4805) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1569.139325][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:03 executing program 4: [ 1569.251577][T12615] device bond0 left promiscuous mode [ 1569.257002][T12615] device bond_slave_0 left promiscuous mode [ 1569.277248][T12615] device bond_slave_1 left promiscuous mode [ 1569.298718][T12615] device bond4 left promiscuous mode [ 1569.321066][T12615] device bridge7 left promiscuous mode 14:54:03 executing program 4: [ 1569.342458][T12615] device bridge8 left promiscuous mode [ 1569.364901][T12615] bridge344: port 1(bond0) entered disabled state [ 1569.441433][T12615] bridge345: port 1(bond0) entered blocking state [ 1569.467861][T12615] bridge345: port 1(bond0) entered disabled state 14:54:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/197, 0xc5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc) recvfrom$inet(r3, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) [ 1569.502407][T12615] device bond0 entered promiscuous mode [ 1569.541188][T12615] device bond_slave_0 entered promiscuous mode [ 1569.560364][T12615] device bond_slave_1 entered promiscuous mode [ 1569.583840][T12615] device bond4 entered promiscuous mode [ 1569.596454][T12615] device bridge7 entered promiscuous mode [ 1569.620031][T12615] device bridge8 entered promiscuous mode [ 1569.642803][T12615] bridge345: port 1(bond0) entered blocking state [ 1569.649413][T12615] bridge345: port 1(bond0) entered forwarding state [ 1569.680187][T12620] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1569.702018][T12594] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6558, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1569.822874][ T28] audit: type=1800 audit(1596725644.245:417): pid=12607 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15858 res=0 14:54:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c507000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1570.088223][T12648] device bond0 left promiscuous mode [ 1570.093550][T12648] device bond_slave_0 left promiscuous mode [ 1570.114113][T12648] device bond_slave_1 left promiscuous mode [ 1570.122514][T12648] device bond4 left promiscuous mode [ 1570.133710][T12648] device bridge7 left promiscuous mode [ 1570.141356][T12648] device bridge8 left promiscuous mode [ 1570.147154][T12648] bridge345: port 1(bond0) entered disabled state [ 1570.210902][T12648] bridge346: port 1(bond0) entered blocking state [ 1570.225115][T12648] bridge346: port 1(bond0) entered disabled state [ 1570.235480][T12648] device bond0 entered promiscuous mode [ 1570.241483][T12648] device bond_slave_0 entered promiscuous mode [ 1570.249562][T12648] device bond_slave_1 entered promiscuous mode [ 1570.255972][T12648] device bond4 entered promiscuous mode [ 1570.261621][T12648] device bridge7 entered promiscuous mode [ 1570.267598][T12648] device bridge8 entered promiscuous mode [ 1570.275040][T12648] bridge346: port 1(bond0) entered blocking state [ 1570.281561][T12648] bridge346: port 1(bond0) entered forwarding state 14:54:04 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80638c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:04 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) [ 1570.311709][T12648] device bond0 left promiscuous mode [ 1570.325260][T12648] device bond_slave_0 left promiscuous mode [ 1570.350673][T12648] device bond_slave_1 left promiscuous mode [ 1570.380543][T12648] device bond4 left promiscuous mode [ 1570.392407][T12648] device bridge7 left promiscuous mode [ 1570.402383][T12648] device bridge8 left promiscuous mode [ 1570.413483][T12648] bridge346: port 1(bond0) entered disabled state 14:54:04 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast, @local={[], 0xffffffffffffffff}, @val, {@ipv6}}, 0x0) [ 1570.471793][T12675] validate_nla: 10 callbacks suppressed [ 1570.471803][T12675] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1570.490616][T12656] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6800, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c607000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x2000000}}}}}, 0x62) 14:54:05 executing program 4: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @local={[], 0xffffffffffffffff}, @val, {@ipv6}}, 0x0) [ 1570.707027][T12692] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1570.784733][T12700] bridge347: port 1(bond0) entered blocking state [ 1570.799782][T12700] bridge347: port 1(bond0) entered disabled state 14:54:05 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) [ 1570.825201][T12700] device bond0 entered promiscuous mode [ 1570.843259][T12700] device bond_slave_0 entered promiscuous mode [ 1570.869348][T12700] device bond_slave_1 entered promiscuous mode [ 1570.902287][T12700] device bond4 entered promiscuous mode [ 1570.920381][T12700] device bridge7 entered promiscuous mode [ 1570.935212][T12700] device bridge8 entered promiscuous mode [ 1570.969732][T12700] bridge347: port 1(bond0) entered blocking state [ 1570.976296][T12700] bridge347: port 1(bond0) entered forwarding state [ 1571.000580][T12692] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x10}, 0x0) r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000000)=0x7) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000080), &(0x7f0000000100)=0x8) 14:54:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c707000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000080), &(0x7f0000000140)=0x6) 14:54:05 executing program 1: r0 = socket(0x27, 0x2, 0x200) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000080)='[(s\x00', 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r1, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1571.280010][T12679] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1571.548511][T12725] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1571.644799][T12725] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:06 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80698c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 14:54:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6c00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c807000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x3000000}}}}}, 0x62) [ 1571.911434][T12760] device bond0 left promiscuous mode [ 1571.937007][T12760] device bond_slave_0 left promiscuous mode 14:54:06 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') [ 1571.957438][T12760] device bond_slave_1 left promiscuous mode [ 1571.965871][T12760] device bond4 left promiscuous mode [ 1571.974011][T12760] device bridge7 left promiscuous mode [ 1571.979979][T12760] device bridge8 left promiscuous mode [ 1571.986163][T12760] bridge347: port 1(bond0) entered disabled state [ 1572.009432][T12771] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1572.041128][T12760] bridge348: port 1(bond0) entered blocking state [ 1572.065901][T12760] bridge348: port 1(bond0) entered disabled state [ 1572.101020][T12760] device bond0 entered promiscuous mode [ 1572.127601][T12760] device bond_slave_0 entered promiscuous mode [ 1572.142890][T12760] device bond_slave_1 entered promiscuous mode [ 1572.157701][T12760] device bond4 entered promiscuous mode [ 1572.170090][T12760] device bridge7 entered promiscuous mode 14:54:06 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) 14:54:06 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) [ 1572.183905][T12760] device bridge8 entered promiscuous mode [ 1572.200978][T12760] bridge348: port 1(bond0) entered blocking state [ 1572.207553][T12760] bridge348: port 1(bond0) entered forwarding state 14:54:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1572.281304][T12759] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7400, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1572.374332][T12759] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000009f84bb57964b090986251a20080045000079000000000029"], 0x8b) 14:54:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600c907000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1572.804450][T12800] __nla_validate_parse: 10 callbacks suppressed [ 1572.804460][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1572.828974][T12813] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1572.896921][T12805] device bond0 left promiscuous mode [ 1572.902514][T12805] device bond_slave_0 left promiscuous mode [ 1572.925019][T12805] device bond_slave_1 left promiscuous mode [ 1572.932474][T12805] device bond4 left promiscuous mode [ 1572.938503][T12805] device bridge7 left promiscuous mode [ 1572.944542][T12805] device bridge8 left promiscuous mode [ 1572.951026][T12805] bridge348: port 1(bond0) entered disabled state [ 1573.002343][T12805] bridge349: port 1(bond0) entered blocking state [ 1573.011441][T12805] bridge349: port 1(bond0) entered disabled state [ 1573.020319][T12805] device bond0 entered promiscuous mode [ 1573.025990][T12805] device bond_slave_0 entered promiscuous mode [ 1573.034051][T12805] device bond_slave_1 entered promiscuous mode [ 1573.044539][T12805] device bond4 entered promiscuous mode [ 1573.051381][T12805] device bridge7 entered promiscuous mode [ 1573.057837][T12805] device bridge8 entered promiscuous mode [ 1573.064930][T12805] bridge349: port 1(bond0) entered blocking state [ 1573.071461][T12805] bridge349: port 1(bond0) entered forwarding state [ 1573.151486][T12830] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1573.186735][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:07 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a806c8c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7a00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:07 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x7ff, 0x73, &(0x7f0000000080)="21f7233fec840e10725757d158c3c8152a0bee905f27c2c821b7529c6ecf1e384de062d98e1fd3ff2fbd32fc430e818bc32db60184fcc820a135557994e8eeeefc75086a3a065fee1aaa991c2eba640496c255c2350de1bf4483c885af394f0fde237e5da8baf697e4428d0064c5f40b6be207", 0x3f, 0x1, 0xaa, 0x7, 0xa3, 0x1, 0x9, 'syz0\x00'}) [ 1573.636632][T12856] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1573.775805][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1573.833331][T12853] device bond0 left promiscuous mode [ 1573.841224][T12853] device bond_slave_0 left promiscuous mode [ 1573.865270][T12853] device bond_slave_1 left promiscuous mode [ 1573.875415][T12853] device bond4 left promiscuous mode [ 1573.881170][T12853] device bridge7 left promiscuous mode [ 1573.887239][T12853] device bridge8 left promiscuous mode [ 1573.893589][T12853] bridge349: port 1(bond0) entered disabled state [ 1573.947437][T12853] bridge350: port 1(bond0) entered blocking state [ 1573.954375][T12853] bridge350: port 1(bond0) entered disabled state [ 1573.965306][T12853] device bond0 entered promiscuous mode [ 1573.971262][T12853] device bond_slave_0 entered promiscuous mode [ 1573.978944][T12853] device bond_slave_1 entered promiscuous mode [ 1573.985357][T12853] device bond4 entered promiscuous mode [ 1573.991060][T12853] device bridge7 entered promiscuous mode [ 1573.996945][T12853] device bridge8 entered promiscuous mode [ 1574.004351][T12853] bridge350: port 1(bond0) entered blocking state [ 1574.010886][T12853] bridge350: port 1(bond0) entered forwarding state 14:54:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f00000019c0)={@void, @val={0x0, 0x4}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) 14:54:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x4000000}}}}}, 0x62) 14:54:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ca07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x8100, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1574.121985][T12852] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1574.230351][ T28] audit: type=1800 audit(1596725648.655:418): pid=12856 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16323 res=0 14:54:08 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080), &(0x7f0000000180)=0x10) 14:54:09 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x891a, &(0x7f0000000180)={'team_slave_0\x00', @ifru_flags=0x1400}) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000200)) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_buf(r4, 0x0, 0x28, &(0x7f00000006c0)="4d1ce0b0ac4e79683340db71559b249cca898166fb55a100000000000000024f418437796765bd76f0da4c9434a11b890c6011c7b9a79a45f45f565b19e77e76fd7118ba1bfee2cf457db57fd9f4a2ce067b674996544651fdba9a270a4c4d4e8f3a2fb6929fc0c58eb1d6506acc726d5d722199dc54552d61b8fa35f3d492b04062acd2555b73fea99731359dd89981de27a98bf082d9e6d078024aa8b1db658a018912f0605ac600"/184, 0xb8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={[], [], @local}, 0x4e20, 0x3ff, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x32, 0x0, r6}, {0xfffffffffffffffb, 0xf33c, 0x3, 0x4, 0xff12, 0x80000001, 0x6, 0x4}, {0x0, 0x400, 0x7, 0x9}, 0x2, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d3, 0x18}, 0x2, @in=@broadcast, 0x3504, 0x0, 0x1, 0x4, 0x3, 0x8000, 0xfb}}, 0xe8) listen(r0, 0x100000000000012) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private1, @in6=@remote}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0xffff, @private0, 0x7}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0xffff, @mcast2, 0x5}]}, &(0x7f0000000580)=0x10) [ 1574.589436][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:09 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a806f8c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1574.636736][T12889] device bond0 left promiscuous mode [ 1574.645717][T12889] device bond_slave_0 left promiscuous mode [ 1574.666271][T12889] device bond_slave_1 left promiscuous mode [ 1574.692317][T12889] device bond4 left promiscuous mode [ 1574.751083][T12889] device bridge7 left promiscuous mode [ 1574.756715][T12889] device bridge8 left promiscuous mode [ 1574.776624][T12918] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1574.786927][T12889] bridge350: port 1(bond0) entered disabled state [ 1574.861856][T12889] bridge351: port 1(bond0) entered blocking state [ 1574.887339][T12889] bridge351: port 1(bond0) entered disabled state [ 1574.923308][T12889] device bond0 entered promiscuous mode [ 1574.930470][T12889] device bond_slave_0 entered promiscuous mode [ 1574.936818][T12889] device bond_slave_1 entered promiscuous mode [ 1574.990191][T12889] device bond4 entered promiscuous mode [ 1574.995751][T12889] device bridge7 entered promiscuous mode [ 1575.018987][T12889] device bridge8 entered promiscuous mode [ 1575.026768][T12889] bridge351: port 1(bond0) entered blocking state [ 1575.033320][T12889] bridge351: port 1(bond0) entered forwarding state [ 1575.066404][T12894] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600cb07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xf000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:09 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket$inet6(0xa, 0x1, 0xfffffff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x28) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:54:09 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x387443c687868262, 0x0}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 14:54:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x6000000}}}}}, 0x62) [ 1575.372347][T12949] device bond0 left promiscuous mode [ 1575.394122][T12949] device bond_slave_0 left promiscuous mode [ 1575.417325][T12949] device bond_slave_1 left promiscuous mode [ 1575.458604][T12949] device bond4 left promiscuous mode [ 1575.485637][T12949] device bridge7 left promiscuous mode [ 1575.496441][T12949] device bridge8 left promiscuous mode [ 1575.510812][T12949] bridge351: port 1(bond0) entered disabled state [ 1575.589303][ T28] audit: type=1800 audit(1596725650.015:419): pid=12954 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=16384 res=0 [ 1575.589671][T12949] bridge352: port 1(bond0) entered blocking state 14:54:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 1575.662723][ T28] audit: type=1800 audit(1596725650.055:420): pid=12964 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16323 res=0 [ 1575.686380][T12949] bridge352: port 1(bond0) entered disabled state [ 1575.728804][T12949] device bond0 entered promiscuous mode [ 1575.744985][T12949] device bond_slave_0 entered promiscuous mode [ 1575.752083][T12949] device bond_slave_1 entered promiscuous mode [ 1575.759297][T12949] device bond4 entered promiscuous mode [ 1575.766326][T12949] device bridge7 entered promiscuous mode [ 1575.781857][T12949] device bridge8 entered promiscuous mode [ 1575.791226][T12949] bridge352: port 1(bond0) entered blocking state [ 1575.797857][T12949] bridge352: port 1(bond0) entered forwarding state [ 1575.806265][T12968] sctp: [Deprecated]: syz-executor.4 (pid 12968) Use of int in max_burst socket option deprecated. [ 1575.806265][T12968] Use struct sctp_assoc_value instead 14:54:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600cc07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:10 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80708c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1575.903255][T12968] sctp: [Deprecated]: syz-executor.4 (pid 12968) Use of int in max_burst socket option deprecated. [ 1575.903255][T12968] Use struct sctp_assoc_value instead 14:54:10 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg(r0, &(0x7f0000001600)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 14:54:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00', 0xa0028088}, &(0x7f0000000240)=0x54) [ 1576.070966][T12982] validate_nla: 10 callbacks suppressed [ 1576.070976][T12982] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1576.159434][T12992] IPVS: ftp: loaded support on port[0] = 21 14:54:10 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}, 0x1000}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000180)=0x10) 14:54:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xf0ffff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1576.299216][T12978] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1576.396674][T12978] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600cd07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1576.849890][T12982] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1576.870522][T13021] device bond0 left promiscuous mode [ 1576.875849][T13021] device bond_slave_0 left promiscuous mode [ 1576.894379][T13021] device bond_slave_1 left promiscuous mode [ 1576.902559][T13021] device bond4 left promiscuous mode [ 1576.913818][T13021] device bridge7 left promiscuous mode [ 1576.921514][T13021] device bridge8 left promiscuous mode [ 1576.941523][T13021] bridge352: port 1(bond0) entered disabled state [ 1576.943411][T12994] IPVS: ftp: loaded support on port[0] = 21 [ 1576.984015][ T28] audit: type=1800 audit(1596725651.405:421): pid=13039 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16180 res=0 [ 1577.027804][T13021] bridge353: port 1(bond0) entered blocking state [ 1577.034402][T13021] bridge353: port 1(bond0) entered disabled state [ 1577.069037][T13021] device bond0 entered promiscuous mode [ 1577.074600][T13021] device bond_slave_0 entered promiscuous mode [ 1577.098096][T13021] device bond_slave_1 entered promiscuous mode [ 1577.104384][T13021] device bond4 entered promiscuous mode [ 1577.122838][T13021] device bridge7 entered promiscuous mode [ 1577.144648][T13021] device bridge8 entered promiscuous mode [ 1577.161319][T13021] bridge353: port 1(bond0) entered blocking state 14:54:11 executing program 1: socket$inet6(0xa, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x26) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004280)=ANY=[@ANYBLOB="3ce5000010800104010100000000000000028300", @ANYRES32=r0, @ANYRESOCT, @ANYRES32], 0x3c}}, 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x49, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x18c, 0x200, 0x1180, 0x0, 0x1260, 0x2e0, 0x2e0, 0x1260, 0x2e0, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x26) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b0001006772658a617000000c00028008000100", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r4, 0x29, 0x5, 0x1, 0x800, 0x51, @mcast2, @private2, 0x8, 0x80, 0x1f, 0x8}}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000200)={0x0, 0xfffffffffffffec3, &(0x7f0000000740)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x26) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="000080005a58f8a171b310f94fd326fa73477ff0e3cd912bb87d5ddea199e5eef06751ab8e7ce7e64e488de14b85eea46e6ec3ece58fab6d7d7593e9341aaeb72a4424ce12a85dea3aee65732ff686f5", @ANYRES16=0x0, @ANYBLOB="ffff00000000000008000300000000000000", @ANYRES64=r3, @ANYBLOB="08000100000000ac941e340900a7e1be64e8970008000300ed293dd7275d8996a052de5be19bb07552044e2b7caa48f2341f3a0894c08ef0d8a37451bf782c9024b6fb920effa625595982bcc9457f58ac74e25409aa783205a36e5151a142c78ddf0e6da8640aea4f1a06eae26506124dfa602bb10d057b29c84e3783fa0af18799f4a0ba22a6adfb28e3de2216b176eed59bfb73f578f2b01f5bb67ee8c93ec5c4288468c65396fab8ab4cf263fc71", @ANYRES32=r5, @ANYBLOB="0c0099000200000002000000080001000000007f9795ed05e6352ae4156d5429c101eb39c1357c5e06f716ead0948b7e21289963146a18a5eaa79f89655ba86971ca42ea9712e302c136141581bddc022134e049a860253a3141f5630c5c2816af3befecc99521a208a50fe8407a2e5abc7c355b951be3b2abd2b58969402530e4396946fdf3a72ad55a9448cdd654637cb17cf0d4", @ANYRES32=r8, @ANYRESOCT=r7], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) [ 1577.167876][T13021] bridge353: port 1(bond0) entered forwarding state [ 1577.184239][T13024] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x7000000}}}}}, 0x62) 14:54:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ce07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:11 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80738c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:11 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x400fffd, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/249, &(0x7f0000000200)=0xf9) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830a00000016000a00", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032bbd7000ffdbdf25050000000500350040000000050035002000000005002a0000000000050033000100000005002900000000000500350005000000db000b0002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) [ 1577.592987][T13084] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1578.071757][T13070] __nla_validate_parse: 10 callbacks suppressed [ 1578.071766][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1578.121601][T13078] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1578.133536][T13079] device bond0 left promiscuous mode [ 1578.150616][T13079] device bond_slave_0 left promiscuous mode [ 1578.158131][T13079] device bond_slave_1 left promiscuous mode [ 1578.164394][T13079] device bond4 left promiscuous mode [ 1578.172987][T13079] device bridge7 left promiscuous mode [ 1578.183550][T13079] device bridge8 left promiscuous mode [ 1578.192660][T13079] bridge353: port 1(bond0) entered disabled state [ 1578.244984][T13079] bridge354: port 1(bond0) entered blocking state [ 1578.261271][T13079] bridge354: port 1(bond0) entered disabled state [ 1578.275077][T13079] device bond0 entered promiscuous mode [ 1578.285183][T13079] device bond_slave_0 entered promiscuous mode [ 1578.293285][T13079] device bond_slave_1 entered promiscuous mode [ 1578.300670][T13079] device bond4 entered promiscuous mode [ 1578.310404][T13079] device bridge7 entered promiscuous mode [ 1578.318276][T13079] device bridge8 entered promiscuous mode [ 1578.326997][T13079] bridge354: port 1(bond0) entered blocking state [ 1578.333467][T13079] bridge354: port 1(bond0) entered forwarding state [ 1578.344457][T13085] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1578.394869][T13078] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1578.455443][T13077] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1578.473126][ T28] audit: type=1800 audit(1596725652.895:422): pid=13102 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16381 res=0 [ 1578.474018][T13077] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x2000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600cf07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1578.730558][T13128] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1578.753859][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1578.831552][T13128] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1578.854872][T13136] device bond0 left promiscuous mode [ 1578.861661][T13136] device bond_slave_0 left promiscuous mode [ 1578.887589][T13136] device bond_slave_1 left promiscuous mode [ 1578.917048][T13136] device bond4 left promiscuous mode [ 1578.946854][T13136] device bridge7 left promiscuous mode [ 1578.952744][T13136] device bridge8 left promiscuous mode [ 1578.959138][T13136] bridge354: port 1(bond0) entered disabled state [ 1579.000809][T13136] bridge355: port 1(bond0) entered blocking state [ 1579.009525][T13136] bridge355: port 1(bond0) entered disabled state [ 1579.017818][T13136] device bond0 entered promiscuous mode [ 1579.023561][T13136] device bond_slave_0 entered promiscuous mode [ 1579.030624][T13136] device bond_slave_1 entered promiscuous mode [ 1579.037592][T13136] device bond4 entered promiscuous mode [ 1579.043336][T13136] device bridge7 entered promiscuous mode [ 1579.049679][T13136] device bridge8 entered promiscuous mode [ 1579.057681][T13136] bridge355: port 1(bond0) entered blocking state [ 1579.064215][T13136] bridge355: port 1(bond0) entered forwarding state [ 1579.151902][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @random="090986251a20", @void, {@ipv4={0x8906, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x4}}}}}}}}, 0x6a) 14:54:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x11000000}}}}}, 0x62) 14:54:14 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x8, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20008854) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:54:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d007000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:14 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80758c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1580.402627][T13157] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1580.431601][T13159] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1580.433034][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1580.565470][T13168] device bond0 left promiscuous mode [ 1580.574644][T13168] device bond_slave_0 left promiscuous mode [ 1580.586384][T13168] device bond_slave_1 left promiscuous mode [ 1580.602750][T13168] device bond4 left promiscuous mode [ 1580.622203][T13168] device bridge7 left promiscuous mode [ 1580.643027][T13168] device bridge8 left promiscuous mode [ 1580.660816][T13168] bridge355: port 1(bond0) entered disabled state [ 1580.712113][T13168] bridge356: port 1(bond0) entered blocking state [ 1580.726063][T13168] bridge356: port 1(bond0) entered disabled state [ 1580.744458][T13168] device bond0 entered promiscuous mode [ 1580.753287][T13168] device bond_slave_0 entered promiscuous mode [ 1580.764773][T13168] device bond_slave_1 entered promiscuous mode [ 1580.786843][T13168] device bond4 entered promiscuous mode [ 1580.794094][T13168] device bridge7 entered promiscuous mode [ 1580.807246][T13168] device bridge8 entered promiscuous mode [ 1580.815449][T13168] bridge356: port 1(bond0) entered blocking state [ 1580.822172][T13168] bridge356: port 1(bond0) entered forwarding state 14:54:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d107000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1581.045520][T13169] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1581.171678][ T28] audit: type=1800 audit(1596725655.596:423): pid=13182 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16369 res=0 [ 1581.523530][T13197] validate_nla: 5 callbacks suppressed [ 1581.523538][T13197] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1581.546424][T13202] device bond0 left promiscuous mode [ 1581.553916][T13202] device bond_slave_0 left promiscuous mode [ 1581.562995][T13202] device bond_slave_1 left promiscuous mode [ 1581.570866][T13202] device bond4 left promiscuous mode [ 1581.576286][T13202] device bridge7 left promiscuous mode [ 1581.582891][T13202] device bridge8 left promiscuous mode [ 1581.589907][T13202] bridge356: port 1(bond0) entered disabled state [ 1581.653969][T13202] bridge357: port 1(bond0) entered blocking state [ 1581.660616][T13202] bridge357: port 1(bond0) entered disabled state [ 1581.669964][T13202] device bond0 entered promiscuous mode [ 1581.675522][T13202] device bond_slave_0 entered promiscuous mode [ 1581.683318][T13202] device bond_slave_1 entered promiscuous mode [ 1581.690602][T13202] device bond4 entered promiscuous mode [ 1581.696155][T13202] device bridge7 entered promiscuous mode [ 1581.703059][T13202] device bridge8 entered promiscuous mode [ 1581.711369][T13202] bridge357: port 1(bond0) entered blocking state [ 1581.717915][T13202] bridge357: port 1(bond0) entered forwarding state 14:54:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x3f000000}}}}}, 0x62) [ 1581.798067][T13197] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:16 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}, 0x5}, 0xa) listen(r0, 0x100000000000012) syz_init_net_socket$x25(0x9, 0x5, 0x0) 14:54:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x5000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:16 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80788c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1582.051241][T13240] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1582.413408][T13241] device bond0 left promiscuous mode [ 1582.419081][T13241] device bond_slave_0 left promiscuous mode [ 1582.425134][T13241] device bond_slave_1 left promiscuous mode [ 1582.456872][T13241] device bond4 left promiscuous mode [ 1582.462196][T13241] device bridge7 left promiscuous mode [ 1582.481743][T13241] device bridge8 left promiscuous mode [ 1582.495016][T13241] bridge357: port 1(bond0) entered disabled state [ 1582.550498][T13241] bridge358: port 1(bond0) entered blocking state [ 1582.557071][T13241] bridge358: port 1(bond0) entered disabled state [ 1582.564305][T13241] device bond0 entered promiscuous mode [ 1582.571025][T13241] device bond_slave_0 entered promiscuous mode [ 1582.578161][T13241] device bond_slave_1 entered promiscuous mode [ 1582.584455][T13241] device bond4 entered promiscuous mode [ 1582.590928][T13241] device bridge7 entered promiscuous mode [ 1582.601320][T13241] device bridge8 entered promiscuous mode [ 1582.610462][T13241] bridge358: port 1(bond0) entered blocking state [ 1582.616996][T13241] bridge358: port 1(bond0) entered forwarding state 14:54:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d207000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:17 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'wg2\x00', {0x2, 0x4e20, @multicast2}}) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:54:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a28193020600f2ffff7f01020b00000a000f0012402800140000000a0005407ffeffff0022de1338d54400009b84136ef75afb83de44110000000000b8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) [ 1582.836987][T13231] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1582.956083][T13274] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1582.983116][ T28] audit: type=1800 audit(1596725657.406:424): pid=13242 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16374 res=0 [ 1583.021857][T13275] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 1583.044620][T13275] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 14:54:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0be6ffffff000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002001e"], 0x50}}, 0x0) 14:54:17 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c0a940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1583.339373][T13274] __nla_validate_parse: 7 callbacks suppressed [ 1583.339387][T13274] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1583.355940][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1583.376144][T13290] device bond0 left promiscuous mode [ 1583.381651][T13290] device bond_slave_0 left promiscuous mode [ 1583.389963][T13290] device bond_slave_1 left promiscuous mode [ 1583.396054][T13290] device bond4 left promiscuous mode [ 1583.404793][T13299] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1583.416248][T13290] device bridge7 left promiscuous mode [ 1583.423232][T13299] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1583.433979][T13290] device bridge8 left promiscuous mode [ 1583.442866][T13290] bridge358: port 1(bond0) entered disabled state [ 1583.502618][T13290] bridge359: port 1(bond0) entered blocking state [ 1583.509401][T13290] bridge359: port 1(bond0) entered disabled state [ 1583.521455][T13290] device bond0 entered promiscuous mode [ 1583.528198][T13290] device bond_slave_0 entered promiscuous mode [ 1583.534795][T13290] device bond_slave_1 entered promiscuous mode [ 1583.543523][T13290] device bond4 entered promiscuous mode 14:54:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x44000000}}}}}, 0x62) [ 1583.550083][T13290] device bridge7 entered promiscuous mode [ 1583.556211][T13290] device bridge8 entered promiscuous mode [ 1583.565650][T13290] bridge359: port 1(bond0) entered blocking state [ 1583.572178][T13290] bridge359: port 1(bond0) entered forwarding state [ 1583.583571][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:54:18 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="552968034bfa", @dev, @void, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @multicast, @rand_addr, @empty, @local}}}}, 0x0) [ 1583.706482][T13274] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d307000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:54:18 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) 14:54:18 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000600200003001000030010000300100000000000000000000c8010000c8010000c8010000c8010000c80100000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000000000000000000000000000000000000000000000000000003001000000000000ac141400ffffffff00000000000000006261746124763000000000000000000076657468315f766972745f776966690000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000040000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bond\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0x65a0}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1584.190468][T13299] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1584.210904][T13299] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1584.268844][T13346] x_tables: duplicate underflow at hook 2 [ 1584.301468][ T28] audit: type=1800 audit(1596725658.726:425): pid=13304 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16375 res=0 14:54:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0xfffffffd) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r1 = socket(0x1f, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xc1cb}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="84045a002300"/20, @ANYRES16, @ANYBLOB="0000000000000000540012800e0001006970366772657461700000004000028006000e000200000008000c000700000006001800cbc100001400060000000000000000000000000000000000060003000000000008000100", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="00000a85", @ANYRES32=0x0, @ANYBLOB], 0x84}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001cc0)={'ip6tnl0\x00', &(0x7f0000001c40)={'syztnl1\x00', r5, 0x2f, 0x4, 0x5, 0xffffff7f, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x7880, 0x7800, 0x1000, 0x7ff}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x88, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_MASTER={0x8}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f80)={&(0x7f0000000440)={0x26c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40840}, 0x40000) [ 1584.470377][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1584.525336][T13331] device bond0 left promiscuous mode [ 1584.534805][T13331] device bond_slave_0 left promiscuous mode [ 1584.546266][T13331] device bond_slave_1 left promiscuous mode [ 1584.555683][T13331] device bond4 left promiscuous mode [ 1584.569952][T13331] device bridge7 left promiscuous mode [ 1584.575677][T13331] device bridge8 left promiscuous mode [ 1584.590131][T13331] bridge359: port 1(bond0) entered disabled state [ 1584.652251][T13331] bridge360: port 1(bond0) entered blocking state [ 1584.658911][T13331] bridge360: port 1(bond0) entered disabled state [ 1584.666128][T13331] device bond0 entered promiscuous mode [ 1584.673005][T13331] device bond_slave_0 entered promiscuous mode [ 1584.680690][T13331] device bond_slave_1 entered promiscuous mode [ 1584.688755][T13331] device bond4 entered promiscuous mode [ 1584.694310][T13331] device bridge7 entered promiscuous mode [ 1584.701237][T13331] device bridge8 entered promiscuous mode [ 1584.709187][T13331] bridge360: port 1(bond0) entered blocking state [ 1584.715617][T13331] bridge360: port 1(bond0) entered forwarding state [ 1584.725244][T13332] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x8000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d407000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:19 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:54:19 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c23940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x58000000}}}}}, 0x62) [ 1584.926149][T13377] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1585.048146][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:19 executing program 4: r0 = socket$inet(0x2, 0x803, 0x6) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) [ 1585.124808][T13390] device bond0 left promiscuous mode [ 1585.139722][T13390] device bond_slave_0 left promiscuous mode [ 1585.163257][T13390] device bond_slave_1 left promiscuous mode [ 1585.189139][T13390] device bond4 left promiscuous mode [ 1585.213917][T13390] device bridge7 left promiscuous mode [ 1585.235581][T13390] device bridge8 left promiscuous mode 14:54:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="8000000006000508810000000a0002"], 0x30}}, 0x0) [ 1585.263612][T13390] bridge360: port 1(bond0) entered disabled state [ 1585.340531][T13390] bridge361: port 1(bond0) entered blocking state [ 1585.360239][T13390] bridge361: port 1(bond0) entered disabled state [ 1585.383345][T13390] device bond0 entered promiscuous mode [ 1585.410261][T13390] device bond_slave_0 entered promiscuous mode [ 1585.428172][T13390] device bond_slave_1 entered promiscuous mode [ 1585.446503][T13390] device bond4 entered promiscuous mode [ 1585.462396][T13390] device bridge7 entered promiscuous mode [ 1585.483082][T13390] device bridge8 entered promiscuous mode [ 1585.507881][T13390] bridge361: port 1(bond0) entered blocking state [ 1585.514484][T13390] bridge361: port 1(bond0) entered forwarding state [ 1585.534005][T13382] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 14:54:20 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @private, @link_local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) [ 1585.832935][ T28] audit: type=1800 audit(1596725660.256:426): pid=13416 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16380 res=0 14:54:20 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002400010003000000000000000000a99468c6000006000400"], 0x1c}}, 0x0) listen(r1, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000180)=0x10) 14:54:20 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 14:54:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d507000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x9000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:20 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) sendto$inet6(r0, &(0x7f0000000340)="829af14c5e6898ded09302ec28d795627c1919878e684ef22eda4cde6d4760c486fdb102b0d6771c2e802609738fc57ba769d4c627b4cef1f73eafe92a60a05dd8c05c316044800f5c5063a7cf3896f35e990f1c0b6c3925ae343272", 0x5c, 0x10, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x800) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = accept$alg(r2, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x400fffe, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:54:20 executing program 4: syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x3, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 14:54:20 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c25940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x71000000}}}}}, 0x62) 14:54:20 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x59b5c136, @remote, 0x5}, 0x1c) [ 1586.255395][T13450] device bond0 left promiscuous mode 14:54:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d607000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1586.301773][T13450] device bond_slave_0 left promiscuous mode [ 1586.322450][T13450] device bond_slave_1 left promiscuous mode [ 1586.351042][T13450] device bond4 left promiscuous mode 14:54:20 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'u'}]}}, 0x0, 0x2a}, 0x20) [ 1586.375744][T13450] device bridge7 left promiscuous mode [ 1586.385159][T13450] device bridge8 left promiscuous mode [ 1586.400051][T13450] bridge361: port 1(bond0) entered disabled state [ 1586.468533][T13450] bridge362: port 1(bond0) entered blocking state [ 1586.486112][T13450] bridge362: port 1(bond0) entered disabled state [ 1586.511890][T13450] device bond0 entered promiscuous mode 14:54:21 executing program 4: unshare(0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x5, 0x0, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x80) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x1600bd78, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, 0x0}, 0x4000004) [ 1586.524526][T13450] device bond_slave_0 entered promiscuous mode [ 1586.545811][T13450] device bond_slave_1 entered promiscuous mode [ 1586.579174][T13450] device bond4 entered promiscuous mode [ 1586.599516][T13450] device bridge7 entered promiscuous mode [ 1586.628228][T13450] device bridge8 entered promiscuous mode [ 1586.655444][T13450] bridge362: port 1(bond0) entered blocking state [ 1586.662070][T13450] bridge362: port 1(bond0) entered forwarding state [ 1586.809681][T13468] validate_nla: 9 callbacks suppressed [ 1586.809690][T13468] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xa000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:21 executing program 4: unshare(0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x5, 0x0, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x80) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x1600bd78, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, 0x0}, 0x4000004) [ 1587.229302][T13470] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:21 executing program 4: 14:54:21 executing program 4: [ 1587.492527][T13507] device bond0 left promiscuous mode [ 1587.504177][T13507] device bond_slave_0 left promiscuous mode [ 1587.524779][T13507] device bond_slave_1 left promiscuous mode [ 1587.545843][T13507] device bond4 left promiscuous mode [ 1587.564088][T13507] device bridge7 left promiscuous mode 14:54:22 executing program 4: [ 1587.593286][T13507] device bridge8 left promiscuous mode [ 1587.612950][T13507] bridge362: port 1(bond0) entered disabled state [ 1587.690288][T13507] bridge363: port 1(bond0) entered blocking state [ 1587.701373][T13507] bridge363: port 1(bond0) entered disabled state [ 1587.721516][T13507] device bond0 entered promiscuous mode 14:54:22 executing program 4: [ 1587.736655][T13507] device bond_slave_0 entered promiscuous mode [ 1587.751635][T13507] device bond_slave_1 entered promiscuous mode [ 1587.781401][T13507] device bond4 entered promiscuous mode [ 1587.797970][T13507] device bridge7 entered promiscuous mode [ 1587.826281][T13507] device bridge8 entered promiscuous mode [ 1587.833644][T13507] bridge363: port 1(bond0) entered blocking state [ 1587.840192][T13507] bridge363: port 1(bond0) entered forwarding state [ 1587.962017][T13468] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:22 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c2a940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:22 executing program 4: 14:54:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d707000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x800e0000}}}}}, 0x62) 14:54:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xc000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:22 executing program 4: [ 1588.222305][T13546] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1588.285980][T13548] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1588.290274][T13546] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1588.339962][T13552] device bond0 left promiscuous mode [ 1588.345348][T13552] device bond_slave_0 left promiscuous mode [ 1588.374601][T13552] device bond_slave_1 left promiscuous mode 14:54:22 executing program 4: [ 1588.436286][T13552] device bond4 left promiscuous mode [ 1588.441611][T13552] device bridge7 left promiscuous mode [ 1588.461407][T13552] device bridge8 left promiscuous mode 14:54:23 executing program 4: [ 1588.524258][T13552] bridge363: port 1(bond0) entered disabled state [ 1588.581657][T13552] bridge364: port 1(bond0) entered blocking state [ 1588.594368][T13552] bridge364: port 1(bond0) entered disabled state [ 1588.603204][T13552] device bond0 entered promiscuous mode [ 1588.625066][T13552] device bond_slave_0 entered promiscuous mode [ 1588.651743][T13552] device bond_slave_1 entered promiscuous mode [ 1588.675256][T13552] device bond4 entered promiscuous mode [ 1588.685275][T13552] device bridge7 entered promiscuous mode 14:54:23 executing program 4: [ 1588.699665][T13552] device bridge8 entered promiscuous mode [ 1588.712752][T13552] bridge364: port 1(bond0) entered blocking state [ 1588.719314][T13552] bridge364: port 1(bond0) entered forwarding state 14:54:23 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r3 = gettid() r4 = getuid() r5 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, r5}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r2, 0x0, 0x0) splice(r6, 0x0, r1, 0x0, 0x400fffe, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000200)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r8 = accept4$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80c00) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) 14:54:23 executing program 4: 14:54:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d807000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1589.157526][T13576] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1589.175397][T13561] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1589.187584][T13561] __nla_validate_parse: 13 callbacks suppressed [ 1589.187594][T13561] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1589.203626][T13581] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1589.227745][T13576] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1589.240095][ T28] audit: type=1800 audit(1596725663.666:427): pid=13582 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16367 res=0 14:54:23 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c2b940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:23 executing program 4: 14:54:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xe000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0xffffff7f}}}}}, 0x62) 14:54:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600d907000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1589.507805][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:24 executing program 4: [ 1589.548758][T13614] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1589.570024][T13611] device bond0 left promiscuous mode [ 1589.576254][T13615] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1589.591005][T13611] device bond_slave_0 left promiscuous mode [ 1589.618225][T13611] device bond_slave_1 left promiscuous mode [ 1589.637628][T13611] device bond4 left promiscuous mode [ 1589.653417][T13611] device bridge7 left promiscuous mode 14:54:24 executing program 4: [ 1589.670718][T13611] device bridge8 left promiscuous mode [ 1589.693664][T13611] bridge364: port 1(bond0) entered disabled state 14:54:24 executing program 4: [ 1589.778542][T13611] bridge365: port 1(bond0) entered blocking state [ 1589.785296][T13611] bridge365: port 1(bond0) entered disabled state [ 1589.800696][T13611] device bond0 entered promiscuous mode 14:54:24 executing program 4: [ 1589.824360][T13611] device bond_slave_0 entered promiscuous mode [ 1589.832618][T13611] device bond_slave_1 entered promiscuous mode [ 1589.845880][T13611] device bond4 entered promiscuous mode [ 1589.852168][T13611] device bridge7 entered promiscuous mode [ 1589.865741][T13611] device bridge8 entered promiscuous mode 14:54:24 executing program 1: [ 1589.874159][T13611] bridge365: port 1(bond0) entered blocking state [ 1589.880690][T13611] bridge365: port 1(bond0) entered forwarding state [ 1589.900217][T13614] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:24 executing program 4: 14:54:24 executing program 1: [ 1590.444516][T13625] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1590.493453][ T28] audit: type=1800 audit(1596725664.916:428): pid=13643 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16377 res=0 14:54:25 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c2d940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x10000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:25 executing program 4: 14:54:25 executing program 1: 14:54:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600da07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0xa) 14:54:25 executing program 1: 14:54:25 executing program 4: [ 1590.788168][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1590.842680][T13683] device bond0 left promiscuous mode [ 1590.850868][T13682] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1590.863286][T13683] device bond_slave_0 left promiscuous mode [ 1590.880724][T13683] device bond_slave_1 left promiscuous mode [ 1590.897387][T13683] device bond4 left promiscuous mode 14:54:25 executing program 1: 14:54:25 executing program 4: [ 1590.918773][T13683] device bridge7 left promiscuous mode [ 1590.949817][T13683] device bridge8 left promiscuous mode [ 1590.971642][T13683] bridge365: port 1(bond0) entered disabled state 14:54:25 executing program 1: [ 1591.019958][T13683] bridge366: port 1(bond0) entered blocking state [ 1591.036538][T13683] bridge366: port 1(bond0) entered disabled state 14:54:25 executing program 4: [ 1591.074726][T13683] device bond0 entered promiscuous mode [ 1591.094639][T13683] device bond_slave_0 entered promiscuous mode [ 1591.114315][T13683] device bond_slave_1 entered promiscuous mode [ 1591.140039][T13683] device bond4 entered promiscuous mode [ 1591.164880][T13683] device bridge7 entered promiscuous mode [ 1591.183905][T13683] device bridge8 entered promiscuous mode [ 1591.215944][T13683] bridge366: port 1(bond0) entered blocking state [ 1591.222519][T13683] bridge366: port 1(bond0) entered forwarding state [ 1591.526361][T13679] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1591.612434][T13682] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1591.727961][ T28] audit: type=1800 audit(1596725666.156:429): pid=13693 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16367 res=0 14:54:26 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c2e940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:26 executing program 1: 14:54:26 executing program 4: 14:54:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600db07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1591.891938][T13731] validate_nla: 6 callbacks suppressed [ 1591.891948][T13731] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:26 executing program 4: 14:54:26 executing program 1: 14:54:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0xfdef) [ 1591.968558][T13738] device bond0 left promiscuous mode [ 1591.973901][T13738] device bond_slave_0 left promiscuous mode [ 1591.980631][T13739] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1592.007375][T13738] device bond_slave_1 left promiscuous mode [ 1592.026183][T13738] device bond4 left promiscuous mode 14:54:26 executing program 4: [ 1592.048237][T13738] device bridge7 left promiscuous mode [ 1592.066787][T13738] device bridge8 left promiscuous mode 14:54:26 executing program 1: [ 1592.089391][T13738] bridge366: port 1(bond0) entered disabled state [ 1592.153921][T13738] bridge367: port 1(bond0) entered blocking state [ 1592.185089][T13738] bridge367: port 1(bond0) entered disabled state 14:54:26 executing program 4: 14:54:26 executing program 1: [ 1592.223013][T13738] device bond0 entered promiscuous mode [ 1592.247139][T13738] device bond_slave_0 entered promiscuous mode [ 1592.293240][T13738] device bond_slave_1 entered promiscuous mode [ 1592.319902][T13738] device bond4 entered promiscuous mode [ 1592.325711][T13738] device bridge7 entered promiscuous mode [ 1592.335230][T13738] device bridge8 entered promiscuous mode [ 1592.351768][T13738] bridge367: port 1(bond0) entered blocking state [ 1592.358384][T13738] bridge367: port 1(bond0) entered forwarding state [ 1592.466374][T13731] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1592.835053][ T28] audit: type=1800 audit(1596725667.256:430): pid=13769 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16368 res=0 14:54:27 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c30940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:27 executing program 1: 14:54:27 executing program 4: 14:54:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3c40fcff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600dc07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x20001462) 14:54:27 executing program 4: [ 1593.079593][T13791] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:27 executing program 1: [ 1593.134003][T13791] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1593.147920][T13799] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1593.153717][T13801] device bond0 left promiscuous mode [ 1593.168293][T13801] device bond_slave_0 left promiscuous mode [ 1593.174514][T13801] device bond_slave_1 left promiscuous mode [ 1593.183980][T13801] device bond4 left promiscuous mode [ 1593.194245][T13801] device bridge7 left promiscuous mode [ 1593.214267][T13801] device bridge8 left promiscuous mode [ 1593.232898][T13801] bridge367: port 1(bond0) entered disabled state 14:54:27 executing program 1: 14:54:27 executing program 4: [ 1593.322144][T13801] bridge368: port 1(bond0) entered blocking state [ 1593.340358][T13801] bridge368: port 1(bond0) entered disabled state 14:54:27 executing program 1: [ 1593.373559][T13801] device bond0 entered promiscuous mode [ 1593.403565][T13801] device bond_slave_0 entered promiscuous mode 14:54:27 executing program 4: [ 1593.440464][T13801] device bond_slave_1 entered promiscuous mode [ 1593.475981][T13801] device bond4 entered promiscuous mode [ 1593.493950][T13801] device bridge7 entered promiscuous mode [ 1593.513389][T13801] device bridge8 entered promiscuous mode [ 1593.559915][T13801] bridge368: port 1(bond0) entered blocking state [ 1593.566471][T13801] bridge368: port 1(bond0) entered forwarding state [ 1593.998618][T13799] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1594.108659][ T28] audit: type=1800 audit(1596725668.537:431): pid=13808 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16368 res=0 14:54:28 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c58940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="4d1a000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0) 14:54:28 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@mcast1}, 0x14) 14:54:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600dd07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3f000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0xfffffdef) [ 1594.392734][T13849] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1594.419290][T13853] __nla_validate_parse: 8 callbacks suppressed [ 1594.419302][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:28 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)) [ 1594.480949][T13863] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1594.502648][T13863] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1594.512737][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:54:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000340)) 14:54:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x8847}, @void, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @current}, {@random, @broadcast}}}, 0x22) [ 1594.879387][T13861] device bond0 left promiscuous mode [ 1594.884945][T13861] device bond_slave_0 left promiscuous mode [ 1594.892529][T13861] device bond_slave_1 left promiscuous mode [ 1594.901258][T13861] device bond4 left promiscuous mode [ 1594.913799][T13861] device bridge7 left promiscuous mode [ 1594.923704][T13861] device bridge8 left promiscuous mode [ 1594.931763][T13861] bridge368: port 1(bond0) entered disabled state [ 1594.980780][T13861] bridge369: port 1(bond0) entered blocking state [ 1594.987521][T13861] bridge369: port 1(bond0) entered disabled state [ 1594.994811][T13861] device bond0 entered promiscuous mode [ 1595.001664][T13861] device bond_slave_0 entered promiscuous mode [ 1595.009306][T13861] device bond_slave_1 entered promiscuous mode [ 1595.022363][T13861] device bond4 entered promiscuous mode [ 1595.028090][T13861] device bridge7 entered promiscuous mode [ 1595.033932][T13861] device bridge8 entered promiscuous mode [ 1595.046633][T13861] bridge369: port 1(bond0) entered blocking state [ 1595.053103][T13861] bridge369: port 1(bond0) entered forwarding state [ 1595.066893][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1595.087978][T13849] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x40000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1595.156206][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1595.269183][T13863] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1595.284290][T13863] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1595.385877][ T28] audit: type=1800 audit(1596725669.817:432): pid=13905 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16365 res=0 14:54:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600de07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1595.481282][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:54:30 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0='bpq0\x00', 0x10) [ 1595.855275][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1595.896129][T13909] device bond0 left promiscuous mode [ 1595.901446][T13909] device bond_slave_0 left promiscuous mode [ 1595.930998][T13909] device bond_slave_1 left promiscuous mode [ 1595.939907][T13909] device bond4 left promiscuous mode [ 1595.951235][T13909] device bridge7 left promiscuous mode [ 1595.961510][T13909] device bridge8 left promiscuous mode [ 1595.968402][T13909] bridge369: port 1(bond0) entered disabled state [ 1596.010937][T13909] bridge370: port 1(bond0) entered blocking state [ 1596.017685][T13909] bridge370: port 1(bond0) entered disabled state [ 1596.025227][T13909] device bond0 entered promiscuous mode [ 1596.032156][T13909] device bond_slave_0 entered promiscuous mode [ 1596.040059][T13909] device bond_slave_1 entered promiscuous mode [ 1596.047313][T13909] device bond4 entered promiscuous mode [ 1596.052956][T13909] device bridge7 entered promiscuous mode [ 1596.060097][T13909] device bridge8 entered promiscuous mode [ 1596.073139][T13909] bridge370: port 1(bond0) entered blocking state [ 1596.079675][T13909] bridge370: port 1(bond0) entered forwarding state [ 1596.090792][T13916] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:30 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c64940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0xfffffffffffffdef) 14:54:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001e80)="4d19be16b52fe1fb60ae91b8d1f4a6a2b952c2c93cbcf7ae94165b44771b11e33f65490fbc4228b50fee20abb578bea101a063d8c9b605877016087a5f6a2cd59d04ee9c1435f612b8b118aed17d4f3d9f017e5de8e8c2aaabcf15fc8fb0a0fdf06526a011c9d6c54d5b3bd1289f208e155c3bef1625da330b7f26eb8649f31334d31786070e5595bd632ab6b562f08058216c8d18ed8242338972191b936aec8114731bc32cb73052ee2a5757b5dbc836b0ede3ebafb7c4e25692cb5c444649b749a4f378c2e117c8808dc9c2349259", 0xd0}], 0x1}, 0x4048884) 14:54:30 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0xfc, 0x0) 14:54:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600df07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x48000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e007000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x0, 0x1, 0x0, 0x7f}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "3289e4", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast1}}}}}}, 0x62) 14:54:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x69) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffffff61) [ 1596.816115][T13960] device bond0 left promiscuous mode [ 1596.821747][T13960] device bond_slave_0 left promiscuous mode [ 1596.853935][T13960] device bond_slave_1 left promiscuous mode [ 1596.890608][T13960] device bond4 left promiscuous mode [ 1596.904086][T13960] device bridge7 left promiscuous mode [ 1596.912888][T13960] device bridge8 left promiscuous mode [ 1596.925268][T13960] bridge370: port 1(bond0) entered disabled state [ 1596.983645][T13960] bridge371: port 1(bond0) entered blocking state [ 1596.990685][T13960] bridge371: port 1(bond0) entered disabled state [ 1596.999543][T13960] device bond0 entered promiscuous mode [ 1597.005678][T13960] device bond_slave_0 entered promiscuous mode [ 1597.012429][T13960] device bond_slave_1 entered promiscuous mode [ 1597.019581][T13960] device bond4 entered promiscuous mode [ 1597.025737][T13960] device bridge7 entered promiscuous mode [ 1597.032030][T13960] device bridge8 entered promiscuous mode [ 1597.040823][T13960] bridge371: port 1(bond0) entered blocking state [ 1597.047492][T13960] bridge371: port 1(bond0) entered forwarding state [ 1597.120410][T13967] validate_nla: 6 callbacks suppressed [ 1597.120419][T13967] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4c000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1597.179094][T13967] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1597.190451][T13950] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e107000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'sit0\x00', 0x1000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@null, @null, @bcast, @bcast, @netrom, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x800) tee(r2, r3, 0x54, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000450000580040000000049078ac141400ffffffff24006558459d37c5e2227ef1610000000000000800000086dd080088be200000001000000002570000000000002c0022eb00000000200000000200000000000000000000000800655800000000"], 0x62) [ 1597.480079][T14022] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1597.501769][T14013] device bond0 left promiscuous mode [ 1597.511971][T14013] device bond_slave_0 left promiscuous mode [ 1597.532950][T14013] device bond_slave_1 left promiscuous mode [ 1597.553377][T14013] device bond4 left promiscuous mode [ 1597.578471][T14013] device bridge7 left promiscuous mode [ 1597.598458][T14013] device bridge8 left promiscuous mode [ 1597.617954][T14013] bridge371: port 1(bond0) entered disabled state 14:54:32 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:54:32 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3b, 0x11) 14:54:32 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c69940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1597.693580][T14013] bridge372: port 1(bond0) entered blocking state [ 1597.700457][T14013] bridge372: port 1(bond0) entered disabled state [ 1597.708719][T14013] device bond0 entered promiscuous mode [ 1597.714487][T14013] device bond_slave_0 entered promiscuous mode 14:54:32 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x6a, 0x0, 0xc, 0x4, 0x7fffffff}) [ 1597.760351][T14013] device bond_slave_1 entered promiscuous mode [ 1597.784258][T14013] device bond4 entered promiscuous mode 14:54:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 14:54:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x1a, 0x0, 0x0) [ 1597.825587][T14013] device bridge7 entered promiscuous mode [ 1597.857432][T14042] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1597.865552][T14013] device bridge8 entered promiscuous mode 14:54:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x6b, &(0x7f00000000c0), 0xc) [ 1597.872962][T14013] bridge372: port 1(bond0) entered blocking state [ 1597.879487][T14013] bridge372: port 1(bond0) entered forwarding state [ 1597.943679][T14049] sctp: [Deprecated]: syz-executor.4 (pid 14049) Use of int in max_burst socket option deprecated. [ 1597.943679][T14049] Use struct sctp_assoc_value instead [ 1597.961022][T14022] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1598.000497][T14055] sctp: [Deprecated]: syz-executor.4 (pid 14055) Use of int in max_burst socket option deprecated. [ 1598.000497][T14055] Use struct sctp_assoc_value instead 14:54:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{}]}, 0x10) 14:54:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) 14:54:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x60000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e207000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000240)=0x6, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6}, {0x2, 0x0, 0x0, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xe808) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r4, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000040)=0x102) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) 14:54:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000080)="a83f93ae3771624ec76a02428e74793cd6893d08bf3b1d9191a23fcd634d2946fac44eca95edf3bd6c1372b6b10ffdd325572556b0e2c5be", 0x38, 0x0, 0x0, 0x0) [ 1598.263021][T14074] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @random="090986251a20", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x4}}}}}}}}, 0x6a) [ 1598.351851][T14080] device bond0 left promiscuous mode [ 1598.357998][T14080] device bond_slave_0 left promiscuous mode [ 1598.381381][T14080] device bond_slave_1 left promiscuous mode [ 1598.402559][T14080] device bond4 left promiscuous mode [ 1598.429825][T14080] device bridge7 left promiscuous mode [ 1598.461989][T14080] device bridge8 left promiscuous mode [ 1598.478580][T14080] bridge372: port 1(bond0) entered disabled state [ 1598.529861][T14080] bridge373: port 1(bond0) entered blocking state [ 1598.546391][T14080] bridge373: port 1(bond0) entered disabled state [ 1598.567678][T14080] device bond0 entered promiscuous mode [ 1598.590667][T14080] device bond_slave_0 entered promiscuous mode [ 1598.631720][T14080] device bond_slave_1 entered promiscuous mode [ 1598.649288][T14042] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1598.661174][T14080] device bond4 entered promiscuous mode [ 1598.693399][T14080] device bridge7 entered promiscuous mode [ 1598.714204][T14080] device bridge8 entered promiscuous mode [ 1598.745796][T14080] bridge373: port 1(bond0) entered blocking state [ 1598.752629][T14080] bridge373: port 1(bond0) entered forwarding state [ 1598.781700][T14074] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:33 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c6c940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000100), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 14:54:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e307000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x65580000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b80b0000010505"], 0xbb8}}, 0x0) [ 1599.497110][T14136] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1599.527272][T14136] __nla_validate_parse: 11 callbacks suppressed [ 1599.527282][T14136] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) [ 1599.592855][T14143] netlink: 2980 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1599.715092][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000009c0)={0x0, 0x93000000, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r1, 0xffff}, 0x14}}, 0x0) [ 1599.779671][T14131] device bond0 left promiscuous mode [ 1599.786478][T14131] device bond_slave_0 left promiscuous mode [ 1599.801423][T14131] device bond_slave_1 left promiscuous mode [ 1599.832772][T14131] device bond4 left promiscuous mode [ 1599.855512][T14131] device bridge7 left promiscuous mode [ 1599.861139][T14131] device bridge8 left promiscuous mode [ 1599.881612][T14131] bridge373: port 1(bond0) entered disabled state [ 1599.929629][T14131] bridge374: port 1(bond0) entered blocking state [ 1599.936500][T14131] bridge374: port 1(bond0) entered disabled state [ 1599.944902][T14131] device bond0 entered promiscuous mode [ 1599.952432][T14131] device bond_slave_0 entered promiscuous mode [ 1599.960527][T14131] device bond_slave_1 entered promiscuous mode [ 1599.968505][T14131] device bond4 entered promiscuous mode [ 1599.974441][T14131] device bridge7 entered promiscuous mode [ 1599.981799][T14131] device bridge8 entered promiscuous mode [ 1599.993604][T14131] bridge374: port 1(bond0) entered blocking state [ 1600.000137][T14131] bridge374: port 1(bond0) entered forwarding state [ 1600.018572][T14135] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '['}, {0x20, 'syzkaller1\x00'}, {}, {}, {0x20, 'syzkaller1\x00'}, {0x20, 'syzkaller1\x00'}], 0xa, "8e1127e183da8597dfcb0030db352e69fa98cbbce8a766350b2d699412a3173aaafe5211733e5628fd3febeb6d3a0451f170f88ef4430bd7b7e35f95396309834cc483ddebbc17e8d5ad1710079420f9d9e5afd1d313b2432b679305514d4423ac14dc3521b41a309913acbca9976a7f028bc493c27e44287ff6181133ced6c808b370825f4100c824691ada81d73dd241a6"}, 0xc5) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x400fffe, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) 14:54:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x68000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @random="090986251a20", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x4}}}}}}}}, 0x6a) [ 1600.140999][T14133] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e407000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1204, &(0x7f0000000000), &(0x7f0000000380)=0x8) [ 1600.258821][ T28] audit: type=1800 audit(1596725674.687:433): pid=14137 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15938 res=0 [ 1600.320836][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1600.395928][T14182] device bond0 left promiscuous mode [ 1600.401254][T14182] device bond_slave_0 left promiscuous mode [ 1600.433206][T14182] device bond_slave_1 left promiscuous mode [ 1600.458597][T14182] device bond4 left promiscuous mode [ 1600.478727][T14182] device bridge7 left promiscuous mode [ 1600.495056][T14182] device bridge8 left promiscuous mode [ 1600.512072][T14182] bridge374: port 1(bond0) entered disabled state [ 1600.589285][T14182] bridge375: port 1(bond0) entered blocking state [ 1600.615913][T14182] bridge375: port 1(bond0) entered disabled state [ 1600.623127][T14182] device bond0 entered promiscuous mode 14:54:35 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c6f940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:35 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) [ 1600.659982][T14182] device bond_slave_0 entered promiscuous mode [ 1600.670848][T14182] device bond_slave_1 entered promiscuous mode [ 1600.686633][T14182] device bond4 entered promiscuous mode [ 1600.698877][T14182] device bridge7 entered promiscuous mode [ 1600.709000][T14182] device bridge8 entered promiscuous mode 14:54:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 1600.733541][T14182] bridge375: port 1(bond0) entered blocking state [ 1600.740521][T14182] bridge375: port 1(bond0) entered forwarding state [ 1600.755280][T14172] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1600.802201][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1600.815794][T14203] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6c000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x0) 14:54:35 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random="2259ef7df931", @val, {@ipv4}}, 0x0) 14:54:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0x3cb2d83608d0bd21) [ 1601.451533][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1601.500923][T14215] device bond0 left promiscuous mode [ 1601.506817][T14215] device bond_slave_0 left promiscuous mode [ 1601.512935][T14215] device bond_slave_1 left promiscuous mode [ 1601.522191][T14215] device bond4 left promiscuous mode [ 1601.531202][T14215] device bridge7 left promiscuous mode [ 1601.540483][T14215] device bridge8 left promiscuous mode [ 1601.549811][T14215] bridge375: port 1(bond0) entered disabled state [ 1601.608998][T14215] bridge376: port 1(bond0) entered blocking state [ 1601.615583][T14215] bridge376: port 1(bond0) entered disabled state [ 1601.623209][T14215] device bond0 entered promiscuous mode [ 1601.639507][T14215] device bond_slave_0 entered promiscuous mode [ 1601.654909][T14215] device bond_slave_1 entered promiscuous mode [ 1601.661884][T14215] device bond4 entered promiscuous mode [ 1601.674360][T14215] device bridge7 entered promiscuous mode [ 1601.680879][T14215] device bridge8 entered promiscuous mode [ 1601.695413][ T28] audit: type=1800 audit(1596725676.117:434): pid=14230 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16181 res=0 [ 1601.722593][T14215] bridge376: port 1(bond0) entered blocking state [ 1601.729160][T14215] bridge376: port 1(bond0) entered forwarding state 14:54:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xe808) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="083c342007cba5001900", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100cd5d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r5, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r8, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r8, 0x1}, 0x8) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000450000600000000002049078ac141400ffffffff24006558000000000000080000050008000086dd00ff0008080088be000000001000000002570000000000002c0022eb000000200000040000000000000000000000000800655800000000"], 0x6a) 14:54:36 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e507000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x74000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 14:54:36 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c70940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e607000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1602.121969][T14273] device bond0 left promiscuous mode [ 1602.136346][T14274] validate_nla: 9 callbacks suppressed [ 1602.136356][T14274] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:36 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1602.180086][T14273] device bond_slave_0 left promiscuous mode [ 1602.210944][T14273] device bond_slave_1 left promiscuous mode [ 1602.247863][T14273] device bond4 left promiscuous mode [ 1602.278528][T14273] device bridge7 left promiscuous mode [ 1602.299239][T14273] device bridge8 left promiscuous mode [ 1602.317504][T14273] bridge376: port 1(bond0) entered disabled state 14:54:36 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1602.379395][T14273] bridge377: port 1(bond0) entered blocking state [ 1602.398368][T14273] bridge377: port 1(bond0) entered disabled state [ 1602.432837][T14273] device bond0 entered promiscuous mode [ 1602.446921][T14273] device bond_slave_0 entered promiscuous mode 14:54:36 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1602.492388][T14273] device bond_slave_1 entered promiscuous mode [ 1602.510744][T14273] device bond4 entered promiscuous mode [ 1602.518847][T14273] device bridge7 entered promiscuous mode [ 1602.538859][T14273] device bridge8 entered promiscuous mode [ 1602.552496][T14273] bridge377: port 1(bond0) entered blocking state [ 1602.559083][T14273] bridge377: port 1(bond0) entered forwarding state [ 1602.588569][T14280] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:37 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1602.667549][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1602.681925][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1602.707825][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1602.726663][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1602.739404][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1602.754654][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1602.785459][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1602.804613][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1602.970903][ T28] audit: type=1800 audit(1596725677.397:435): pid=14305 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15762 res=0 [ 1603.215814][T14280] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv4=@gre={{0x22, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x7f, 0x4, 0x0, @dev, @empty=0xffffffff, {[@timestamp={0x44, 0x8, 0xc0, 0x0, 0x7, [0x6]}, @lsrr={0x83, 0xb, 0x42, [@private=0xa010102, @rand_addr=0x64010102]}, @generic={0x89, 0x12, "0aa4d45a52334810cc009758a4975171"}, @timestamp={0x44, 0x10, 0x25, 0x0, 0x1, [0x1000, 0x9, 0x1]}, @lsrr={0x83, 0x7, 0x17, [@multicast2]}, @ssrr={0x89, 0x13, 0x78, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @empty, @empty]}, @end, @noop, @rr={0x7, 0xf, 0x8f, [@multicast2, @local, @remote]}, @generic={0x88, 0x12, "698936777be322be18621559246b2724"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c, 0x22eb, 0x0, {{0x0, 0x2, 0x40}}}}}}}, 0xd6) 14:54:37 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x1}, 0x20) 14:54:37 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c73940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7a000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e707000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 14:54:37 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1603.393300][T14326] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1603.422080][T14331] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7fff}]}, 0x24}}, 0x0) [ 1603.580680][T14336] device bond0 left promiscuous mode [ 1603.586361][T14336] device bond_slave_0 left promiscuous mode [ 1603.617021][T14336] device bond_slave_1 left promiscuous mode 14:54:38 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1603.646018][T14336] device bond4 left promiscuous mode [ 1603.656934][T14336] device bridge7 left promiscuous mode [ 1603.662870][T14336] device bridge8 left promiscuous mode [ 1603.677381][T14336] bridge377: port 1(bond0) entered disabled state 14:54:38 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1603.739416][T14336] bridge378: port 1(bond0) entered blocking state [ 1603.754189][T14336] bridge378: port 1(bond0) entered disabled state [ 1603.791530][T14336] device bond0 entered promiscuous mode [ 1603.810271][T14336] device bond_slave_0 entered promiscuous mode [ 1603.826767][T14336] device bond_slave_1 entered promiscuous mode [ 1603.834510][T14336] device bond4 entered promiscuous mode [ 1603.850926][T14336] device bridge7 entered promiscuous mode [ 1603.862514][T14336] device bridge8 entered promiscuous mode 14:54:38 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1603.922158][T14336] bridge378: port 1(bond0) entered blocking state [ 1603.928769][T14336] bridge378: port 1(bond0) entered forwarding state [ 1604.172492][T14331] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1604.216087][T14326] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1604.321257][ T28] audit: type=1800 audit(1596725678.747:436): pid=14340 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16259 res=0 14:54:38 executing program 1: 14:54:38 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e807000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1604.486011][T14390] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1604.527168][T14390] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:39 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c75940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x81000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="08000000000000000000450000580000000000049078ac141400ffffffff240065580000000000000800000086dd000088be000000001000000002570000000000002c0022eb00000000200000000200000000000000000000000800655800000000"], 0x62) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1f4, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x61}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x2a}}]}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x331}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf680}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4}, 0x48010) 14:54:39 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:39 executing program 1: 14:54:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600e907000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:39 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1604.754354][T14405] __nla_validate_parse: 11 callbacks suppressed [ 1604.754364][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:39 executing program 1: [ 1604.837919][T14413] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1604.848951][T14414] device bond0 left promiscuous mode [ 1604.850721][T14413] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1604.854267][T14414] device bond_slave_0 left promiscuous mode [ 1604.854441][T14414] device bond_slave_1 left promiscuous mode 14:54:39 executing program 1: [ 1604.907396][T14414] device bond4 left promiscuous mode 14:54:39 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1604.933672][T14414] device bridge7 left promiscuous mode [ 1604.946674][T14414] device bridge8 left promiscuous mode [ 1604.958659][T14414] bridge378: port 1(bond0) entered disabled state 14:54:39 executing program 1: 14:54:39 executing program 1: [ 1605.050158][T14414] bridge379: port 1(bond0) entered blocking state [ 1605.062548][T14414] bridge379: port 1(bond0) entered disabled state [ 1605.088654][T14414] device bond0 entered promiscuous mode [ 1605.107066][T14414] device bond_slave_0 entered promiscuous mode [ 1605.131883][T14414] device bond_slave_1 entered promiscuous mode [ 1605.150079][T14414] device bond4 entered promiscuous mode [ 1605.162770][T14414] device bridge7 entered promiscuous mode [ 1605.173166][T14414] device bridge8 entered promiscuous mode [ 1605.191972][T14414] bridge379: port 1(bond0) entered blocking state [ 1605.198580][T14414] bridge379: port 1(bond0) entered forwarding state [ 1605.209457][T14410] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:40 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c78940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:40 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:40 executing program 1: 14:54:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ea07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x86f4c8cb, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}, 0x62) 14:54:40 executing program 1: [ 1605.762963][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1605.795732][T14461] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:40 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1605.825151][T14457] device bond0 left promiscuous mode [ 1605.830474][T14457] device bond_slave_0 left promiscuous mode [ 1605.845556][T14457] device bond_slave_1 left promiscuous mode [ 1605.851807][T14457] device bond4 left promiscuous mode [ 1605.863978][T14457] device bridge7 left promiscuous mode 14:54:40 executing program 1: [ 1605.870725][T14468] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1605.876634][T14457] device bridge8 left promiscuous mode [ 1605.897959][T14457] bridge379: port 1(bond0) entered disabled state 14:54:40 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1605.949724][T14457] bridge380: port 1(bond0) entered blocking state [ 1605.966730][T14457] bridge380: port 1(bond0) entered disabled state [ 1605.994085][T14457] device bond0 entered promiscuous mode [ 1606.012158][T14457] device bond_slave_0 entered promiscuous mode 14:54:40 executing program 1: [ 1606.034497][T14457] device bond_slave_1 entered promiscuous mode [ 1606.068961][T14457] device bond4 entered promiscuous mode 14:54:40 executing program 1: [ 1606.092707][T14457] device bridge7 entered promiscuous mode [ 1606.120113][T14457] device bridge8 entered promiscuous mode [ 1606.168801][T14457] bridge380: port 1(bond0) entered blocking state [ 1606.175385][T14457] bridge380: port 1(bond0) entered forwarding state [ 1606.697726][T14464] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1606.769792][ T28] audit: type=1800 audit(1596725681.197:437): pid=14499 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16379 res=0 14:54:41 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c6394090424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) 14:54:41 executing program 1: 14:54:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600eb07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x88a8ffff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003e80)=[{{&(0x7f0000000100)=@caif=@util, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/112, 0x70}], 0x4, &(0x7f00000003c0)=""/133, 0x85}, 0x100}, {{&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000580)=""/202, 0xca}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000000780)=""/193, 0xc1}], 0x5, &(0x7f0000000900)=""/211, 0xd3}}, {{&(0x7f0000000a00)=@ax25={{0x3, @netrom}, [@null, @bcast, @null, @bcast, @rose, @default, @bcast, @netrom]}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/101, 0x65}], 0x1, &(0x7f0000000b40)=""/115, 0x73}, 0x8}, {{&(0x7f0000000bc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/9, 0x9}, {&(0x7f0000000c80)=""/131, 0x83}, {&(0x7f0000000d40)=""/54, 0x36}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x4, &(0x7f0000000dc0)=""/176, 0xb0}, 0x5}, {{&(0x7f0000000e80)=@sco, 0x80, &(0x7f0000002540)=[{&(0x7f0000000f00)=""/153, 0x99}, {&(0x7f0000000fc0)=""/165, 0xa5}, {&(0x7f0000001080)=""/119, 0x77}, {&(0x7f0000001100)=""/137, 0x89}, {&(0x7f00000011c0)=""/30, 0x1e}, {&(0x7f0000001200)=""/118, 0x76}, {&(0x7f0000001280)=""/93, 0x5d}, {&(0x7f0000001300)=""/226, 0xe2}, {&(0x7f0000002480)=""/181, 0xb5}], 0x9, &(0x7f0000002600)=""/32, 0x20}, 0x3}, {{&(0x7f0000002640)=@nfc_llcp, 0x80, &(0x7f00000029c0)=[{&(0x7f00000026c0)=""/207, 0xcf}, {&(0x7f00000027c0)=""/93, 0x5d}, {&(0x7f0000002840)=""/234, 0xea}, {&(0x7f0000002940)=""/88, 0x58}], 0x4, &(0x7f0000002a00)=""/153, 0x99}, 0x6}, {{&(0x7f0000002ac0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002b40)=""/25, 0x19}, {&(0x7f0000002b80)=""/233, 0xe9}, {&(0x7f0000002c80)=""/147, 0x93}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)}], 0x5, &(0x7f0000003e00)=""/67, 0x43}, 0x8}], 0x7, 0x80010163, &(0x7f0000004040)={0x0, 0x989680}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x400fffe, 0x0) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) 14:54:41 executing program 1: [ 1607.022453][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) [ 1607.071478][T14528] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1607.104620][T14532] device bond0 left promiscuous mode [ 1607.112734][T14532] device bond_slave_0 left promiscuous mode 14:54:41 executing program 1: [ 1607.135088][T14532] device bond_slave_1 left promiscuous mode [ 1607.148708][T14535] validate_nla: 7 callbacks suppressed [ 1607.148719][T14535] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1607.170390][T14532] device bond4 left promiscuous mode [ 1607.195576][T14532] device bridge7 left promiscuous mode [ 1607.212882][T14532] device bridge8 left promiscuous mode [ 1607.219992][T14535] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) [ 1607.239705][T14532] bridge380: port 1(bond0) entered disabled state 14:54:41 executing program 1: [ 1607.312402][T14532] bridge381: port 1(bond0) entered blocking state [ 1607.351519][T14532] bridge381: port 1(bond0) entered disabled state 14:54:41 executing program 4: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) [ 1607.387263][T14532] device bond0 entered promiscuous mode [ 1607.414221][T14532] device bond_slave_0 entered promiscuous mode [ 1607.443576][T14532] device bond_slave_1 entered promiscuous mode [ 1607.478278][T14532] device bond4 entered promiscuous mode [ 1607.511421][T14532] device bridge7 entered promiscuous mode [ 1607.532163][T14532] device bridge8 entered promiscuous mode [ 1607.557766][T14532] bridge381: port 1(bond0) entered blocking state [ 1607.564334][T14532] bridge381: port 1(bond0) entered forwarding state [ 1607.916390][T14528] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1607.972276][T14533] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1607.993794][ T28] audit: type=1800 audit(1596725682.418:438): pid=14554 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16384 res=0 14:54:42 executing program 4: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) 14:54:42 executing program 1: 14:54:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ec07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @void, @ipv6=@dccp_packet={0x3, 0x6, "546b8e", 0x3a6, 0x21, 0x1, @mcast2, @loopback, {[@fragment={0x16, 0x0, 0x1, 0x1, 0x0, 0x1, 0x66}, @dstopts={0x16, 0x40, [], [@jumbo={0xc2, 0x4, 0x8}, @generic={0x7, 0x6b, "a4242a3656cae42211ff6d86c364174c8d7317898de7609c03a32fdc512623b0b84498fc8e53f9ad20269978d9cd7a3096c57a01b06fad185bc8126dc126d28f1016c0e89015808ccf54ba9db9e1aac157535a4da0b461f04e828cda1addacb81b47d9744a3e7229861096"}, @jumbo={0xc2, 0x4, 0x81}, @generic={0xf8, 0xf4, "c3ea8f225eed1eb785fd2a69247196a5c459c213a110f5b59057a4c9bf6b924af70cfe2144ab05ea0c6a2d97fe3529200b0889ec72845cd9a5defea4fb67c529c3392acacf38264116f7e6b0407a22e7138226df47ed32d9e8fe278c376ca84b612568661654d6b0c08b6364c98b24051de67a288b7d909d7f6f6a548dddfe7659db4ce70ce47e4399e60efe9a698ae9e189ac0015a7bbe364415a088283b36bb5f5c1c22e0749115b989f37c648bfc09e02f7b5c4fe8502a5e37e0ac549ed90aad37971b819133950e31a2fa5b514605e4a066709bb6e41e804f8846a1ee4afdcf6db407e649b7e049c6d93b6b85fc86a372a93"}, @generic={0x6, 0x96, "650cb7f2d31b37d92194dcf4951d800808c8844d054877075ed841507d9c5d63ec7ebab161af810d21469e7c25de1e05b1b4cfe14164c4251317de505661cbaf8a6102432db68faf16848f45be9cccdd86f005e5db5563484d9b3e9fc2d8c489338485fa34e98aa166f57f78a2c9ba70b14b2d9c9eb528bd8f9d0c40e04a2401ce6016ffc49d5e477ae7c8492efab1872f2d184750d2"}]}, @routing={0x73, 0xc, 0x9ead9eaa784a8167, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private1, @loopback, @loopback, @ipv4={[], [], @local}]}, @srh={0x0, 0x10, 0x4, 0x8, 0x8, 0x38, 0x45, [@mcast2, @loopback, @mcast1, @loopback, @private1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2={0xfc, 0x2, [], 0x1}]}, @srh={0x2e, 0x6, 0x4, 0x3, 0x81, 0x8, 0x81, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x5, "7fa2d2", 0x80, "e813da"}, "7f6f1010edfd9fcab6804638faa8c5e485a73ab9f525bf022eada51a2bbe8eab9e4276eb3509fa6d84301cdd7794abb34a023ba2f74d4b78bbff038a370bcd274bb9fe44a2ef0df8568396f3420a89fcaa279e6f742a"}}}}, 0x3ce) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) 14:54:42 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c6394100424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1608.378757][T14590] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:42 executing program 1: 14:54:42 executing program 4: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) [ 1608.431674][T14591] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1608.440966][T14590] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:43 executing program 1: 14:54:43 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 14:54:43 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:43 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1608.968491][T14588] device bond0 left promiscuous mode [ 1608.982902][T14588] device bond_slave_0 left promiscuous mode [ 1608.993657][T14588] device bond_slave_1 left promiscuous mode [ 1609.004264][T14588] device bond4 left promiscuous mode [ 1609.032207][T14588] device bridge7 left promiscuous mode [ 1609.050506][T14588] device bridge8 left promiscuous mode 14:54:43 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1609.075112][T14588] bridge381: port 1(bond0) entered disabled state [ 1609.149112][T14588] bridge382: port 1(bond0) entered blocking state [ 1609.165310][T14588] bridge382: port 1(bond0) entered disabled state [ 1609.189837][T14588] device bond0 entered promiscuous mode [ 1609.207902][T14588] device bond_slave_0 entered promiscuous mode [ 1609.214433][T14588] device bond_slave_1 entered promiscuous mode [ 1609.223503][T14588] device bond4 entered promiscuous mode [ 1609.231994][T14588] device bridge7 entered promiscuous mode [ 1609.241339][T14588] device bridge8 entered promiscuous mode [ 1609.251981][T14588] bridge382: port 1(bond0) entered blocking state [ 1609.258610][T14588] bridge382: port 1(bond0) entered forwarding state 14:54:43 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ed07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1609.369925][ T28] audit: type=1800 audit(1596725683.798:439): pid=14632 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16359 res=0 [ 1609.392919][T14602] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xc3ffffff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1609.619840][T14654] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1609.671103][T14660] device bond0 left promiscuous mode [ 1609.679227][T14660] device bond_slave_0 left promiscuous mode [ 1609.686039][T14660] device bond_slave_1 left promiscuous mode [ 1609.692337][T14660] device bond4 left promiscuous mode [ 1609.699173][T14660] device bridge7 left promiscuous mode [ 1609.705739][T14660] device bridge8 left promiscuous mode [ 1609.717071][T14660] bridge382: port 1(bond0) entered disabled state [ 1609.770181][T14660] bridge383: port 1(bond0) entered blocking state [ 1609.776863][T14660] bridge383: port 1(bond0) entered disabled state [ 1609.784155][T14660] device bond0 entered promiscuous mode [ 1609.789850][T14660] device bond_slave_0 entered promiscuous mode [ 1609.796288][T14660] device bond_slave_1 entered promiscuous mode [ 1609.802533][T14660] device bond4 entered promiscuous mode [ 1609.808402][T14660] device bridge7 entered promiscuous mode [ 1609.814394][T14660] device bridge8 entered promiscuous mode [ 1609.821920][T14660] bridge383: port 1(bond0) entered blocking state [ 1609.828461][T14660] bridge383: port 1(bond0) entered forwarding state [ 1609.843113][T14659] __nla_validate_parse: 8 callbacks suppressed [ 1609.843122][T14659] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1609.873676][T14654] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:44 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c6394120424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:44 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x9100}, @val={0x3}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x66) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e0001006970366772657461700000004000028006000e000200000008000c000700000006001800cbc100001400060000000000000000000000000000000000060003000000000008000100", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="a7b632a8d46bfb0a069847eb0577b0e612f83d24ed6a532ee2ae67865a717039e26690b9ef5ddf965a83"], 0x84}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000002100010100000000000000000200000000000000000000000ce117006e19910e3b435b9d6be623d71bcd3895c3da5853af7153254b3935e28d084a335a59e06476c60595f95f06463a0b6a899c0bcf0558dff473543b1c976ada08d6cfe3ea463abebc9212e21af063fd46515848fe85458f4e363b170dee381ff98548be7d7858c5eae862f0bed925d0d11cc23b882015e70769f50d20a428f1d3a81c329aef", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="29f050f6dc1760506e0f827a97572ebe26f9e6ee9998c9b297231c3a26b3dceeb03943458c62dfafa70298d529458eb75be2651e011782429b72321c7bfda0af1215636da6233992e9e454992e481a74dcb04e11bc7ed2816c99ff4ec832d2c208187283ec05bb795203d43ce24e8c1493b12a083de2f583d71b6d5086370c2e0195548073a3e2d54e65baca61e795b751f2bb75832cec7b14d34c56085838b442aac6d3c92225dada10c7"], 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r7}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0xa1, 0x4e24, 0x80, 0x2, 0x20, 0x80, 0x89, r5, r7}, {0x81, 0xe7, 0x5, 0x7ff, 0xcb, 0x400, 0xfffffffffffffffa, 0x49}, {0x7ff, 0x7f, 0x2, 0x8}, 0xfffff1dc, 0x6e6bb3, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x32}, 0x4d4, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x34ff, 0x2, 0x3, 0x38, 0xffff, 0x7f, 0x3f}}, 0xe8) 14:54:44 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="c2", 0x1}], 0x1}}, {{&(0x7f00000007c0)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000980)=[{&(0x7f0000000800)="a8", 0x1}], 0x1}}], 0x2, 0x0) 14:54:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xcbc8f486, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ee07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:44 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1610.010957][T14681] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:44 executing program 1: sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000040)) [ 1610.099881][T14688] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:44 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}]}}]}, 0x44}}, 0x0) 14:54:44 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:44 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1610.495171][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1610.576476][T14687] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1610.594622][T14689] device bond0 left promiscuous mode [ 1610.600192][T14689] device bond_slave_0 left promiscuous mode [ 1610.622945][T14689] device bond_slave_1 left promiscuous mode [ 1610.636060][T14689] device bond4 left promiscuous mode [ 1610.641541][T14689] device bridge7 left promiscuous mode [ 1610.667877][T14689] device bridge8 left promiscuous mode [ 1610.709992][T14689] bridge383: port 1(bond0) entered disabled state [ 1610.763497][T14689] bridge384: port 1(bond0) entered blocking state [ 1610.786702][T14689] bridge384: port 1(bond0) entered disabled state [ 1610.794336][T14689] device bond0 entered promiscuous mode [ 1610.804660][T14689] device bond_slave_0 entered promiscuous mode [ 1610.810978][T14689] device bond_slave_1 entered promiscuous mode [ 1610.821925][T14689] device bond4 entered promiscuous mode [ 1610.828334][T14689] device bridge7 entered promiscuous mode [ 1610.834212][T14689] device bridge8 entered promiscuous mode [ 1610.849868][T14689] bridge384: port 1(bond0) entered blocking state [ 1610.856434][T14689] bridge384: port 1(bond0) entered forwarding state [ 1610.896009][T14704] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1610.943303][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1610.973733][T14705] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1610.984124][T14694] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1610.998473][ T28] audit: type=1800 audit(1596725685.428:440): pid=14719 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16378 res=0 14:54:45 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c6394350424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:45 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600ef07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xf0ffffff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:45 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x208000, 0x800}, 0x18) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:54:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="00000000000000000000450000580000000000049078ac141400ff240065580000004000000800000086dd080088be000000001000000002570000000000002c0022eb000000002000000002000000ffffffff000000000800655800000000000000"], 0x62) 14:54:45 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1611.393436][T14757] IPVS: ftp: loaded support on port[0] = 21 14:54:45 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100), 0x0) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1611.483023][T14769] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:46 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100), 0x0) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:46 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100), 0x0) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:46 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1611.925654][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1611.997641][T14765] device bond0 left promiscuous mode [ 1612.002976][T14765] device bond_slave_0 left promiscuous mode [ 1612.025184][T14765] device bond_slave_1 left promiscuous mode 14:54:46 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1612.046817][T14765] device bond4 left promiscuous mode [ 1612.052319][T14765] device bridge7 left promiscuous mode [ 1612.065109][T14765] device bridge8 left promiscuous mode [ 1612.085925][T14765] bridge384: port 1(bond0) entered disabled state [ 1612.144994][T14765] bridge385: port 1(bond0) entered blocking state [ 1612.161942][T14765] bridge385: port 1(bond0) entered disabled state [ 1612.189682][T14765] device bond0 entered promiscuous mode [ 1612.215838][T14765] device bond_slave_0 entered promiscuous mode [ 1612.229882][T14765] device bond_slave_1 entered promiscuous mode [ 1612.244809][T14765] device bond4 entered promiscuous mode [ 1612.250407][T14765] device bridge7 entered promiscuous mode [ 1612.274552][T14765] device bridge8 entered promiscuous mode [ 1612.295526][T14765] bridge385: port 1(bond0) entered blocking state [ 1612.303404][T14765] bridge385: port 1(bond0) entered forwarding state [ 1612.380866][T14763] IPVS: ftp: loaded support on port[0] = 21 [ 1612.414088][ T28] audit: type=1800 audit(1596725686.838:441): pid=14799 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16359 res=0 [ 1612.455824][T14762] validate_nla: 5 callbacks suppressed [ 1612.455834][T14762] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1612.473304][T14773] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:47 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c6394630424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:47 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfeffffff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f007000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1613.040925][T14859] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1613.065650][T14859] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1613.148406][T14872] device bond0 left promiscuous mode [ 1613.153734][T14872] device bond_slave_0 left promiscuous mode [ 1613.162324][T14875] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1613.177998][T14872] device bond_slave_1 left promiscuous mode [ 1613.195468][T14872] device bond4 left promiscuous mode [ 1613.207757][T14872] device bridge7 left promiscuous mode [ 1613.221214][T14872] device bridge8 left promiscuous mode [ 1613.237610][T14872] bridge385: port 1(bond0) entered disabled state [ 1613.303495][T14872] bridge386: port 1(bond0) entered blocking state [ 1613.319662][T14872] bridge386: port 1(bond0) entered disabled state [ 1613.333836][T14872] device bond0 entered promiscuous mode [ 1613.349237][T14872] device bond_slave_0 entered promiscuous mode [ 1613.361155][T14872] device bond_slave_1 entered promiscuous mode [ 1613.370326][T14872] device bond4 entered promiscuous mode [ 1613.380672][T14872] device bridge7 entered promiscuous mode [ 1613.390485][T14872] device bridge8 entered promiscuous mode [ 1613.398815][T14872] bridge386: port 1(bond0) entered blocking state [ 1613.405386][T14872] bridge386: port 1(bond0) entered forwarding state [ 1613.638994][ T28] audit: type=1800 audit(1596725688.068:442): pid=14875 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15750 res=0 14:54:49 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c73940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:49 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000300)=0x200, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r7, &(0x7f0000000040)) 14:54:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f107000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffc403c, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:49 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63946c0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1615.388363][T14920] __nla_validate_parse: 5 callbacks suppressed [ 1615.388469][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1615.435414][T14922] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1615.436377][T14926] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1615.443602][T14922] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:49 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1615.497717][T14920] device bond0 left promiscuous mode [ 1615.503230][T14920] device bond_slave_0 left promiscuous mode [ 1615.525083][T14920] device bond_slave_1 left promiscuous mode [ 1615.541950][T14920] device bond4 left promiscuous mode [ 1615.554345][T14920] device bridge7 left promiscuous mode [ 1615.570342][T14920] device bridge8 left promiscuous mode [ 1615.590350][T14920] bridge386: port 1(bond0) entered disabled state 14:54:50 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1615.668677][T14920] bridge387: port 1(bond0) entered blocking state [ 1615.676902][T14920] bridge387: port 1(bond0) entered disabled state [ 1615.688054][T14920] device bond0 entered promiscuous mode [ 1615.732983][T14920] device bond_slave_0 entered promiscuous mode [ 1615.757434][T14920] device bond_slave_1 entered promiscuous mode [ 1615.776306][T14920] device bond4 entered promiscuous mode 14:54:50 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1615.795314][T14920] device bridge7 entered promiscuous mode [ 1615.833282][T14920] device bridge8 entered promiscuous mode [ 1615.863094][T14920] bridge387: port 1(bond0) entered blocking state [ 1615.869738][T14920] bridge387: port 1(bond0) entered forwarding state [ 1615.926592][T14926] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:50 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:50 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:50 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1616.433152][T14926] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1616.449869][T14940] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 1616.464752][T14940] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.1'. 14:54:51 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c73940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:51 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1616.706056][T14958] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1616.719090][T14958] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:54:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c, 0x22eb, 0x0, {{0x0, 0x2, 0x2}}}}}}}, 0x66) 14:54:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffa888, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f207000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1616.906342][T15006] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:51 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0224fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:51 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f307000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1616.956973][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1617.022047][T15014] device bond0 left promiscuous mode [ 1617.046747][T15014] device bond_slave_0 left promiscuous mode [ 1617.052972][T15014] device bond_slave_1 left promiscuous mode 14:54:51 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1617.067705][T15014] device bond4 left promiscuous mode [ 1617.078101][T15014] device bridge7 left promiscuous mode [ 1617.083886][T15014] device bridge8 left promiscuous mode [ 1617.094412][T15023] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1617.104939][T15014] bridge387: port 1(bond0) entered disabled state [ 1617.158123][T15014] bridge388: port 1(bond0) entered blocking state 14:54:51 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1617.203772][T15014] bridge388: port 1(bond0) entered disabled state [ 1617.253308][T15014] device bond0 entered promiscuous mode [ 1617.280169][T15014] device bond_slave_0 entered promiscuous mode [ 1617.300024][T15014] device bond_slave_1 entered promiscuous mode [ 1617.314857][T15014] device bond4 entered promiscuous mode [ 1617.332374][T15014] device bridge7 entered promiscuous mode [ 1617.346844][T15014] device bridge8 entered promiscuous mode 14:54:51 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1617.367646][T15014] bridge388: port 1(bond0) entered blocking state [ 1617.374258][T15014] bridge388: port 1(bond0) entered forwarding state 14:54:52 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1617.960325][T15025] validate_nla: 3 callbacks suppressed [ 1617.960336][T15025] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1617.979155][T15036] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1617.998439][T15051] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:52 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c73940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:52 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1618.044777][T15031] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1618.067701][T15031] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1618.082835][T15022] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffff000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f407000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) r5 = accept$ax25(r2, &(0x7f0000000100)={{}, [@netrom, @remote, @remote, @default, @bcast, @default, @netrom, @null]}, &(0x7f0000000040)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000180)=@bpq0='bpq0\x00', 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x12, 0x4000000000000800, 0x1}, 0x12) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f0000000040), 0x0}, 0x20) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}, {0x8, 0x6558, 0x4}}}}}, 0x62) [ 1618.290916][T15078] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:52 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0324fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:52 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xd86dac9, 0x0) 14:54:53 executing program 4: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) [ 1618.549587][T15090] netlink: 'syz-executor.1': attribute type 23 has an invalid length. 14:54:53 executing program 4: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) [ 1618.789924][T15080] device bond0 left promiscuous mode [ 1618.799233][T15080] device bond_slave_0 left promiscuous mode [ 1618.821817][T15080] device bond_slave_1 left promiscuous mode 14:54:53 executing program 4: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) [ 1618.840820][T15080] device bond4 left promiscuous mode [ 1618.857686][T15080] device bridge7 left promiscuous mode [ 1618.867005][T15080] device bridge8 left promiscuous mode [ 1618.873649][T15080] bridge388: port 1(bond0) entered disabled state [ 1618.948162][T15080] bridge389: port 1(bond0) entered blocking state [ 1618.974868][T15080] bridge389: port 1(bond0) entered disabled state 14:54:53 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) [ 1618.999869][T15080] device bond0 entered promiscuous mode [ 1619.012294][T15080] device bond_slave_0 entered promiscuous mode [ 1619.042766][T15080] device bond_slave_1 entered promiscuous mode [ 1619.065424][T15080] device bond4 entered promiscuous mode 14:54:53 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) [ 1619.089103][T15080] device bridge7 entered promiscuous mode [ 1619.112784][T15080] device bridge8 entered promiscuous mode [ 1619.141610][T15080] bridge389: port 1(bond0) entered blocking state [ 1619.148212][T15080] bridge389: port 1(bond0) entered forwarding state [ 1619.284979][T15114] device bond0 left promiscuous mode [ 1619.290310][T15114] device bond_slave_0 left promiscuous mode [ 1619.334101][T15114] device bond_slave_1 left promiscuous mode [ 1619.341943][T15114] device bond4 left promiscuous mode [ 1619.367658][T15114] device bridge7 left promiscuous mode [ 1619.373310][T15114] device bridge8 left promiscuous mode [ 1619.382903][T15114] bridge389: port 1(bond0) entered disabled state [ 1619.428184][T15078] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1619.471536][T15094] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1619.494775][T15096] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:54:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffa888, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:54 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 14:54:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffff7f, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1619.517501][ T28] audit: type=1800 audit(1596725693.948:443): pid=15127 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16369 res=0 14:54:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f507000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1619.782920][T15140] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1619.816269][T15142] bridge390: port 1(bond0) entered blocking state [ 1619.824910][T15142] bridge390: port 1(bond0) entered disabled state [ 1619.842819][T15142] device bond0 entered promiscuous mode [ 1619.856693][T15142] device bond_slave_0 entered promiscuous mode [ 1619.866907][T15142] device bond_slave_1 entered promiscuous mode [ 1619.884549][T15142] device bond4 entered promiscuous mode [ 1619.890330][T15142] device bridge7 entered promiscuous mode [ 1619.897283][T15142] device bridge8 entered promiscuous mode [ 1619.907452][T15142] bridge390: port 1(bond0) entered blocking state [ 1619.914040][T15142] bridge390: port 1(bond0) entered forwarding state 14:54:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="00000000000000000000450000580000000000049078ac141400ffffffff240065580000000000000800000086dd080088be00000000100000000257ff0f000000002c0022eb00000000200000000200000000000200000000000800655800000000"], 0x62) 14:54:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffa888, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:54 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0524fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f607000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1619.952367][T15151] device bond0 left promiscuous mode [ 1619.998192][T15151] device bond_slave_0 left promiscuous mode [ 1620.017136][T15151] device bond_slave_1 left promiscuous mode [ 1620.037372][T15151] bridge6: port 1(bond0) entered disabled state [ 1620.103716][T15151] bridge9: port 1(bond0) entered blocking state [ 1620.123811][T15151] bridge9: port 1(bond0) entered disabled state [ 1620.130929][T15151] device bond0 entered promiscuous mode [ 1620.150996][T15151] device bond_slave_0 entered promiscuous mode [ 1620.184197][T15151] device bond_slave_1 entered promiscuous mode [ 1620.191843][T15151] bridge9: port 1(bond0) entered blocking state [ 1620.198749][T15151] bridge9: port 1(bond0) entered forwarding state 14:54:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffff9e, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1620.266624][T15163] bridge3: port 1(bond0) entered blocking state [ 1620.272951][T15163] bridge3: port 1(bond0) entered disabled state [ 1620.299038][T15163] device bond0 entered promiscuous mode [ 1620.322881][T15163] device bond_slave_0 entered promiscuous mode [ 1620.339047][T15163] device bond_slave_1 entered promiscuous mode 14:54:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffff7f, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1620.366148][T15163] bridge3: port 1(bond0) entered blocking state [ 1620.372476][T15163] bridge3: port 1(bond0) entered forwarding state [ 1620.415525][T15169] __nla_validate_parse: 12 callbacks suppressed [ 1620.415536][T15169] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:54:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000300)=0x200, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r7, &(0x7f0000000040)) [ 1620.508661][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1620.596543][T15182] device bond0 left promiscuous mode [ 1620.601898][T15182] device bond_slave_0 left promiscuous mode [ 1620.615385][T15182] device bond_slave_1 left promiscuous mode [ 1620.621475][T15182] device bond4 left promiscuous mode [ 1620.658249][T15182] device bridge7 left promiscuous mode [ 1620.679421][T15182] device bridge8 left promiscuous mode [ 1620.700813][T15182] bridge390: port 1(bond0) entered disabled state [ 1620.772654][T15182] bridge391: port 1(bond0) entered blocking state [ 1620.779979][T15182] bridge391: port 1(bond0) entered disabled state [ 1620.788828][T15182] device bond0 entered promiscuous mode [ 1620.795369][T15182] device bond_slave_0 entered promiscuous mode [ 1620.805774][T15182] device bond_slave_1 entered promiscuous mode [ 1620.812106][T15182] device bond4 entered promiscuous mode [ 1620.818842][T15182] device bridge7 entered promiscuous mode [ 1620.824831][T15182] device bridge8 entered promiscuous mode [ 1620.831947][T15182] bridge391: port 1(bond0) entered blocking state [ 1620.838609][T15182] bridge391: port 1(bond0) entered forwarding state [ 1620.848377][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1620.866108][T15158] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1620.911550][T15191] device bond0 left promiscuous mode [ 1620.924454][T15191] device bond_slave_0 left promiscuous mode [ 1620.946411][T15191] device bond_slave_1 left promiscuous mode [ 1620.949760][ T28] audit: type=1800 audit(1596725695.379:444): pid=15200 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16384 res=0 [ 1620.953646][T15191] bridge9: port 1(bond0) entered disabled state [ 1621.008756][T15191] bridge10: port 1(bond0) entered blocking state [ 1621.018698][T15191] bridge10: port 1(bond0) entered disabled state [ 1621.028558][T15191] device bond0 entered promiscuous mode [ 1621.035344][T15191] device bond_slave_0 entered promiscuous mode [ 1621.042021][T15191] device bond_slave_1 entered promiscuous mode [ 1621.053468][T15191] bridge10: port 1(bond0) entered blocking state [ 1621.060016][T15191] bridge10: port 1(bond0) entered forwarding state [ 1621.080418][T15201] device bond0 left promiscuous mode [ 1621.091877][T15201] device bond_slave_0 left promiscuous mode 14:54:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f707000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1621.107867][T15201] device bond_slave_1 left promiscuous mode 14:54:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffc403c, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:55 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0624fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1621.132446][T15201] device bond4 left promiscuous mode [ 1621.137881][T15201] device bridge7 left promiscuous mode [ 1621.143492][T15201] device bridge8 left promiscuous mode [ 1621.206297][T15201] bridge391: port 1(bond0) entered disabled state 14:54:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffffc3, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1621.283183][T15220] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1621.779375][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1621.798016][T15216] device bond0 left promiscuous mode [ 1621.803333][T15216] device bond_slave_0 left promiscuous mode [ 1621.812973][T15216] device bond_slave_1 left promiscuous mode [ 1621.820016][T15216] bridge10: port 1(bond0) entered disabled state [ 1621.856779][T15216] bridge11: port 1(bond0) entered blocking state [ 1621.865274][T15220] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1621.873693][T15216] bridge11: port 1(bond0) entered disabled state [ 1621.882554][T15216] device bond0 entered promiscuous mode [ 1621.904811][T15216] device bond_slave_0 entered promiscuous mode [ 1621.917173][T15216] device bond_slave_1 entered promiscuous mode [ 1621.924859][ T28] audit: type=1800 audit(1596725696.359:445): pid=15232 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15792 res=0 [ 1621.934759][T15216] bridge11: port 1(bond0) entered blocking state [ 1621.949589][T15216] bridge11: port 1(bond0) entered forwarding state [ 1621.986171][T15221] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1622.008369][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:56 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xd86dac9, 0x0) [ 1622.058216][T15225] bridge392: port 1(bond0) entered blocking state [ 1622.085376][T15225] bridge392: port 1(bond0) entered disabled state [ 1622.098094][T15225] device bond0 entered promiscuous mode [ 1622.112438][T15225] device bond_slave_0 entered promiscuous mode [ 1622.142721][T15225] device bond_slave_1 entered promiscuous mode [ 1622.156714][T15225] device bond4 entered promiscuous mode [ 1622.169246][T15225] device bridge7 entered promiscuous mode [ 1622.179064][T15225] device bridge8 entered promiscuous mode [ 1622.202956][T15225] bridge392: port 1(bond0) entered blocking state [ 1622.209497][T15225] bridge392: port 1(bond0) entered forwarding state 14:54:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x400fffe, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) writev(r2, &(0x7f0000001480)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="e17706c3b9a98a6696c9a333d43d2a193e6626d3ab28cc69be00237386f5a52d86f50b982a9b033598886f9b8097d1573839903dcb861a34db5ca8b1ddfe7fd8ae7c51c68968f4cb95c0a33d4183b1b10e", 0x51}, {&(0x7f0000001180)="d7b5c65589aeb6911e7daa3aefd3a216e5571433f2091c22c21e87a8284023845b5fcd01debe85a9fd957fed8fb90d362b98d018e99cc0152f873c2ca2219ece9c4b9c097c8a8fd0bd72a6af457ca087219b6a161dec6175bfcfad9f536871ede88a8c8c07d0a4858064e4822fa6cee36463dc8e70e5d933c8adf1ccc748", 0x7e}, {&(0x7f0000001200)="df4baa9aecfef8df7dd179bacb2cdfd55c37c4e8131ece83e588d0d0eeb10a56a012ebc826794715e6c2bb6a6f8066c85fe67f884daa55784527f54b2544a754d03ea1f8d016e4c9eecd04871d956c3948ee8d9b41d86a8d574c54b3fdabcdda36aefbe43425e91febfb6e3a04a5458825d076cdc496e7a26465f3f70e126774ce37a03b0eb5b31f04ce4c57bd9e39e3", 0x90}, {&(0x7f00000012c0)="5e4036a3abbea8e474477a5bce132073b399879ad4631c183a9227babe7de65e18658d9b3f4a9455e0b3a1fce86732a87c1a1a6c7b9a1b95da1d298dd6d4abe4bb8c6037af0cb63ccc440f807e8b3d035f61fce42467480bb457d66a7fea81a756cbb15cb4319d2d3d1cc1871e309d3e2f37db76cd938d232ff7837a7c19644a8e1848e95c68ebef5ebeb6114ac68f15f13ee99dbce6f0f14ad00db239def42d720d9b77e53df2a1a98573fadecd0b9fd9f9e4d61e62d6babea59cd1d502c00d68bd964cccecb783d4ce0e385fbca9cb51", 0xd1}, {&(0x7f0000000040)="c182f6e2c99ccf2784e11289d977466183c8857766ad041bbce395d648de102e0985b5466bfdd2cc10ff34ce6ade4289f0491d0cb27e904961af5394d1", 0x3d}], 0x6) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) socket$inet_mptcp(0x2, 0x1, 0x106) 14:54:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xe808) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="083c342007cba5001900", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100cd5d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r5, 0xbe, 0x49, 0x3ff, 0x2, 0x4, 0x0, 0x6, {r8, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x7, 0x0}}}, 0xfffffff8, 0x10001, 0x0, 0xffffffff, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r8, 0x1}, 0x8) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000450000600000000002049078ac141400ffffffff24006558000000000000080000050008000086dd00ff0008080088be000000001000000002570000000000002c0022eb000000200000040000000000000000000000000800655800000000"], 0x6a) 14:54:56 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0724fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f807000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'sit0\x00', 0x1000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@null, @null, @bcast, @bcast, @netrom, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x800) tee(r2, r3, 0x54, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000450000580040000000049078ac141400ffffffff24006558459d37c5e2227ef1610000000000000800000086dd080088be200000001000000002570000000000002c0022eb00000000200000000200000000000000000000000800655800000000"], 0x62) 14:54:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffff0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1622.856536][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1622.890249][T15260] device bond0 left promiscuous mode [ 1622.895992][T15260] device bond_slave_0 left promiscuous mode [ 1622.902165][T15260] device bond_slave_1 left promiscuous mode [ 1622.913285][T15260] device bond4 left promiscuous mode [ 1622.919377][T15260] device bridge7 left promiscuous mode [ 1622.925310][T15260] device bridge8 left promiscuous mode [ 1622.931265][T15260] bridge392: port 1(bond0) entered disabled state [ 1622.992394][ T28] audit: type=1800 audit(1596725697.419:446): pid=15272 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16375 res=0 [ 1623.014822][T15260] bridge393: port 1(bond0) entered blocking state [ 1623.021297][T15260] bridge393: port 1(bond0) entered disabled state [ 1623.028955][T15260] device bond0 entered promiscuous mode [ 1623.036708][T15260] device bond_slave_0 entered promiscuous mode [ 1623.043060][T15260] device bond_slave_1 entered promiscuous mode [ 1623.056715][T15260] device bond4 entered promiscuous mode [ 1623.062275][T15260] device bridge7 entered promiscuous mode [ 1623.072264][T15260] device bridge8 entered promiscuous mode [ 1623.088891][T15260] bridge393: port 1(bond0) entered blocking state [ 1623.095511][T15260] bridge393: port 1(bond0) entered forwarding state 14:54:57 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d1024fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1623.302236][T15255] validate_nla: 9 callbacks suppressed [ 1623.302246][T15255] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffff0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:54:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600f907000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:54:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3f000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1623.652371][T15288] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1623.675978][T15290] device bond0 left promiscuous mode [ 1623.681559][T15290] device bond_slave_0 left promiscuous mode [ 1623.701654][T15290] device bond_slave_1 left promiscuous mode [ 1623.716472][T15290] device bond4 left promiscuous mode [ 1623.722179][T15290] device bridge7 left promiscuous mode [ 1623.730937][T15290] device bridge8 left promiscuous mode [ 1623.737639][T15290] bridge393: port 1(bond0) entered disabled state [ 1623.788003][T15290] bridge394: port 1(bond0) entered blocking state [ 1623.795076][T15290] bridge394: port 1(bond0) entered disabled state [ 1623.804598][T15290] device bond0 entered promiscuous mode [ 1623.810647][T15290] device bond_slave_0 entered promiscuous mode [ 1623.820682][T15290] device bond_slave_1 entered promiscuous mode [ 1623.830097][T15290] device bond4 entered promiscuous mode [ 1623.836375][T15290] device bridge7 entered promiscuous mode [ 1623.842704][T15290] device bridge8 entered promiscuous mode [ 1623.859366][T15290] bridge394: port 1(bond0) entered blocking state [ 1623.866015][T15290] bridge394: port 1(bond0) entered forwarding state [ 1623.876994][T15291] device bond0 left promiscuous mode [ 1623.882708][T15291] device bond_slave_0 left promiscuous mode [ 1623.890341][T15291] device bond_slave_1 left promiscuous mode [ 1623.903425][T15291] bridge3: port 1(bond0) entered disabled state [ 1623.950380][T15291] bridge4: port 1(bond0) entered blocking state [ 1623.957102][T15291] bridge4: port 1(bond0) entered disabled state [ 1623.969779][T15291] device bond0 entered promiscuous mode [ 1623.975728][T15291] device bond_slave_0 entered promiscuous mode [ 1623.982201][T15291] device bond_slave_1 entered promiscuous mode [ 1623.990844][T15291] bridge4: port 1(bond0) entered blocking state [ 1623.997203][T15291] bridge4: port 1(bond0) entered forwarding state 14:54:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x400fffe, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000040)=0x101) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) [ 1624.034806][T15303] device bond0 left promiscuous mode [ 1624.047934][T15303] device bond_slave_0 left promiscuous mode 14:54:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3c40fcff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1624.067906][ T28] audit: type=1800 audit(1596725698.499:447): pid=15306 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=16382 res=0 [ 1624.068660][T15303] device bond_slave_1 left promiscuous mode [ 1624.157859][T15303] bridge11: port 1(bond0) entered disabled state [ 1624.229473][T15303] bridge12: port 1(bond0) entered blocking state [ 1624.241719][T15303] bridge12: port 1(bond0) entered disabled state [ 1624.265156][T15303] device bond0 entered promiscuous mode [ 1624.288932][T15303] device bond_slave_0 entered promiscuous mode [ 1624.328224][T15303] device bond_slave_1 entered promiscuous mode [ 1624.356802][T15303] bridge12: port 1(bond0) entered blocking state [ 1624.363279][T15303] bridge12: port 1(bond0) entered forwarding state 14:54:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600fa07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1624.414749][T15288] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:54:58 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d1224fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:54:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1624.470676][T15317] device bond0 left promiscuous mode [ 1624.482651][T15317] device bond_slave_0 left promiscuous mode [ 1624.508245][T15317] device bond_slave_1 left promiscuous mode 14:54:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1624.526758][T15317] bridge4: port 1(bond0) entered disabled state [ 1624.616912][T15317] bridge5: port 1(bond0) entered blocking state [ 1624.623236][T15317] bridge5: port 1(bond0) entered disabled state [ 1624.644804][T15317] device bond0 entered promiscuous mode [ 1624.650388][T15317] device bond_slave_0 entered promiscuous mode [ 1624.665264][T15317] device bond_slave_1 entered promiscuous mode [ 1624.693548][T15317] bridge5: port 1(bond0) entered blocking state [ 1624.699901][T15317] bridge5: port 1(bond0) entered forwarding state 14:54:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1624.737608][T15326] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1624.806476][T15336] device bond0 left promiscuous mode [ 1624.811808][T15336] device bond_slave_0 left promiscuous mode [ 1624.825313][T15336] device bond_slave_1 left promiscuous mode [ 1624.831500][T15336] device bond4 left promiscuous mode [ 1624.849686][T15336] device bridge7 left promiscuous mode [ 1624.866210][T15336] device bridge8 left promiscuous mode [ 1624.873464][T15336] bridge394: port 1(bond0) entered disabled state [ 1624.949446][T15336] bridge395: port 1(bond0) entered blocking state [ 1624.970799][T15336] bridge395: port 1(bond0) entered disabled state [ 1624.984017][T15336] device bond0 entered promiscuous mode [ 1624.989966][T15336] device bond_slave_0 entered promiscuous mode [ 1624.997129][T15336] device bond_slave_1 entered promiscuous mode [ 1625.005366][T15336] device bond4 entered promiscuous mode [ 1625.011306][T15336] device bridge7 entered promiscuous mode [ 1625.018031][T15336] device bridge8 entered promiscuous mode [ 1625.032788][T15336] bridge395: port 1(bond0) entered blocking state [ 1625.039372][T15336] bridge395: port 1(bond0) entered forwarding state [ 1625.053149][T15334] device bond0 left promiscuous mode [ 1625.059228][T15334] device bond_slave_0 left promiscuous mode [ 1625.073447][T15334] device bond_slave_1 left promiscuous mode [ 1625.079863][T15334] bridge12: port 1(bond0) entered disabled state [ 1625.126765][T15334] bridge13: port 1(bond0) entered blocking state [ 1625.133154][T15334] bridge13: port 1(bond0) entered disabled state [ 1625.144446][ T28] audit: type=1800 audit(1596725699.579:448): pid=15348 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15801 res=0 [ 1625.174194][T15334] device bond0 entered promiscuous mode [ 1625.180126][T15334] device bond_slave_0 entered promiscuous mode [ 1625.194632][T15334] device bond_slave_1 entered promiscuous mode [ 1625.211218][T15334] bridge13: port 1(bond0) entered blocking state [ 1625.218281][T15334] bridge13: port 1(bond0) entered forwarding state 14:54:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x10000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1625.499976][T15346] __nla_validate_parse: 9 callbacks suppressed [ 1625.499985][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1625.528312][T15347] device bond0 left promiscuous mode [ 1625.533736][T15347] device bond_slave_0 left promiscuous mode [ 1625.539822][T15347] device bond_slave_1 left promiscuous mode [ 1625.547645][T15347] bridge5: port 1(bond0) entered disabled state [ 1625.607189][T15347] bridge6: port 1(bond0) entered blocking state [ 1625.613696][T15347] bridge6: port 1(bond0) entered disabled state [ 1625.620841][T15347] device bond0 entered promiscuous mode [ 1625.629646][T15347] device bond_slave_0 entered promiscuous mode [ 1625.636396][T15347] device bond_slave_1 entered promiscuous mode [ 1625.644540][T15347] bridge6: port 1(bond0) entered blocking state [ 1625.650847][T15347] bridge6: port 1(bond0) entered forwarding state 14:55:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1625.664916][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 14:55:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:00 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d3524fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1625.706505][T15353] device bond0 left promiscuous mode [ 1625.711884][T15353] device bond_slave_0 left promiscuous mode [ 1625.760677][T15353] device bond_slave_1 left promiscuous mode [ 1625.774314][T15353] bridge13: port 1(bond0) entered disabled state [ 1625.835977][T15353] bridge14: port 1(bond0) entered blocking state [ 1625.842357][T15353] bridge14: port 1(bond0) entered disabled state [ 1625.860197][T15353] device bond0 entered promiscuous mode [ 1625.870256][T15353] device bond_slave_0 entered promiscuous mode [ 1625.893730][T15353] device bond_slave_1 entered promiscuous mode [ 1625.901242][T15353] bridge14: port 1(bond0) entered blocking state [ 1625.907685][T15353] bridge14: port 1(bond0) entered forwarding state 14:55:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600fb07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1625.953394][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1625.996323][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1626.026844][T15366] device bond0 left promiscuous mode [ 1626.032506][T15366] device bond_slave_0 left promiscuous mode [ 1626.066266][T15366] device bond_slave_1 left promiscuous mode [ 1626.083772][T15366] device bond4 left promiscuous mode [ 1626.091157][T15366] device bridge7 left promiscuous mode [ 1626.115466][T15366] device bridge8 left promiscuous mode [ 1626.132607][T15366] bridge395: port 1(bond0) entered disabled state [ 1626.191233][T15366] bridge396: port 1(bond0) entered blocking state [ 1626.202631][T15366] bridge396: port 1(bond0) entered disabled state [ 1626.220404][T15366] device bond0 entered promiscuous mode [ 1626.232830][T15366] device bond_slave_0 entered promiscuous mode [ 1626.247882][T15366] device bond_slave_1 entered promiscuous mode [ 1626.261413][T15366] device bond4 entered promiscuous mode [ 1626.277769][T15366] device bridge7 entered promiscuous mode [ 1626.291234][T15366] device bridge8 entered promiscuous mode [ 1626.309991][T15366] bridge396: port 1(bond0) entered blocking state [ 1626.316560][T15366] bridge396: port 1(bond0) entered forwarding state [ 1626.333444][T15368] device bond0 left promiscuous mode [ 1626.338989][T15368] device bond_slave_0 left promiscuous mode [ 1626.346727][T15368] device bond_slave_1 left promiscuous mode [ 1626.363701][T15368] bridge6: port 1(bond0) entered disabled state [ 1626.406653][ T28] audit: type=1800 audit(1596725700.839:449): pid=15369 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15805 res=0 [ 1626.431763][T15368] bridge7: port 1(bond0) entered blocking state [ 1626.439007][T15368] bridge7: port 1(bond0) entered disabled state [ 1626.447628][T15368] device bond0 entered promiscuous mode [ 1626.453850][T15368] device bond_slave_0 entered promiscuous mode [ 1626.460355][T15368] device bond_slave_1 entered promiscuous mode [ 1626.469028][T15368] bridge7: port 1(bond0) entered blocking state [ 1626.475423][T15368] bridge7: port 1(bond0) entered forwarding state [ 1626.504830][T15375] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1626.521434][T15377] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1626.551085][T15375] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1626.570098][T15376] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:55:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3929, 0x0, 0x0, {0x22, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r9 = accept$alg(r8, 0x0, 0x0) splice(r9, 0x0, r7, 0x0, 0x400fffe, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c010000f4cff90d0c4b7cf7043c647cd02b08ddfc130d93891d5ecf9cce616ff530d0a607d963cff4393c25453ce2a1d13d2315bae47ca9aa8e5b442d520703f7a5bf4b1679fa422e3b123a014cbd0a34f3cb7544efb9394ab857fffebedda2f4123bf54d9d0dd7c9765cd265376a9a2bd234827bc28eda87ba9dc36db0acced3ddee172e52f725135b04d4a5d51152b1975baa884cb24a14638857c0e8a6ba0b17a26bdb51ed3380aba4601226bd758cc0215d8146d4e3", @ANYRES16=r3, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0001000000"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x20000090) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/327], 0x62) 14:55:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x8000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600fc07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:55:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xe000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x2, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:01 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d6824fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1626.692335][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1626.749445][T15394] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1626.761263][T15392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1626.817786][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1626.870629][T15402] device bond0 left promiscuous mode [ 1626.876501][T15402] device bond_slave_0 left promiscuous mode [ 1626.900998][T15402] device bond_slave_1 left promiscuous mode [ 1626.934330][T15402] bridge14: port 1(bond0) entered disabled state [ 1626.986619][T15402] bridge15: port 1(bond0) entered blocking state [ 1626.993045][T15402] bridge15: port 1(bond0) entered disabled state [ 1627.015330][T15402] device bond0 entered promiscuous mode [ 1627.020905][T15402] device bond_slave_0 entered promiscuous mode [ 1627.044539][T15402] device bond_slave_1 entered promiscuous mode [ 1627.051987][T15402] bridge15: port 1(bond0) entered blocking state [ 1627.058434][T15402] bridge15: port 1(bond0) entered forwarding state [ 1627.084957][T15404] device bond0 left promiscuous mode [ 1627.094862][T15404] device bond_slave_0 left promiscuous mode [ 1627.121881][T15404] device bond_slave_1 left promiscuous mode 14:55:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1627.149552][T15404] device bond4 left promiscuous mode [ 1627.158617][T15404] device bridge7 left promiscuous mode [ 1627.167656][T15404] device bridge8 left promiscuous mode [ 1627.178961][T15404] bridge396: port 1(bond0) entered disabled state [ 1627.237344][T15404] bridge397: port 1(bond0) entered blocking state [ 1627.249833][T15404] bridge397: port 1(bond0) entered disabled state [ 1627.262087][T15404] device bond0 entered promiscuous mode [ 1627.276406][T15404] device bond_slave_0 entered promiscuous mode [ 1627.282983][ T28] audit: type=1800 audit(1596725701.709:450): pid=15415 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15818 res=0 [ 1627.283081][T15404] device bond_slave_1 entered promiscuous mode [ 1627.316787][T15404] device bond4 entered promiscuous mode [ 1627.322784][T15404] device bridge7 entered promiscuous mode [ 1627.339723][T15404] device bridge8 entered promiscuous mode [ 1627.361861][T15404] bridge397: port 1(bond0) entered blocking state [ 1627.368426][T15404] bridge397: port 1(bond0) entered forwarding state [ 1627.399052][T15408] device bond0 left promiscuous mode [ 1627.408767][T15408] device bond_slave_0 left promiscuous mode [ 1627.418077][T15408] device bond_slave_1 left promiscuous mode [ 1627.433986][T15408] bridge7: port 1(bond0) entered disabled state [ 1627.496213][T15408] bridge8: port 1(bond0) entered blocking state [ 1627.502608][T15408] bridge8: port 1(bond0) entered disabled state [ 1627.514788][T15408] device bond0 entered promiscuous mode [ 1627.520609][T15408] device bond_slave_0 entered promiscuous mode [ 1627.528797][T15408] device bond_slave_1 entered promiscuous mode [ 1627.537781][T15408] bridge8: port 1(bond0) entered blocking state 14:55:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x8000000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1627.544233][T15408] bridge8: port 1(bond0) entered forwarding state [ 1627.552220][T15394] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:55:02 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d6c24fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1627.612233][T15419] device bond0 left promiscuous mode [ 1627.617805][T15419] device bond_slave_0 left promiscuous mode [ 1627.631850][T15419] device bond_slave_1 left promiscuous mode [ 1627.640998][T15419] bridge15: port 1(bond0) entered disabled state [ 1627.696724][T15419] bridge16: port 1(bond0) entered blocking state [ 1627.703121][T15419] bridge16: port 1(bond0) entered disabled state [ 1627.712257][T15419] device bond0 entered promiscuous mode [ 1627.718391][T15419] device bond_slave_0 entered promiscuous mode [ 1627.726642][T15419] device bond_slave_1 entered promiscuous mode [ 1627.735097][T15419] bridge16: port 1(bond0) entered blocking state [ 1627.741930][T15419] bridge16: port 1(bond0) entered forwarding state [ 1627.783574][T15428] device bond0 left promiscuous mode [ 1627.789228][T15428] device bond_slave_0 left promiscuous mode 14:55:02 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80788c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:55:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x3, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1627.830577][T15428] device bond_slave_1 left promiscuous mode [ 1627.865557][T15428] bridge8: port 1(bond0) entered disabled state [ 1627.927654][T15428] bridge9: port 1(bond0) entered blocking state [ 1627.945506][T15428] bridge9: port 1(bond0) entered disabled state [ 1627.968210][T15428] device bond0 entered promiscuous mode [ 1627.984261][T15440] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 1627.988601][T15428] device bond_slave_0 entered promiscuous mode [ 1628.022720][T15428] device bond_slave_1 entered promiscuous mode [ 1628.061836][T15428] bridge9: port 1(bond0) entered blocking state [ 1628.068239][T15428] bridge9: port 1(bond0) entered forwarding state [ 1628.108968][T15394] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:55:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x32, 0x5a, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558, 0x0, 0x0, [0x8000]}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}}}}}}, 0x64) 14:55:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600fd07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1628.178677][T15441] device bond0 left promiscuous mode [ 1628.185894][T15441] device bond_slave_0 left promiscuous mode [ 1628.213654][T15441] device bond_slave_1 left promiscuous mode 14:55:02 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80758c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1628.260122][T15441] device bond4 left promiscuous mode [ 1628.297017][T15441] device bridge7 left promiscuous mode [ 1628.322961][T15441] device bridge8 left promiscuous mode [ 1628.350915][T15441] bridge397: port 1(bond0) entered disabled state [ 1628.441764][T15441] bridge398: port 1(bond0) entered blocking state [ 1628.477446][T15441] bridge398: port 1(bond0) entered disabled state [ 1628.510076][T15441] device bond0 entered promiscuous mode [ 1628.522717][T15441] device bond_slave_0 entered promiscuous mode [ 1628.534580][ T28] audit: type=1800 audit(1596725702.969:451): pid=15464 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15748 res=0 [ 1628.567707][T15441] device bond_slave_1 entered promiscuous mode [ 1628.578544][T15441] device bond4 entered promiscuous mode [ 1628.588051][T15441] device bridge7 entered promiscuous mode [ 1628.597888][T15441] device bridge8 entered promiscuous mode [ 1628.611367][T15441] bridge398: port 1(bond0) entered blocking state [ 1628.617960][T15441] bridge398: port 1(bond0) entered forwarding state [ 1628.722744][T15453] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:55:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x4, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1628.814353][T15460] netlink: 'syz-executor.4': attribute type 23 has an invalid length. 14:55:03 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:55:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600fe07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1629.281542][T15453] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1629.317750][T15485] device bond0 left promiscuous mode [ 1629.323439][T15485] device bond_slave_0 left promiscuous mode [ 1629.348144][T15485] device bond_slave_1 left promiscuous mode [ 1629.384382][T15485] device bond4 left promiscuous mode [ 1629.389705][T15485] device bridge7 left promiscuous mode [ 1629.408842][T15485] device bridge8 left promiscuous mode [ 1629.423724][T15485] bridge398: port 1(bond0) entered disabled state [ 1629.477180][T15485] bridge399: port 1(bond0) entered blocking state [ 1629.485693][T15485] bridge399: port 1(bond0) entered disabled state [ 1629.492934][T15485] device bond0 entered promiscuous mode [ 1629.500004][T15485] device bond_slave_0 entered promiscuous mode [ 1629.510701][T15485] device bond_slave_1 entered promiscuous mode [ 1629.517421][T15485] device bond4 entered promiscuous mode [ 1629.522969][T15485] device bridge7 entered promiscuous mode [ 1629.529690][T15485] device bridge8 entered promiscuous mode [ 1629.537959][T15485] bridge399: port 1(bond0) entered blocking state [ 1629.544508][T15485] bridge399: port 1(bond0) entered forwarding state [ 1629.579680][T15493] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:55:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x5, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000108000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:55:04 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80758c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1629.811087][T15493] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:55:04 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0409fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1629.888187][T15506] device bond0 left promiscuous mode [ 1629.898318][T15506] device bond_slave_0 left promiscuous mode [ 1629.919246][T15506] device bond_slave_1 left promiscuous mode [ 1629.934174][T15506] device bond4 left promiscuous mode [ 1629.939752][T15506] device bridge7 left promiscuous mode [ 1629.947617][T15506] device bridge8 left promiscuous mode [ 1629.955318][T15506] bridge399: port 1(bond0) entered disabled state [ 1630.004570][T15506] bridge400: port 1(bond0) entered blocking state [ 1630.009585][T15523] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1630.011662][T15506] bridge400: port 1(bond0) entered disabled state [ 1630.038896][T15506] device bond0 entered promiscuous mode [ 1630.046746][T15506] device bond_slave_0 entered promiscuous mode [ 1630.053931][T15506] device bond_slave_1 entered promiscuous mode [ 1630.065307][T15506] device bond4 entered promiscuous mode [ 1630.083358][T15506] device bridge7 entered promiscuous mode [ 1630.089282][T15506] device bridge8 entered promiscuous mode 14:55:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7400, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1630.107896][T15506] bridge400: port 1(bond0) entered blocking state [ 1630.114440][T15506] bridge400: port 1(bond0) entered forwarding state [ 1630.183206][T15518] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:55:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x2, 0x0, 0x8, 0x3, 0x5, 0x400}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) connect$llc(r5, &(0x7f0000000100)={0x1a, 0x7, 0x3, 0x83, 0x20, 0x5a, @multicast}, 0x10) [ 1630.285502][T15532] device bond0 left promiscuous mode [ 1630.290811][T15532] device bond_slave_0 left promiscuous mode [ 1630.316296][T15532] device bond_slave_1 left promiscuous mode [ 1630.338446][T15532] device bond4 left promiscuous mode [ 1630.351898][T15532] device bridge7 left promiscuous mode [ 1630.367508][T15532] device bridge8 left promiscuous mode [ 1630.384169][T15532] bridge400: port 1(bond0) entered disabled state [ 1630.487095][T15518] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1630.488531][T15527] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 1630.517156][T15539] device bond0 left promiscuous mode [ 1630.522870][T15539] device bond_slave_0 left promiscuous mode 14:55:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000208000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:55:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x6, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1630.560723][T15539] device bond_slave_1 left promiscuous mode [ 1630.577214][T15527] __nla_validate_parse: 13 callbacks suppressed [ 1630.577224][T15527] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1630.610672][T15539] bridge16: port 1(bond0) entered disabled state [ 1630.687622][T15539] bridge17: port 1(bond0) entered blocking state [ 1630.699441][T15539] bridge17: port 1(bond0) entered disabled state [ 1630.740580][T15539] device bond0 entered promiscuous mode [ 1630.768610][T15539] device bond_slave_0 entered promiscuous mode [ 1630.800283][T15539] device bond_slave_1 entered promiscuous mode [ 1630.839134][T15539] bridge17: port 1(bond0) entered blocking state [ 1630.845630][T15539] bridge17: port 1(bond0) entered forwarding state 14:55:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6000, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1631.234454][T15560] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1631.252007][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1631.279312][T15566] bridge401: port 1(bond0) entered blocking state [ 1631.289846][T15566] bridge401: port 1(bond0) entered disabled state [ 1631.297791][T15566] device bond0 entered promiscuous mode [ 1631.309820][T15566] device bond_slave_0 entered promiscuous mode [ 1631.317079][T15566] device bond_slave_1 entered promiscuous mode [ 1631.327980][T15566] device bond4 entered promiscuous mode [ 1631.334129][T15566] device bridge7 entered promiscuous mode [ 1631.339961][T15566] device bridge8 entered promiscuous mode [ 1631.351920][T15566] bridge401: port 1(bond0) entered blocking state [ 1631.358464][T15566] bridge401: port 1(bond0) entered forwarding state [ 1631.371206][T15567] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1631.383676][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1631.399086][T15574] device bond0 left promiscuous mode [ 1631.412345][T15574] device bond_slave_0 left promiscuous mode [ 1631.418903][T15574] device bond_slave_1 left promiscuous mode [ 1631.426261][T15574] bridge17: port 1(bond0) entered disabled state [ 1631.485893][T15574] bridge18: port 1(bond0) entered blocking state [ 1631.492287][T15574] bridge18: port 1(bond0) entered disabled state [ 1631.501698][T15574] device bond0 entered promiscuous mode [ 1631.508097][T15574] device bond_slave_0 entered promiscuous mode [ 1631.515320][T15574] device bond_slave_1 entered promiscuous mode [ 1631.522689][T15574] bridge18: port 1(bond0) entered blocking state [ 1631.529121][T15574] bridge18: port 1(bond0) entered forwarding state 14:55:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x5865, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1631.556118][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1631.573418][T15523] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x7, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000308000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:55:06 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80758c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:55:06 executing program 3: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x2000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val={0x0, 0x0, 0x0, 0x4}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) [ 1631.768042][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1631.818647][T15601] device bond0 left promiscuous mode [ 1631.827161][T15601] device bond_slave_0 left promiscuous mode [ 1631.861555][T15601] device bond_slave_1 left promiscuous mode [ 1631.874694][T15601] bridge18: port 1(bond0) entered disabled state [ 1631.916701][T15601] bridge19: port 1(bond0) entered blocking state [ 1631.929906][T15601] bridge19: port 1(bond0) entered disabled state [ 1631.938693][T15601] device bond0 entered promiscuous mode [ 1631.951789][T15601] device bond_slave_0 entered promiscuous mode [ 1631.958979][T15601] device bond_slave_1 entered promiscuous mode [ 1631.979915][T15601] bridge19: port 1(bond0) entered blocking state [ 1631.986486][T15601] bridge19: port 1(bond0) entered forwarding state [ 1631.996396][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600be07000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1632.096760][T15607] device bond0 left promiscuous mode [ 1632.102088][T15607] device bond_slave_0 left promiscuous mode [ 1632.113972][T15620] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1632.142485][T15607] device bond_slave_1 left promiscuous mode [ 1632.180621][T15607] device bond4 left promiscuous mode 14:55:06 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0435fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1632.213216][T15607] device bridge7 left promiscuous mode [ 1632.230109][T15607] device bridge8 left promiscuous mode [ 1632.249788][T15607] bridge401: port 1(bond0) entered disabled state [ 1632.294953][T15607] bridge402: port 1(bond0) entered blocking state [ 1632.301446][T15607] bridge402: port 1(bond0) entered disabled state [ 1632.321835][T15607] device bond0 entered promiscuous mode [ 1632.330800][T15607] device bond_slave_0 entered promiscuous mode [ 1632.346372][T15607] device bond_slave_1 entered promiscuous mode [ 1632.359878][T15607] device bond4 entered promiscuous mode [ 1632.373886][T15607] device bridge7 entered promiscuous mode [ 1632.379982][T15607] device bridge8 entered promiscuous mode [ 1632.394934][T15607] bridge402: port 1(bond0) entered blocking state [ 1632.401398][T15607] bridge402: port 1(bond0) entered forwarding state [ 1632.418972][T15613] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1632.490889][T15607] device bond0 left promiscuous mode [ 1632.496469][T15607] device bond_slave_0 left promiscuous mode [ 1632.502553][T15607] device bond_slave_1 left promiscuous mode [ 1632.537636][T15607] device bond4 left promiscuous mode [ 1632.567279][T15607] device bridge7 left promiscuous mode [ 1632.575581][T15607] device bridge8 left promiscuous mode [ 1632.581945][T15607] bridge402: port 1(bond0) entered disabled state 14:55:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x8, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000408000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:55:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xe00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1632.975812][T15650] bridge403: port 1(bond0) entered blocking state [ 1632.989578][T15650] bridge403: port 1(bond0) entered disabled state 14:55:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0xc00, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1633.038396][T15650] device bond0 entered promiscuous mode [ 1633.062917][T15650] device bond_slave_0 entered promiscuous mode [ 1633.069295][T15650] device bond_slave_1 entered promiscuous mode [ 1633.097141][T15650] device bond4 entered promiscuous mode [ 1633.102728][T15650] device bridge7 entered promiscuous mode [ 1633.129065][T15650] device bridge8 entered promiscuous mode [ 1633.173976][T15650] bridge403: port 1(bond0) entered blocking state [ 1633.180583][T15650] bridge403: port 1(bond0) entered forwarding state [ 1633.247580][ T28] audit: type=1800 audit(1596725707.679:452): pid=15671 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15791 res=0 [ 1633.321565][T15669] device bond0 left promiscuous mode [ 1633.327468][T15669] device bond_slave_0 left promiscuous mode [ 1633.341446][T15669] device bond_slave_1 left promiscuous mode [ 1633.355901][T15669] bridge19: port 1(bond0) entered disabled state [ 1633.416074][T15669] bridge20: port 1(bond0) entered blocking state [ 1633.422491][T15669] bridge20: port 1(bond0) entered disabled state [ 1633.430676][T15669] device bond0 entered promiscuous mode [ 1633.436950][T15669] device bond_slave_0 entered promiscuous mode [ 1633.444925][T15669] device bond_slave_1 entered promiscuous mode [ 1633.452691][T15669] bridge20: port 1(bond0) entered blocking state [ 1633.459143][T15669] bridge20: port 1(bond0) entered forwarding state [ 1633.468596][T15650] device bond0 left promiscuous mode [ 1633.481567][T15650] device bond_slave_0 left promiscuous mode [ 1633.489522][T15650] device bond_slave_1 left promiscuous mode [ 1633.502640][T15650] device bond4 left promiscuous mode [ 1633.508654][T15650] device bridge7 left promiscuous mode 14:55:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff0600b807000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1633.522971][T15650] device bridge8 left promiscuous mode [ 1633.530501][T15650] bridge403: port 1(bond0) entered disabled state 14:55:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0xfffd, @remote}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558, 0x0, 0x1}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) [ 1633.634540][T15681] device bond0 left promiscuous mode [ 1633.639867][T15681] device bond_slave_0 left promiscuous mode [ 1633.651305][T15681] device bond_slave_1 left promiscuous mode [ 1633.658944][T15681] bridge9: port 1(bond0) entered disabled state 14:55:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x9, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1633.716552][T15681] bridge10: port 1(bond0) entered blocking state [ 1633.735418][T15681] bridge10: port 1(bond0) entered disabled state [ 1633.757956][T15681] device bond0 entered promiscuous mode [ 1633.775720][T15681] device bond_slave_0 entered promiscuous mode [ 1633.793023][T15681] device bond_slave_1 entered promiscuous mode [ 1633.800487][T15681] bridge10: port 1(bond0) entered blocking state [ 1633.806993][T15681] bridge10: port 1(bond0) entered forwarding state [ 1633.845008][T15683] validate_nla: 9 callbacks suppressed [ 1633.845018][T15683] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:55:08 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000534d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1633.986054][T15702] bridge404: port 1(bond0) entered blocking state [ 1633.992559][T15702] bridge404: port 1(bond0) entered disabled state [ 1634.018654][T15702] device bond0 entered promiscuous mode [ 1634.025559][T15702] device bond_slave_0 entered promiscuous mode [ 1634.031828][T15702] device bond_slave_1 entered promiscuous mode [ 1634.041977][T15702] device bond4 entered promiscuous mode [ 1634.048265][T15702] device bridge7 entered promiscuous mode [ 1634.054868][T15702] device bridge8 entered promiscuous mode [ 1634.062329][T15702] bridge404: port 1(bond0) entered blocking state [ 1634.068860][T15702] bridge404: port 1(bond0) entered forwarding state 14:55:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000508000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:55:08 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 14:55:08 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0463fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1634.155579][T15719] netlink: 'syz-executor.4': attribute type 23 has an invalid length. 14:55:08 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x9, {{0xa, 0x4e21, 0x33c7d2fb, @dev={0xfe, 0x80, [], 0x2d}, 0x3ea524a1}}}, 0x88) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x400fffe, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) 14:55:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0xa, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1634.830902][T15730] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:55:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x400fffe, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x4, [], [@ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x18, {0x1, 0x4, 0x44, 0x0, [0x2, 0x6]}}, @pad1]}, 0x30) r6 = accept$alg(r2, 0x0, 0x0) splice(r6, 0x0, r1, 0x0, 0x400fffe, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000001400)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c}}}}}, 0x62) [ 1634.901766][T15730] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1634.915704][T15736] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 14:55:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000608000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:55:09 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x32, 0x1, [], [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x8}]}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400fffe, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0xe00, 0xf000) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0xe00, 0xf000) write$binfmt_script(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2, @ANYRESDEC=r5, @ANYBLOB="bd1568c43460e8e714c8c377d1129ce8276a983a2a26acdec30489f33003441821279903ffe9cf599245f139322c211613acbc131e5cee2bd1fc2caed5740112b3c996cc8ead03f3c6fa853d40aa9516f580fd687ab76a26800bc3ee790cc68e607ddb8f527a174995b2cc35516aad4d201056f98f8fe5a8f2bb54f964f937e931e3e148fa62633d0ee9fd7361b72f7d0baaa2d628f0a1a93ae0d237a956635ead4aa02c980757070034877523", @ANYRESOCT=r3, @ANYBLOB="b8c94d9651da7c8c73278136d38181b83c7d071dc23e6dc8f24d2b9bddb6634dfd5b77d805cca25be6b0c71b4e69", @ANYRESOCT=r6], 0x3af4701e) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 1635.114939][T15764] device bond0 left promiscuous mode [ 1635.120469][T15764] device bond_slave_0 left promiscuous mode [ 1635.147455][T15764] device bond_slave_1 left promiscuous mode [ 1635.184321][T15764] device bond4 left promiscuous mode [ 1635.212322][T15764] device bridge7 left promiscuous mode [ 1635.239253][T15764] device bridge8 left promiscuous mode [ 1635.276603][ T28] audit: type=1800 audit(1596725709.710:453): pid=15773 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15772 res=0 [ 1635.303506][T15764] bridge404: port 1(bond0) entered disabled state 14:55:09 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000531d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1635.369098][T15764] bridge405: port 1(bond0) entered blocking state [ 1635.392556][T15764] bridge405: port 1(bond0) entered disabled state [ 1635.418401][T15764] device bond0 entered promiscuous mode [ 1635.441569][T15764] device bond_slave_0 entered promiscuous mode [ 1635.469593][T15764] device bond_slave_1 entered promiscuous mode [ 1635.488866][T15764] device bond4 entered promiscuous mode [ 1635.499841][T15764] device bridge7 entered promiscuous mode [ 1635.510974][T15764] device bridge8 entered promiscuous mode [ 1635.546835][T15764] bridge405: port 1(bond0) entered blocking state [ 1635.553560][T15764] bridge405: port 1(bond0) entered forwarding state [ 1635.637859][T15771] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1635.653757][T15772] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1635.668709][T15780] __nla_validate_parse: 13 callbacks suppressed [ 1635.668718][T15780] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1635.690905][T15772] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0xc, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1636.150120][T15771] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 14:55:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000708000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1636.235050][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1636.308388][T15804] device bond0 left promiscuous mode [ 1636.313941][T15804] device bond_slave_0 left promiscuous mode [ 1636.333932][T15804] device bond_slave_1 left promiscuous mode [ 1636.340624][T15804] device bond4 left promiscuous mode [ 1636.347605][T15804] device bridge7 left promiscuous mode [ 1636.354094][T15804] device bridge8 left promiscuous mode [ 1636.360257][T15804] bridge405: port 1(bond0) entered disabled state [ 1636.426856][T15804] bridge406: port 1(bond0) entered blocking state [ 1636.434888][T15804] bridge406: port 1(bond0) entered disabled state [ 1636.442221][T15804] device bond0 entered promiscuous mode [ 1636.449587][T15804] device bond_slave_0 entered promiscuous mode [ 1636.456500][T15804] device bond_slave_1 entered promiscuous mode [ 1636.463562][T15804] device bond4 entered promiscuous mode [ 1636.469242][T15804] device bridge7 entered promiscuous mode [ 1636.475843][T15804] device bridge8 entered promiscuous mode [ 1636.485004][T15804] bridge406: port 1(bond0) entered blocking state [ 1636.491498][T15804] bridge406: port 1(bond0) entered forwarding state [ 1636.511543][T15812] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1636.520069][T15786] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 1636.529872][T15814] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1636.538127][T15786] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.1'. 14:55:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0xe, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:11 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d046cfc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1636.802311][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1636.871368][T15831] device bond0 left promiscuous mode [ 1636.877123][T15831] device bond_slave_0 left promiscuous mode [ 1636.894202][T15831] device bond_slave_1 left promiscuous mode [ 1636.900627][T15831] device bond4 left promiscuous mode [ 1636.907948][T15831] device bridge7 left promiscuous mode [ 1636.916136][T15831] device bridge8 left promiscuous mode [ 1636.922399][T15831] bridge406: port 1(bond0) entered disabled state [ 1636.967028][T15831] bridge407: port 1(bond0) entered blocking state [ 1636.973998][T15831] bridge407: port 1(bond0) entered disabled state [ 1636.982288][T15831] device bond0 entered promiscuous mode [ 1636.989813][T15831] device bond_slave_0 entered promiscuous mode [ 1636.998491][T15831] device bond_slave_1 entered promiscuous mode [ 1637.006379][T15831] device bond4 entered promiscuous mode [ 1637.012252][T15831] device bridge7 entered promiscuous mode [ 1637.019785][T15831] device bridge8 entered promiscuous mode [ 1637.029215][T15831] bridge407: port 1(bond0) entered blocking state [ 1637.035868][T15831] bridge407: port 1(bond0) entered forwarding state 14:55:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x19c, 0x0, 0x0, 0xff, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558, 0x63, 0x0, [], "c3f234a053908695fa892f31e16a3fe67dcead01ac9000bfbf25f767de507547c92ad7197cb7542be71bd83beaa64ec5232ded2b57e95c59d832ddb45fe381f11bac7095847ea0972a895f422781cbd1515b1001536d543ec86f56c12afcbfa2860ec5"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "4abd295d6b5886c93833a3794e01cfaf0daa215dd465e5e82bd71212f8cb9878dfa65de292629ddcd4e8a57267293bc1199dec6fb239a5dbe272e9e812f13c6b3d9e08d778fed2f49297b1d396f70a28a61e0864b2a804cd6a5e84c12faf97e15d60e5822f80fdf78e74e7652e56368a308bf6110ce6"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7fff, 0xc317, 0x0], "92909ad4224b08e600000000000000000000002fd1d51557871f0a51860b07349496f23ce0c99d7ee469d50d5b2ebb8528c7c9875c46f83d60d19b918769826776be73d87182ad52dd7c6a26f1e73793185d6ef2c562264ac6da1544c65aaa000000000000"}, {0x8, 0x88be, 0x0, {{}, 0x5702}}, {0x2c, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x2, {0x0, 0x18}}}}}}}, 0x1a6) 14:55:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000808000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1637.085606][T15830] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1637.094170][T15845] device bond0 left promiscuous mode [ 1637.147626][T15845] device bond_slave_0 left promiscuous mode [ 1637.181986][T15845] device bond_slave_1 left promiscuous mode 14:55:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0xa, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:11 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000531d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') [ 1637.200446][T15845] device bond4 left promiscuous mode [ 1637.207183][T15845] device bridge7 left promiscuous mode [ 1637.220917][T15845] device bridge8 left promiscuous mode [ 1637.228034][T15845] bridge407: port 1(bond0) entered disabled state 14:55:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x10, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1637.377921][T15852] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 14:55:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000908000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 1637.460579][T15832] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1637.589885][ T28] audit: type=1800 audit(1596725712.020:454): pid=15835 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cpu.stat" dev="sda1" ino=15790 res=0 [ 1637.792410][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1637.908824][T15877] bridge408: port 1(bond0) entered blocking state [ 1637.918225][T15877] bridge408: port 1(bond0) entered disabled state [ 1637.945205][T15877] device bond0 entered promiscuous mode [ 1637.950805][T15877] device bond_slave_0 entered promiscuous mode [ 1637.972787][T15877] device bond_slave_1 entered promiscuous mode [ 1637.985839][T15877] device bond4 entered promiscuous mode [ 1637.998058][T15877] device bridge7 entered promiscuous mode [ 1638.022647][T15877] device bridge8 entered promiscuous mode [ 1638.029756][T15877] bridge408: port 1(bond0) entered blocking state [ 1638.036303][T15877] bridge408: port 1(bond0) entered forwarding state [ 1638.061405][T15883] device bond0 left promiscuous mode [ 1638.069800][T15883] device bond_slave_0 left promiscuous mode [ 1638.085328][T15883] device bond_slave_1 left promiscuous mode [ 1638.098413][T15883] bridge10: port 1(bond0) entered disabled state [ 1638.166024][T15883] bridge11: port 1(bond0) entered blocking state [ 1638.172410][T15883] bridge11: port 1(bond0) entered disabled state [ 1638.197421][T15883] device bond0 entered promiscuous mode [ 1638.218105][T15883] device bond_slave_0 entered promiscuous mode [ 1638.232728][T15883] device bond_slave_1 entered promiscuous mode [ 1638.240832][T15883] bridge11: port 1(bond0) entered blocking state [ 1638.247322][T15883] bridge11: port 1(bond0) entered forwarding state 14:55:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x48, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 14:55:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000a08000000005600000025000000030004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 14:55:12 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'caif0\x00'}, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0424fc0a6c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x25, 0x4, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:55:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffecd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4c, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1638.631211][T15918] device bond0 left promiscuous mode [ 1638.657801][T15918] device bond_slave_0 left promiscuous mode [ 1638.689988][T15918] device bond_slave_1 left promiscuous mode [ 1638.708397][T15918] device bond4 left promiscuous mode [ 1638.719644][T15918] device bridge7 left promiscuous mode [ 1638.727432][T15918] device bridge8 left promiscuous mode [ 1638.735103][T15918] bridge408: port 1(bond0) entered disabled state [ 1638.779169][T15918] bridge409: port 1(bond0) entered blocking state [ 1638.802695][T15918] bridge409: port 1(bond0) entered disabled state [ 1638.822515][T15918] device bond0 entered promiscuous mode [ 1638.828094][T15918] device bond_slave_0 entered promiscuous mode [ 1638.842612][T15918] device bond_slave_1 entered promiscuous mode [ 1638.848965][T15918] device bond4 entered promiscuous mode [ 1638.861089][T15918] device bridge7 entered promiscuous mode [ 1638.871433][T15918] device bridge8 entered promiscuous mode [ 1638.879710][T15918] bridge409: port 1(bond0) entered blocking state [ 1638.886229][T15918] bridge409: port 1(bond0) entered forwarding state [ 1638.898016][T15919] device bond0 left promiscuous mode [ 1638.906888][T15919] device bond_slave_0 left promiscuous mode [ 1638.913593][T15919] device bond_slave_1 left promiscuous mode [ 1638.919819][T15919] bridge11: port 1(bond0) entered disabled state [ 1638.965611][T15919] bridge12: port 1(bond0) entered blocking state [ 1638.972071][T15919] bridge12: port 1(bond0) entered disabled state [ 1638.980068][T15919] device bond0 entered promiscuous mode [ 1638.986494][T15919] device bond_slave_0 entered promiscuous mode [ 1638.994774][T15919] device bond_slave_1 entered promiscuous mode [ 1639.002169][T15919] bridge12: port 1(bond0) entered blocking state [ 1639.008619][T15919] bridge12: port 1(bond0) entered forwarding state [ 1639.016541][ C1] ------------[ cut here ]------------