cket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x39c, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2100.488525][T28335] Š: (slave bridge710): Enslaving as an active interface with an up link [ 2100.506140][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:26:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000100000000000000020000000000000000ed7d3ec24bfc19d5650230fc2a2e63d2bda1280d97ef7e55763b56aa3d55ad21d09b8d74784ca494272a9229535bb47b0e7ced16d119c9a1b769e65a3e1e40252fc5db1a5ea8675833bad82b09b1cfdc40", @ANYRES32=0x0, @ANYBLOB="00000600000010001b00000000000000"], 0x3}}, 0x4000000) [ 2100.557120][T28346] Š: (slave bridge710): Releasing backup interface 09:26:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000001c80)=0x62, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_getroute={0x0, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfe, {0x80, 0x14, 0x0, 0xee, 0x7e, 0x4, 0xff, 0x0, 0x800}, [""]}, 0x20}}, 0x0) 09:26:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xc000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:16 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 2100.885602][T28362] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2100.913643][T28363] bond0: (slave bridge14): Enslaving as an active interface with an up link [ 2100.926847][T28335] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2100.941331][T28364] bond0: (slave bridge14): Releasing backup interface 09:26:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x300}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x4, 0xd1}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x240}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d7b1b724c3edbeb6c8bc330426b226fb5c502186c888f63c427567f106609cb10b5dff29cd0c95e75b1664d41f618f217f0f9789e9a91c38f5eb9c837c2722b0d8fb0de50fb70b4f4a9f5209ebbe425820134a0d0f4ec22eb4b31a5119585c530972ce51840df0a668a6d2d570983f75ecf8e4fe080f0c96aec0bad958dc05b0bf884ee603b20db5e16b8332acc235d633dc5b37b190dfc641219a28398a453afe9d817e867cbf030898a5befe5b46d0c1c7f45af03736668f848608281085426b6bcaa374fd4103e14a69d12af221a3c21099c69c7127ab4f0000", @ANYRES16=r4, @ANYBLOB="010000000000000000000e000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0205008}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "df81e9dc99430876317bcbe42aef"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0xffffffffffffff58}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) vmsplice(r7, &(0x7f0000003a40)=[{&(0x7f0000000740)="bc5260e6341efcb8cf3517898ec37f1197bab9ea73e1bab641afced926c289f936a06b26b216ba3623ea984666fb7e205229eb3b8e8836a4673013eda9fe11596d751f88088b10f7a0049fae804e7c896a3afceb26e8ec3666f6eb39b16eaab23a28dbf0cbf2c8ea9a9c87d13dcda2ecd49f61367493b549b1cc4f70f0895797bcb0e21fb7f5b86575d3a77234abf971feb458805c13118cefa8b0040b7e3aa7d00a24186c666610de3b5c1c39e92e604e1e74cfa9d89c5350", 0xb9}, {&(0x7f0000001840)="7a6159a868549422af94c7fc1fa18751bc79c2b1688b8b23cf19c4026d51df79621882949e9512a59c66a91b674901ac06cc8bad619879b7cb91376d38aeb3829663fbbb1d19dbf525cc82e98b4f634aaa6f80d04af38f5fa451bdf6675778caa7346733df9e6855c7dc6df66dccadaeb0cd604a0c15dc8737a83677896e5b3a5e7909931e220d6291052cc817bcd8ab42684efc4be0c576363278d4dbf884dfc3781141442d92622d454e7cc1c9b7edd0239f009d6391fc6c10a816f3adf2b26264591d7acd8300379abe7fb8e817c432a516e108fad7fd1b57ccaf6d", 0xdd}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="1efd25fd7063244f2997afb5c7ab3ef637b66415fd2a913fafeed23a1e19a3d9cc0993c66b996a", 0x27}, {&(0x7f0000002980)="158b396037dc7bfdb325d9d1c6270dfcb1e195486169cf692919afcfb0e0f44bbaa58d", 0x23}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f00000039c0)="0b80fc192634a66b2d827f3890f82f9bffb1a362d185748c53a727b8151c2c000ba6d4e35d805e84258e3ee2090c7fa1733fbde984b4022017a6528aa0fa6b4d4861f6f880cbc9e229ea60090e79a4816289ee5e70b045c66b183f62685e1836d0340800004111f6dc84b4c39c71c9420b4493dd1ac55a", 0x77}], 0x7, 0x1) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r8, &(0x7f0000000200)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x130034002}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_LABELS={0x8, 0x16, [0x3]}, @CTA_HELP={0x10, 0x5, {0x9, 0x1, 'snmp\x00'}}, @CTA_ID={0x8, 0xc, 0x1}, @CTA_HELP={0x10, 0x5, {0x9, 0x1, 'syz0\x00'}}]}, 0x44}, 0x1, 0x0, 0x0, 0xa0020}, 0x24000004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r9, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_opts(r9, 0x0, 0x9, &(0x7f0000000840)="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", 0x1000) [ 2101.388604][T28366] Š: (slave bridge710): Enslaving as an active interface with an up link 09:26:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x1df50300, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:16 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3ac, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:16 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 09:26:17 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 2101.647955][ T27] audit: type=1804 audit(1579166777.093:3022): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/2923/memory.events" dev="sda1" ino=16759 res=1 [ 2101.656514][T28407] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:17 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3ae, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2101.692280][ T27] audit: type=1800 audit(1579166777.093:3023): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16759 res=0 [ 2101.721513][T28413] Š: (slave bridge711): Enslaving as an active interface with an up link 09:26:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) socket(0x5, 0x9, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000300)=0xfffffffffffffcdf) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xa3c02c0a2f0ca685}, 0x8000090) [ 2101.752326][ T27] audit: type=1804 audit(1579166777.093:3024): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/2923/memory.events" dev="sda1" ino=16759 res=1 [ 2101.789514][T28415] Š: (slave bridge711): Releasing backup interface 09:26:17 executing program 1: syz_init_net_socket$ax25(0x9, 0x3, 0xca) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001840)) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000001880)) 09:26:17 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0xffffffff, @local, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x1}], 0x1}, 0x60) getsockopt(r0, 0x59d, 0x7, &(0x7f0000000040)=""/148, &(0x7f0000000100)=0x94) 09:26:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x500}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x4, 0xd1}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r1, 0x0, 0x156, 0x20000001, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @loopback, 0x7}, 0x5c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000140)=0xfffffffffffffe2e) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)={r5, 0x0, 0x1, '/'}, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={r5, @in={{0x2, 0x4e24, @broadcast}}, 0x1000e351, 0x4, 0x3, 0x9, 0xd4, 0x4, 0x2}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYBLOB="03008e0024bafb3fb49e22aab41b0345fe1f4aad86f73cce6479319f81cd4d1ffcc2cf83ebd202c61164a9e054d23f87ca0700a8617e7d38a55c339a96cdcc19b9e22803e50275e03b9bf091af8aea47f9eba94a432be1f8cb8fd6c8679e37ba56fc3681ac5dea5d87fe505a5ba2bd9eb16247f06027481c6781a4ad43e98c4420bc92a198d3c40539379a113644fdae4c69b833e703dac2dd85970890"], 0x96) 09:26:17 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) [ 2102.369933][T28413] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2102.586414][T28415] Š: (slave bridge711): Enslaving as an active interface with an up link 09:26:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3b2, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) r2 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xab, "f88bbba32e564493b8c2a264f0b8409ef4795bea23475575fce23f7bbf5d1ce1d94f7e80a3acd7aad38e5eac1896b613a699b74939dcb0c5bdc02acf68a1976b9e27c547995100b8660cf8318ac0d2aef9f24f8e43b624f504035a83a5929d80a17d273087a27f41c20e2585f323cc907eacdf3f5d463961b053ccf6c7f25f199618a4b456702da9cbfead24dd5c29b1fdb992ddb41e7fee1512303b9756b552b302e35935e4187bf54851"}, &(0x7f0000000180)=0xcf) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000200)=0x75) 09:26:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 09:26:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 09:26:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3c0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2102.913067][T28478] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2102.944828][T28484] Š: (slave bridge712): Enslaving as an active interface with an up link 09:26:18 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2102.967443][T28490] Š: (slave bridge712): Releasing backup interface 09:26:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x600}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="02008e000a000200a404000200000000b2940aa87f383c2e2340e167613f80fcd29285c673e0f2f3d6c78c0bf25f0197aba33bd68c91f477ca028e59426421a631de0750ddbc0f3c50cb4a2351fa4a9a69f2e26c589531e577e24ba120c5941994400eeaa727e5b7445f7e58feeb406e1830d2e9d1f870e628137ef97f522a6222131a5c6029cca251cb18e57c0c0345caa1fd4bd5ab5cc7a7b14b9f5d56f83c29817d2b699605ab915c5c17ade0872dd9bae2474ba21676958709e3"], 0x28}}, 0x0) 09:26:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 2103.331405][T28478] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3c2, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2103.514746][T28490] Š: (slave bridge712): Enslaving as an active interface with an up link [ 2103.528767][T28526] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2103.561130][T28526] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT 09:26:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x121d0000}, 0x0) 09:26:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x20000200, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:19 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3d2, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2103.794248][T28539] netlink: 'syz-executor.1': attribute type 39 has an invalid length. 09:26:19 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2103.866325][T28543] bond0: (slave bridge15): Enslaving as an active interface with an up link [ 2103.897877][T28544] Š: (slave bridge713): Enslaving as an active interface with an up link [ 2103.925639][T28546] Š: (slave bridge713): Releasing backup interface 09:26:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x700}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2104.155937][T28545] bond0: (slave bridge15): Releasing backup interface 09:26:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 2104.432281][T28541] validate_nla: 1 callbacks suppressed [ 2104.432290][T28541] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:19 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2104.488576][T28546] Š: (slave bridge713): Enslaving as an active interface with an up link 09:26:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3f000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:20 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3da, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2104.678683][T28579] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2104.722625][T28581] Š: (slave bridge714): Enslaving as an active interface with an up link 09:26:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) [ 2104.765864][T28582] Š: (slave bridge714): Releasing backup interface 09:26:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x900}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 2105.059962][T28579] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:20 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3de, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x40000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2105.269185][T28582] Š: (slave bridge714): Enslaving as an active interface with an up link 09:26:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) 09:26:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x700}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) 09:26:21 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:21 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3e8, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2105.579393][T28625] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2105.631440][T28630] Š: (slave bridge715): Enslaving as an active interface with an up link 09:26:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2105.676349][T28636] Š: (slave bridge715): Releasing backup interface 09:26:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xa00}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:21 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) [ 2105.942390][T28625] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:21 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3ea, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x48000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2106.098592][T28636] Š: (slave bridge715): Enslaving as an active interface with an up link 09:26:21 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 09:26:21 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3ee, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2106.332964][T28675] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:21 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2106.385858][T28679] Š: (slave bridge716): Enslaving as an active interface with an up link [ 2106.402438][T28681] Š: (slave bridge716): Releasing backup interface 09:26:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xa0008000}, 0x0) [ 2106.738503][T28675] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xe00}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:22 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3f2, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2106.928340][T28681] Š: (slave bridge716): Enslaving as an active interface with an up link 09:26:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 09:26:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x4c000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:22 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3f4, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2107.204808][T28723] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f5, 0x8001}) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000240)={{0x2, 0x0, @identifier="6679b5b13d0c67d09cf35a76e04d82af"}}) sendfile(r2, r3, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 09:26:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xfc000000}, 0x0) [ 2107.273434][T28725] Š: (slave bridge717): Enslaving as an active interface with an up link [ 2107.295752][T28723] Š: (slave bridge717): Releasing backup interface 09:26:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xfe800000}, 0x0) [ 2107.664510][T28728] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f5, 0x8001}) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000240)={{0x2, 0x0, @identifier="6679b5b13d0c67d09cf35a76e04d82af"}}) sendfile(r2, r3, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 09:26:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3fa, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x1802}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2107.849570][T28725] Š: (slave bridge717): Enslaving as an active interface with an up link 09:26:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xfec00000}, 0x0) 09:26:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x60000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000000c0)=0x2000000000000074, 0xff71) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.stat\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000440), &(0x7f00000004c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendto$inet(r0, 0x0, 0xdc, 0x8000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1}}], 0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f626f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)={r5, 0x0, 0x1, '/'}, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e22, 0x10001, @remote}}, 0x4, 0x0, 0x6, 0xcea, 0x40, 0x80, 0x20}, &(0x7f0000000100)=0x9c) 09:26:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x402, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2108.215560][T28771] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xff000000}, 0x0) [ 2108.264509][T28776] Š: (slave bridge718): Enslaving as an active interface with an up link 09:26:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:23 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @loopback}}, 0x5c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) openat$cgroup_ro(r1, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) [ 2108.401084][T28781] Š: (slave bridge718): Releasing backup interface [ 2108.471682][T28795] IPVS: ftp: loaded support on port[0] = 21 09:26:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) 09:26:24 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x500, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2108.848759][T28771] Š: (slave bridge718): Enslaving as an active interface with an up link 09:26:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 09:26:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x65580000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x2000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2109.024511][T28795] IPVS: ftp: loaded support on port[0] = 21 09:26:24 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:24 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2109.258674][T28827] Š: (slave bridge719): Enslaving as an active interface with an up link [ 2109.330464][T28829] Š: (slave bridge719): Releasing backup interface 09:26:25 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 09:26:25 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2109.782959][T28821] validate_nla: 2 callbacks suppressed [ 2109.782968][T28821] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2109.812604][T28844] Š: (slave bridge719): Enslaving as an active interface with an up link 09:26:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x68000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:25 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 2110.083508][T28865] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2110.189606][T28868] Š: (slave bridge720): Enslaving as an active interface with an up link [ 2110.209471][T28869] Š: (slave bridge720): Releasing backup interface [ 2110.517857][T28865] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2110.541453][T28869] Š: (slave bridge720): Enslaving as an active interface with an up link 09:26:26 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29e81d26aa7eff367ec3e89f4a4c20de9619e37f2f84b0d398c27cbd8bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f398e6a3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040), 0x100000001) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)={r7, 0x0, 0x1, '/'}, 0x9) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000003c0)={r7, 0xffffffff}, &(0x7f0000000400)=0x8) r8 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f0000000380)=0xfc53, 0x4) 09:26:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x2ee0}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:26 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x802, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 09:26:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x6c000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 2111.283523][T28877] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2111.313252][ T922] tipc: TX() has been purged, node left! [ 2111.359320][T28889] IPVS: ftp: loaded support on port[0] = 21 09:26:26 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x803, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2111.496660][T28877] Š: (slave bridge721): Enslaving as an active interface with an up link [ 2111.530143][T28890] Š: (slave bridge721): Releasing backup interface 09:26:27 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x2) [ 2111.966469][T28877] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:27 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:27 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x3f00}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2112.132646][T28897] IPVS: ftp: loaded support on port[0] = 21 [ 2112.156427][T28911] Š: (slave bridge721): Enslaving as an active interface with an up link 09:26:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d61637674617000040071030a0005000400000000000000"], 0x40}}, 0x0) 09:26:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x74000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x3) [ 2112.789023][T28948] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x4) 09:26:28 executing program 1: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000080), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r0, &(0x7f0000000200)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000500)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r3}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="ba", 0x1}], 0x1}}], 0x1, 0x0) [ 2112.835057][T28952] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2112.866550][T28948] Š: (slave bridge722): Enslaving as an active interface with an up link 09:26:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xa01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:28 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) socket(0x0, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x80, @empty}}, 0x24) sendmmsg(r3, &(0x7f0000005c00), 0x40000000000037b, 0xff00) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x14, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e558c5986fc300000000000087695931515781ae36a4d148f269399022f5ce7ec3b6d946be4fac9508cce4df4d7015f5190bbfb45e2584f446722053f1502598808b355f7b815bdb25ba86dddc0187f894de7e81145dd688759944bf09b0f55e7ca54b07bd9189de8defcea227e56f94ddc8d5e02f38fdcdad2e5cbc2b1f090ecf60605fa26c0e48a80a6bd544fa300d066a4d162d7ef85002024faf0831fffbb5f1a12a6f5f158a752eaf25a859b40a5738114700d7c9fd7ceae30304783fd7f2eec79c497f67691c322c32b685fd2695ff7cd46697d0ab29b4c6931dcec6ef2b025fa89be8fa2718e9e760dda1b0e49da0e65516618e9d031ea509a5fe08586e90f2083fa76b633c47b08ab9a2363debbc945e5c615db5e2fb593d973bba7c358a3d6da3885e675522a24d971c5308571057e8c6e91db057e0e64b7fa5f0138f7995b6b21e9a215e64bc2df0eac14d4f5f2e9af4999b2a6bd8985eeec9bf918d7d1d81bf928be90f7e23fa131b3061da885aaac4bf735a582db8b126656974599e9847a1338d830ee0675b12a5c6a86683667c02028e8285a96725c2bc91db7ca8f7062ee22fc4475cef338e01211aea0a00f2c4156bba05ebeafd22039914919b23bbbbfad6217628640c0096c029488b1871c67f316585da18fe9b039933d5dd610c92eab9916a5aea6923480aa4b9e710602a9795f58695bb9d114f52d2132569e1e198ee9594d0ca39a44cbedfc1a801a6"], 0xdd}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="814a00") sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x1, 0x3, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000840)={r7}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x4, 0x5}, 0x8) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}, {&(0x7f0000000440)="3a4a17acf0202ac68a3cc464ce9964a0d1cde301397c2eaf0830f0725c61495c5c92f386d9e6a75f2d7e", 0x2a}, {&(0x7f0000000900)="28c3fcc11231160ea04559965c2c9c56044c430cc490ffd96b8f2fb7415d44c5543bb7b2fac93d275dd37103be180389068337c4b12652c442765f20a60cf4c0a12eea0c926a842f6da6d39edd5c6e7d3b6c344ece78f80328a612f792a8ad248eef6473263ea8d736fadea2707d6991e4a24f1aea1f090b36a9b15bc1c1c2e88a693410e18f109ce0fdb3952fadc768e8a966f920fee160ba1c5cd51fde", 0x9e}], 0x3, 0x0, 0x0, 0xa000000}, 0x88040) [ 2113.032006][T28948] Š: (slave bridge722): Releasing backup interface [ 2113.202364][ T27] audit: type=1804 audit(1579166788.643:3025): pid=28979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/2942/memory.events" dev="sda1" ino=16781 res=1 09:26:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x4000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2113.253239][ T27] audit: type=1800 audit(1579166788.673:3026): pid=28979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16781 res=0 [ 2113.277814][ T27] audit: type=1804 audit(1579166788.683:3027): pid=28979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/2942/memory.events" dev="sda1" ino=16781 res=1 [ 2113.453769][T28991] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x6) [ 2113.505617][T28991] Š: (slave bridge722): Enslaving as an active interface with an up link 09:26:29 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xc01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2113.656081][T28948] Š: (slave bridge722): Releasing backup interface 09:26:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:29 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xa) 09:26:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7a000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2114.033008][ T27] audit: type=1804 audit(1579166789.473:3028): pid=28986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/2942/memory.events" dev="sda1" ino=16781 res=1 [ 2114.060511][ T27] audit: type=1800 audit(1579166789.473:3029): pid=28986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16781 res=0 [ 2114.124296][ T27] audit: type=1804 audit(1579166789.473:3030): pid=28982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/2942/memory.events" dev="sda1" ino=16781 res=1 09:26:29 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) socket(0x0, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x80, @empty}}, 0x24) sendmmsg(r3, &(0x7f0000005c00), 0x40000000000037b, 0xff00) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x14, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e558c5986fc300000000000087695931515781ae36a4d148f269399022f5ce7ec3b6d946be4fac9508cce4df4d7015f5190bbfb45e2584f446722053f1502598808b355f7b815bdb25ba86dddc0187f894de7e81145dd688759944bf09b0f55e7ca54b07bd9189de8defcea227e56f94ddc8d5e02f38fdcdad2e5cbc2b1f090ecf60605fa26c0e48a80a6bd544fa300d066a4d162d7ef85002024faf0831fffbb5f1a12a6f5f158a752eaf25a859b40a5738114700d7c9fd7ceae30304783fd7f2eec79c497f67691c322c32b685fd2695ff7cd46697d0ab29b4c6931dcec6ef2b025fa89be8fa2718e9e760dda1b0e49da0e65516618e9d031ea509a5fe08586e90f2083fa76b633c47b08ab9a2363debbc945e5c615db5e2fb593d973bba7c358a3d6da3885e675522a24d971c5308571057e8c6e91db057e0e64b7fa5f0138f7995b6b21e9a215e64bc2df0eac14d4f5f2e9af4999b2a6bd8985eeec9bf918d7d1d81bf928be90f7e23fa131b3061da885aaac4bf735a582db8b126656974599e9847a1338d830ee0675b12a5c6a86683667c02028e8285a96725c2bc91db7ca8f7062ee22fc4475cef338e01211aea0a00f2c4156bba05ebeafd22039914919b23bbbbfad6217628640c0096c029488b1871c67f316585da18fe9b039933d5dd610c92eab9916a5aea6923480aa4b9e710602a9795f58695bb9d114f52d2132569e1e198ee9594d0ca39a44cbedfc1a801a6"], 0xdd}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="814a00") sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x1, 0x3, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000840)={r7}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x4, 0x5}, 0x8) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}, {&(0x7f0000000440)="3a4a17acf0202ac68a3cc464ce9964a0d1cde301397c2eaf0830f0725c61495c5c92f386d9e6a75f2d7e", 0x2a}, {&(0x7f0000000900)="28c3fcc11231160ea04559965c2c9c56044c430cc490ffd96b8f2fb7415d44c5543bb7b2fac93d275dd37103be180389068337c4b12652c442765f20a60cf4c0a12eea0c926a842f6da6d39edd5c6e7d3b6c344ece78f80328a612f792a8ad248eef6473263ea8d736fadea2707d6991e4a24f1aea1f090b36a9b15bc1c1c2e88a693410e18f109ce0fdb3952fadc768e8a966f920fee160ba1c5cd51fde", 0x9e}], 0x3, 0x0, 0x0, 0xa000000}, 0x88040) [ 2114.173399][T29014] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:29 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xf00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x4002}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2114.276733][ T27] audit: type=1804 audit(1579166789.723:3031): pid=29024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/2943/memory.events" dev="sda1" ino=16565 res=1 [ 2114.321914][T29017] Š: (slave bridge723): Enslaving as an active interface with an up link 09:26:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe8697071") setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, {0x0, 0xff, 0x2}, {0x2, 0x1, 0x8fa9ffa3250fff38}, 0xfd}], 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001800)={0x0, @can={0x1d, r4}, @ethernet={0x1, @random="655cfd345e9c"}, @rc={0x1f, {0x40, 0x69, 0x22, 0x3, 0x9c, 0xff}, 0x33}, 0xb300, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680)='macvlan0\x00', 0x3, 0xfffffffffffffe01, 0x3f}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r8}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@delneigh={0x48, 0x1d, 0x10, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x0, r5, 0x2e, 0x1, 0x6}, [@NDA_MASTER={0x0, 0x9, 0x80}, @NDA_VNI={0x0, 0x7, 0x5c8d}, @NDA_VLAN={0xfffffffffffffdb5, 0x5, 0x1}, @NDA_IFINDEX={0x8, 0x8, r8}, @NDA_DST_IPV6={0x0, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 2114.402952][ T27] audit: type=1800 audit(1579166789.723:3032): pid=29024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16565 res=0 09:26:29 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xb) [ 2114.454503][T29014] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2114.484540][ T27] audit: type=1804 audit(1579166789.733:3033): pid=29024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/2943/memory.events" dev="sda1" ino=16565 res=1 09:26:30 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1002, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 09:26:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x81000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xc) 09:26:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x7a000000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:30 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x10ac, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2115.042564][T29067] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2115.083058][T29071] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2115.119263][T29072] Š: (slave bridge724): Enslaving as an active interface with an up link [ 2115.141145][T29074] bond0: (slave bridge16): Enslaving as an active interface with an up link [ 2115.152155][T29078] bond0: (slave bridge16): Releasing backup interface 09:26:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x80fe}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xe) [ 2115.415008][T29072] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2caa29c2e525f0971feac6b56ad4263d30000008", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf250100000006001d00fbff000005000d00010000000500120007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) connect$packet(r3, &(0x7f00000001c0)={0x11, 0xa530f152e415e05, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r4, 0x0, 0x0, 0xdacdb1e6819914ba, &(0x7f0000db4ff0)={0x2, 0x8000, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000400), 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x81, 0xdc, 0x7a, 0x8}, {0x1, 0x81, 0x81, 0x1}, {0x7, 0x40, 0x1, 0x6}, {0x9, 0x6, 0x1, 0x4}]}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000002180)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfb}}, 0xe) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000002180)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfb}}, 0xe) 09:26:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000100)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x4, 0xb7) socket$inet(0x2, 0x800, 0x3) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000000)={0x6}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00001100000000000400"/20, @ANYRES32=0x0, @ANYBLOB="0b500000000000001c00120008ff7f00b7b9719fd364677265001000020008000700e000"], 0x3c}}, 0x0) 09:26:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:31 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 09:26:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1200, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2115.799465][T29110] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @loopback}, 0x1c) r2 = socket(0xa, 0x80000, 0x70) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000080)=0xf5, 0x4) socket(0x27, 0xff412e5128039e8, 0x5) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="74797a307dec01a129a4d7022aa4cb9d36e4fc99b124072d7c"], 0x10098) 09:26:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf) [ 2115.914787][T29116] Š: (slave bridge725): Enslaving as an active interface with an up link [ 2115.931676][T29110] Š: (slave bridge725): Releasing backup interface 09:26:31 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) ioctl$sock_proto_private(r2, 0x89ec, &(0x7f0000000140)="62996fac436f9bf79f120683600faa4a8826b04253f706d3e5809b4bb64ec08a06fecd49b2b29f9cb0bee45104a226d34d88e001c4cfe974051727b16a") r3 = accept4$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80800) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000001c0)={0x81, 0x7e52, 0x2, 0x1f, 0x1, [{0x6, 0x3ff, 0x7fff, [], 0x1000}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x21, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e22, 0x1, 'wrr\x00', 0x1, 0x80000001, 0xb}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x5c0, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000001}, 0x0) r7 = socket(0x9, 0x0, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000006a40)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006a00)={&(0x7f00000069c0)={0x20, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000880) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f00000071c0)={'raw\x00'}, &(0x7f0000007240)=0x54) socketpair(0x8, 0x2, 0x1, &(0x7f0000007700)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r9, &(0x7f0000007740)={0x67446698, 0x0, 0x2, 0x3, 0x1, "b5a94da006629dc819611da3326082c1e23e57ada02047408a032d240ab6568cced2f731266bb8a5b8f0d3bd34383b76baa1fd0cbe"}, 0x45) r10 = socket$inet_dccp(0x2, 0x6, 0x0) pwrite64(r10, &(0x7f00000077c0)="2e1e8f1dd62a0caa9e447b63f026286a7734fc1a9471d34822f06cedbfae9fc0f3ae965df81eccba049d60f9d981d98a2b1f95e9c2d8483977f1fb991114778edfb7c8e93dd10a6866255034d28cd484c3201ed630a15d18fd162d14dd88c2412e95", 0x62, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000007840)={0x8, 'macvlan0\x00', {'ip6_vti0\x00'}, 0x7}) r11 = openat$cgroup_ro(r1, &(0x7f0000007ec0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(r11, 0x89e4, &(0x7f0000007f00)={0x22, "f6b0012058d5dbaa806067f4dfef41bd65751837d6a8e7cd8d46ed53bd855ead9628bb6f26095e7ace1860f8cc336c068d573ced81cc8a40fcbdc75765c28649caa96358207103c986533ab6a57541e841bb93179f106f690b81a4ae00b3467f48baa2850960ffaedab2449b66c2c4a3001253be2b74d7e1e458dceff29e8c11"}) r12 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000007fc0), 0x80800) sendmmsg(r12, &(0x7f000000a740)=[{{&(0x7f0000008000)=@isdn={0x22, 0x9, 0xff, 0x2a, 0x5}, 0x80, &(0x7f00000084c0)=[{&(0x7f0000008080)="27589fdb6664eda24e608806854ebc0f0c8b4dd774d9180d6932a629cf5b93ca904375e6541ded1458f8aca440809cac04d3606125cba1537f6cec99cb108bd08ae0550016951ece39ae47d626ad55b80d3639e7ec61fb8fc45805d6c2eb23e206822980593ea69dcb27df6fa6488de68524629f7e92d5198123432721a456209cec9e478d84a507aae652079a0d345bed7f6c346b89", 0x96}, {&(0x7f0000008140)="72e9c979cc5e35667071ef26b8c750934cf0464311b65e48ac8c54f5ebe3b65d931f4e1d404d23c21d510c12c75c49011c50a1339afeb5770405ef0f337cc071834219528edc1199370c00613208aba50a01470cc764b76eb5169f2081bc87c7822b0b5c013da5463151043e8e1659db9d54daf480c7d48693465f8a0524e051e5bd81255108c1ad6d8426594e64442dff1c690217950bbb8bdc87faccaccdcb20e2e9764ae803d1550832edfa", 0xad}, {&(0x7f0000008200)="9e421c3b282988e6b8f43388d8d64d636d5c6cbcb1e1546a5b942d7090e4fc93b1320b45cbc7ccada0182e18987a439f6d09e38b3ec16ad1a80609758274c4e8a62704dce4b4be45fdccbac589d82b670bb24f8773a39b15a419d35be14b4426a422eae9d1a23ae0e7d0d9e405a7090ef8c108", 0x73}, {&(0x7f0000008280)="9e2cd5f279a7b3704263f4bcdbbe434aab9d9035b204dffbc94f8f738c8eb56688f674c1cd4674f6020a3b2da6727300e0db1f8a47b607a84a94e6c5945eabd7d4217936ba4d213402060f3dce9066623d5420e3969fa551dbfcdbb0a79920f49eb56beb234e7ca4b1f245cd93b97efb6d1079967bb84a517039b721d45b7df264dc64f91fe153749fda0152d77c7d4c9ef0e66d6edecfa0f29eb922f09bedbf50e186945b97767b25adec73e1ba79c0eee0b7330807889e4d", 0xb9}, {&(0x7f0000008340)="0167d995580f22866d4b05add33c4b114a6328eac53e31092cd517d6f431d440f31467b53f9e9afee24fe35711d9aee2d9fddd2bb1d14f8c053456710f9d2c7be5d60db3a9bc096829178aa37330ed6868500c013ec38e75710b7ccdf165a71bdd7f1464e7983cd7c237a9e6a5afa2960e9ac311540862a82d5600baa474f404a673d0a966504c0fb1ff7e573b96842d09a6140a1f80adce2ca630d89296265e5a0fdd89245aa52cf65dfcee52f84d7de44197d56ca3ba5bfa57ca3d1535345f2021959094a41d79f8adc1f6f77b3bfe2d9cbf35601af2031aa09d", 0xdb}, {&(0x7f0000008440)="050cafd9b92392d042ebabfcf5287c90f394177062c146e327e51e61bc57cc0a6b", 0x21}, {&(0x7f0000008480)="c33b6e5b64de8d576bcdcc4d4ba3dd18fce450e4eba98139f7d379f31e3587944c2bbc1b4664f626257c4a9273f07b1b3df09b", 0x33}], 0x7}}, {{&(0x7f0000008540)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000085c0)="0c667dfc96195204c0cf38c0b09dda6049d53780c292ce43e139d0f4a61276d2e6c997eaf48041b5988cabf8c234d3a9e464f69c4b0fd54db162f21e823d5e27f92136030ea244e14897deee78150b894e2025f3b6a6876634588dab235fb336f5722675df16733c8752011c9e598927b48f5831d559c53ee26cd90c9aa820cce06487a26f4ecd485062dbd19321766bb42f6430ff55", 0x96}, {&(0x7f0000008680)="40d05cd9749456da50ad503cd5a0e04b5ed39d153bf677b2b4d88b504ed12557419a2d37650176b1cf4b349b066d4912d8ff27172e314be7f2e096d7a8dc06836e1ffe5b0b61c1b4dd0b8bd4ae96ad7a46f6b105e1eb1ca288b443c6c7181b04b4648b68db8ed1228cef64fd354cdea8f217d5184bcd124d406f84853567813e9bd1a09a45f6ea83cf4283866f650a8ef284341d90d8b404f0f56c02ca75728ad87fc06077737244e2474680a321aefc943beffbaeee307685276a5a80b1e20ec37cb4fb2bbfc793b64a3d7e5a1ab8549cc0deb7249d76c56ae432f2ac", 0xdd}], 0x2}}, {{0x0, 0x0, &(0x7f0000008800)=[{&(0x7f00000087c0)="034021638c528fdabbff74e1787b74cfabfd292e8892dea22af2413c54084ea23d88c6b7c4e063af5791a20f0a497671e4", 0x31}], 0x1, &(0x7f0000008840)=[{0x90, 0x101, 0x40, "9f60511ddfaa36873fa1c972d525dcc50dd1a4300ccaa2ffd81ba27d71f820bda7c3d56861eb8d58cd9f5742829bbcbe906b7bb4b7f8ab29afeab8b387f5cf6b2874bb5e8d33b138ee43a80e98cbd4ee2a2171f908aa51215402574a168a4a9954b929762bcdc6f05201b4cce279e99c7e96dad62d507c7b59e858"}, {0x78, 0x119, 0x3, "e71c927e1508e67a549bfe50136b06126a016cb05ea0e41633c6cf2d44fb96f482bd84ad8472b246842c52d68c089ccb360ccf4c9dfbf2259167f02ef684405d55d8b33362a065909bf2b505ad25855a289e9faf09b0d7d397fdb12ed2f64b648ca080e60b3ad81a"}, {0xa8, 0x3a, 0x0, "0a37bec5fb9db66dd5251b8a872a1d5d6af451ee8808c5583c04c715e07510808f4c7e83354ce1bf84e6d9b209b8ae39f1cd206c0459428c4133127705cc92ebe364587d9812df753153e746cc62083480c990351787240b0b62a0276f371984ff0a149be9a8c60339efa0d340443c45578e9d142f493da178ca9fa11c56c2a46fcd598522ece1d5f5fe404ab8e1b8252b1207629f1f76"}, {0xc0, 0xff, 0xfffffff7, "9919bd4a06bd768c2135f7f6776737b98f0692fbec4c119d3f923b057907f3eb2ec30e83e61e7148c00fd8df4ebd7b35562cee765aaef8c8e2fa7535c957a229a6ec78e550fb692878f108cca0a841c15e054512c393ac9f5e497c72cfe72132c919fe55cf3eac23745a8c311b36f224ef1262bc7b6e91739be0f56b5d100a72cd3591b889f65b7d252aa13305eb3c8ec15ffcb1c0b06b820f083a9b965063e30e5dc10da7e4c9cafaca"}, {0x60, 0x114, 0x10000, "59c567ebee4ab68948e80097ded1699fab6bb3bd061a6da0c4a1d486700f858c100b94d1e00be73c1e72301b852769fb483ca0080307e41a720f259b07bea9a065617af402b08de1d415cabae994efe1"}, {0xb8, 0x29, 0x8000, "b2891ff5e798fe1b3da14798bc3910d91d1d4685a0cbc7b6be09cc695af49ffba5886d839d0723963d295cca16638e80f0698fdbf745bbde635c515cd6b8318d67cd814f4b7c937e0472ce0d59a061421c78d992c0f19af53dfe305394a5a47b6083812215382c1125c33deb838f20e237f3236b9c88f8db3d4a4310446c1232c52caa3ffb08a2ab85cad2a59b453f993293ae71de3d785b6dc73c17376f1ee778048e0c9291a0"}], 0x388}}, {{&(0x7f0000008c00)=@llc={0x1a, 0x1, 0x7, 0xa7, 0x8, 0x7, @remote}, 0x80, &(0x7f0000008cc0)=[{&(0x7f0000008c80)="179afded42240ad251ce0973e9bd9e8a8e44d9093fdf3574c8b3ab2f5bb3a5d595f2c87fca8cbeade633daf34da747570be40d", 0x33}], 0x1, &(0x7f0000008d00)=[{0x48, 0x84, 0x200, "61eeb1c13c50798c58e4886b3f5f7ae79e26594e3f235bbebf50406de30d80ae3b37b479c1e7865d6282de52db77f54e87dc1d"}, {0x20, 0x0, 0xd5f, "35076fd1eed76d8af8dc"}, {0x1010, 0xbb, 0x5, "c269b3fe46a1f36ad54804f07481b920dabc0e5891a11b347f836d1107a2e63aea598b181628146774faab7825731366f94b85abf6265b113d87f4cd3cae5d4901891c3c48433a2f06eb2d13c32b6f5e68129cbe80ade1d111554459731cb1934bcf6841299a8523c99d22c73802d68cafa121bb9302398c83f1f83920dfa8bc189ca0421cad7d752925f08b05d6353d873315a036378d9f5a3895910d942df6abfc29b3abae4b65f6069db26937f702c237324cd5059c6479594b4a47b706115775d4678d5607fbf04970ebf19b204a5c4f80809027c2c3fdd3558b04d7239da7d8afc28e4892f97021b2e5eff3a75b5a168478f6627190da88f02dbc13963fd6c3c410848f66b6f7b641e0c7206018debe0e3b6cca3ffb8e6c852d4c3e971cae5aad78e86c9860f05de7ca6364789e6b77c05899657390fbf2fe1d4633cdb4c73b67fd8588e74cab32c5f2fe904303ee7ce99fbe6a58735b1711f151aeaeff7f4a4a8fe1ec4969c9ec938f9d84601ea67d9495ec68968ec67522ed99dd9d1bcb48d4b46905e17704de5fc076371717db0015a4d0283f0e160bcde408404f3677893854f094ad02ef494ea1392e12c7cd349bcddd5152bde68a39b44c66243927cc0a831adf79862117e4da8f21c145f08cea9d1a398562af961f05deb91bebd71afd67b46b1a106b442a606f128288e78919be62898bdb8f081d491851e2581d9767fd044f47f9fc19e86b145a3aef8e16e61fcf44dfa723dbc3c28e02581491a0a59598ce4c1d4d69e37b7cd41bb5e2dcfa136172b5f59526ebf6d5986be7705a4f2ee39241e14386677af74cf9b65bba7971c36fb8e7d0822d7cf821cf066ca17b3041b1d52ebb600886720ace88bb8da3db31fd20c9ed37fe9a3183be4b773196abbd00d00a8871ed4861ad43976750f4cadbc5161efff9ab9b6ed38119a0f83d5de80a5846fa431e900f789fb7491448b901d166be5833a2c2bdeac15d963676c56862751b5b095271b723f2d4db48889e86546bfc78195004ba37ddd9e291ce074a98afaf889f2124dc14f6a21eecbb349e420b754800d637f59d092d84113dc46cadee82e22dbb87811054a5904fe33c03a1b3c053486430221a6b9165637d7475d63fd0f093c6b55daf4db564122036bc5b9249f0a3f5e8529f71c28e929e885cf46b2516480cdbea7cf4c5fef4d2469154221b6933b3238d8d8cd0791fcafe002a25b09d1262f49d593aadc47bdce8fa81ac639a418d55c40a267de368068b48c95d1026d40161ffaa212ac2378a30103191cbfd878e347b2e610ad2cf4e7953c212c251c5ebaa2cb2d66f968a97fbc7407db45e0c356f3ebd771e0293a32aa54a3b2fabebc340471e0967db2bcb622dfff03b917df7eb4f553fbe1cb0fdf1a368cc70dad7d9c63cd24fb8d9f7359f2f8aa7c5ba55842a652b4a6e2c5740abc84b44fabe97a20f660864d66120df1a16be6bd50d1be107eda64a7c729ad3fe1c7c28d5d83722f351e3605c1d500098adfb39ef660f99a56f799b24cf6279d4a2d76bfe8e1a0464fbd428594ca7500012e7cffb2e3492252dccd5115c66f1d796d84e1f35519ec87ec87d1be6603e9a43dfd1498b61d5f1f7f56ecb4d6a1075b7469efacc7ebd0a29e0c0095add7c67fdfdbff33712cad7fa6a92918412656dc25212d4526501868074e5bdc54c4012e90ca9e2447e41e4ccfbb8421011bad9ad9c6e39146692a77a0d4632aba56fd527c6142867aa86f5c30569809971d68963fd0a79ac7ec6589992eca60f107bd9b7b986cc698673489abdebf0b017541eaa87d0a109d9e693a304e393827410427c2e0a9c2e615960fa2765fb0dd7e5477c8bdac6df5f8d992be07a26c5fa3859538878a1ef283cdd2b2ebd42edec574a305caac28e883475b9661bba118b961816ad4cb4ff6452fa020502ac6a896cbdae006ab228e9bb13358172656040a3f5784999a1679981c1e3ea59e37e63d4b47182b0c2dc521732a044abd3de6da0cdd049908f9ec16710aa9ba34e9cf866d85c6823d63b44eeb454ee3091865658f6c2e56e7c0806898f130d455fdc904b403c0fbc47f5a773df3e06a87cbdedfab45b5a00097ba2bc57b1a18b299ab130b89e85d63afc690b859fe52f2cb724a1e7bbf5c908003bb24186fb9dbf755e8ace9bc97bd89155309ffb702d817a48131b5e273c2ead3e4925511a22e527269fb58db75eb588f1a1a07e038f4126d93a13476dc76b44d64bddee6a9e96d6c2ecdbc11ff85278c9ef79af7be79739238b86d5d721651813b399a004d4471151365f635ba70a4ba174b80266dc64cd49a3837b19d677cd0af1a9b980fde400333ebf71a11f71d9898dd3a4434777337efc82afaa7216d175f786ab3b697a35584243a53c481eaaa22663e4d2f4eff6edf978c02c63510acd691b8129ff8cf7772eeecf1004a3cda7cf085791282bc01b2a8e200d5847a9ca986bd5add2f5e6ce62b1fbfa54cc8738ace53771aae50717192db65e780e4dc74006ef3177b43e1d916439cec91b6d02c233b66bb8620cb57073db45acc057d339fc9ab3b33d933422c0b8cd61509540e6c332984dcd8a96fbc77ca1e0c55f0ee764a6e88429b3fd629d1051e674ea0a2ee470db10aea7519ca39548ec61d9ec128a369b6b98ae8d41350ea5792b3efea6569e849756bc2194b38d6df8d66ca5016fe06861e93bb291200f56e0b6d65ba31c8933a6c2de398d9147ea420e9a1567b801618634648ac92cde5a6d019f06ebb1ecc7f57a06cc7059f0f1f04783fd9c2868e77f5f7963aaa8792ade8b3ac6e19f9df38f60cd9a6ca73869b26b3d4f68b2f2b174a68f94cf9b11d0cf3599c0fd38b08080b063879c32fb8b89f28eee485780dac047de6def7596d934b4523b7c94f41fc3fd0b97145449a74ad222f792d641fbcb94f257f6ad82978da167cab278024330712b8de87d1ab8d6dcf351979764bdc2e87fbb4e9a4c53dbdd2f6b93864ad6143b4d55e51e92da5ae7b09c4cb5e00d9a860c3120376d10217db6098b0dfa641ce5e1c1a9a05d4bd4276a8723f871c069be7c5bd7216bec2380c80d46807370a988c276c5d98dd6c1258c2138928627ca7d85ca154fb13f3dbbd78a8f1633e9f9bf58f0119e0400bf851453a08cb5c10e07cc3c2bd4b598fc3ce8f8b69e8f444b4ca91de625c250a1ab952b6f9a1f9ad790940b5ade4858db8bf5ca220df63928a7258b167f4683e7a1ab9147a97419fbb509a6ca416e43aa3495b5512d2975cab634d7e6afa2fa2b3e81bc56fdbef4acba753986e4644d4b1879f1ffe96769278bb01ce616bbdbdf376cff358825d43816408d3ee3776f855e15a037cf090fa2c9ff99e904f8c56128a46f7183b8c18a5359dfb91eec5cf6c7ea72d00221986fa63c7da5fc7d19d07851f00626c0aea1af190382616dbf9c6967504b5690be8ef355782253c24bb2828eaf72ed68f7995c862514d62a744aab2fbb06a86d97d572cf216eaa979da116a7ea14c6b19f82a74d992620447d2bfd83baa93e104d18ca2860efb941ad6e68e1ea689606f12d87fe3a3df57ca20678073947f8cec65db6ca219da2c88a6675a15c83246f7c6e8d32eeb8f5d9b38586a8964234706a9401817affbb335f8a2d3132deba15a8d44419de805fda80866505635bf3f04e547955e2e0bf4d16b98867e1a4f19adc10b7207fb7f8e68a1079f86938e609a5859c9eddc0396f0161144d5ef7b7a9c9568137ee0f7fde2c79b464200466a27bbf96eb6e3302c6362f18bf7c4812feec2d62fe322a28930bbb374304680869f020cc3d02819c19449c8fbaffe8b01352a60eaea3126fa69e28e1ee2236bcc37c33e6b16b43a7b1845bfa487c70e6b6081de2a4ef59dbbbb81b572033f70f2ace846369f63a846b18a49685a7b31bfe790b952600825aa5642d3775286bdb07b07af0fdc413cbcb3dc7929a3fcbce209943e381df704ee105463e003073b70e683cc67d438dbcf5983899d94922f8f67f71613ead4eb5532f9b7326e7d16efe60f47d61ff0442af7c2c1c9174fe7b8ec8dee885afc0281728a2af528aee9a2bc383354236fffe7bce2cbb0a3f13acff045b8e42681e2f7c1935f7c99e8b202c74808a581d9eb179096bfb70bb1dc35a4f3634cf71529750114ea809be65b07b2577dd7fe548e50373422737798c8ddda207605a7be6f90b9fa2b130f1cef1bfb61ca5a798a80a3408c7cd5160a5ee7e4ed08cc56a8a2f03a74c456d197e917f26ae595f49ebd7f48c316c472659b7bdcb7e9e67eb57a84307820ce6d0fd43d98d6d600d485344a658e7bce6e815d3d2a00c0015119b3e3f16e9f74ea1e83965f60b1205ef8a08ec821ced2814f62556900f8960a363d1392196bb54838732450e499ac22d668f62c2987d5d8e7ed85f2ce7f3b89ff580e4b6f53355d96ccc42ec7ea909225189b37e9e430cd6af5d179951b524fb2cd8b10054d4514c7483169406dd084223528e07476729a859a1c900b89968d97c7931006f705eccaf0e11afc98b17b0309fae0a99b68aaeb0008c8cdd975d37dd2f7013ec3a916f5f9533623fa53d1ab555fb6db3ef0f27a978bb16375394b6178737aebc2bed56c6486a3de4bbfbf96d506633c00bc1b52b7d7eac88ad8b8a727fe2b0c47471b02ec3a8de98bba1e98771ecdf963c0bce8011967f9b1c0420b8fae2ce3ad5de1ca4d9500686be6c58b94cc39a113173be889e4182d8b0025ecb46c108da3c21202321f4dbf3797f9a27ceeadeb71b63079e86ab50a3709a44880cf490f90ea6c9698588da1ce5b7cb6ac1bdac498f7321a78d6685d0ff897a70338ef9bd9e74808dbdc55360cef8b1b72171e99a2e1d73446a0388f6448a56f87781297a6d4efa165701bd7e19996c1b2cf55d1c01e45c483dd6f0974e3bd7d848c850b9ec417948dbc40fc21fce5c3559fd9dcff679a41b5f9a8ef1810e5c49316e30647d8e9b48d6ec3ba0907033689190a2aa2de60b192197a072b42c4d91be61b5dbcac92765a7a3f68a0792d47075f224d7fbedfd3d0b66af3ff23787e293118f91c62ed9c040c8b22542b4ad2aed02a99c8b36840b232820934c29f688bcf310e07e4af25007c4efdc38faee35c0d2f27521627bd7e1ec72795b64d7426ad56cea9eec604a781418b1b1b8ee892e65dc4ddff6bb9c3c2595da32f7520aa9d7a6a397305c5a0d837298d5ef13825db6abe7e6b26ba5e34ed5ddc0725c83f14307a5eeb2a5a68a784c23b871f1e65a391aa7d8fcccd27684e9b136b98eed00e2eb9172da51298a2a5599a1708d608cc76694c5c2f0d6607515c5e61bfb35e65a52722043ed2832f3a06cf9c432aed738b6978e25e73d11d7a5d50969edad9991001209fa951a2bd0612c89645ded3fc8fb6b66787a28f233808de73f7003e089de5e686b4c93716ea5557d0decdddd01c47fa1eed8527b560005baf9cb34619cbfd589e1fccc75600cdc8e459646eef0b31ca234766fceb44d9d68c26c6e18709766e6d1903e80bf852e1a44ec492f4a6ca9f56d6d71e0f8af35b5d171e96bfd9fb22bfc9b95ed42ac53478ab09ece44e8d81755b8fa9b905c229a34bb5a436590e70806d68c9abf424e5c5b992a6dcffa2308f5502c51da1cbcbdfdfafedbeb32284da166525b50a0cf6802234faaac2b7a049382de9010fa55221be0c1ef868405094550ae9cb4d5e4be98d21ca6cff480909488582bbbe9e4f650bca93001b223e6893c3f3ecf55bf6e768519a3f7ae01f76642d3f11c67af68"}, {0xd8, 0x107, 0x8, "55ed01f5a05c4474c9017d58d5d80c86ab2d005f2763d9561d4c0e66410d3d36ae3eb7f69076ee625dc50446ecbb95fb1d6416d3c108dbd654a8a3cb7de6ca9a1d12c43f54303c33e2603c479254e30f9ca42ffe7865a2277f5abedb33d7cf2dad39931df2e962fc5eeb15992be8af07bebd0ed6f97d3e136d92de24672309a6c0bf8b6c941c886a7b2d36dab24983deb8790c389db3349d0400dab9990f6840c9406a8bcd75ac862863b738121e093da277f02bd2c7bb0ccd275150c2ab60ed8f"}], 0x1150}}, {{0x0, 0x0, &(0x7f000000a140)=[{&(0x7f0000009e80)="9e3e779a6d6ab774eb34fc729195561a1cc45fae75e233353b12d078dea256e83717e34aa88b1fb35cb2c328818b78fd6385fb8e8920", 0x36}, {&(0x7f0000009ec0)="cdfd46b6091ff5c2c96d1c2547aa9eb621ca03c7dcbb57795a2353f07918c634b99fcd6c58eb96882e5602a6f467f57a4886e48c00fa639bfbefc5174fe751b027edc5435d2566c8161da30f32f560f38c5092522794a040136b3f9bb0fda077810a49857c85517f04801f3d7c22b021a9033998d8ebb5975efaabea230ce47c7d1fcaea643f1484015d46fac79b9979", 0x90}, {&(0x7f0000009f80)="28d45789f682ecc49cc084da", 0xc}, {&(0x7f0000009fc0)="ff3b53e19f7dcc4f6d83af067dda21c1efa0419fe795f2250369630eb99e2be52444725d775ada11102a6718645b8820be2542030091e2a3088276718e0186f33ec1eef0f0458a935ad17dd884628dedec359ca050e612021573f62c8605b70264f7e98e9c4d0e3127088db35e2820ddf79bd92400b6b1", 0x77}, {&(0x7f000000a040)="2e8dfb4c53d5a0e885758e741f2a17d4800ea01e607589b262a9a840b92f09268c", 0x21}, {&(0x7f000000a080)="b818dba3fa76807c3ef39dc60eb52a24a1435574abbf620d7ea79f8bbc11b6b5e08d4632af6b08694191c41473bd844ca4816970e8", 0x35}, {&(0x7f000000a0c0)="cb13e7604bba595e6060faca0ec64d125c624198a6b90802e093f28bf33f15682da529c3e09135b68b39b46159118a6b57be3357f0a49477668e7677a0f5091fd88b2ba15a7f342a14b4dfe289a49b468108bf2e511316785c39bb1dc1b071e5ecb936774d70be251a148c5342cb6e", 0x6f}], 0x7, &(0x7f000000a1c0)=[{0x88, 0x10a, 0x0, "228ef546644df4e1e6194da3f778baab4826794ac93b2892ff6a287da72d37bea59a69746081e9b4eea1ee8a2386c7e110c33e2e4cbd5cd9a3792f49c667353ea09152d4ce9ffa07b549b3eed8532c084be0c02303d894463fd955f9e199671cf8d90578cc7cbda25745f722e8f95e94a1812c7a9b"}, {0x38, 0x105, 0x3, "ee06e5638d95813e2d3af23eec72edc25c7fde0ac6cdb9dbc84134a2e444edfac57262"}, {0xe8, 0x109, 0x3ff, "50b15a082c86d1b45bb94184c2071e8bdbf5f9519ed6975ae455911b1582b013f2fdf2740da0f7c8a7c30ba0de2e4e4db7cd3e3bf9402df2e23a368f93972723205cd535724332b4fd13e7ea339a273d61abcbc2f06883b43e3fa7bcadbe7ace7fbe14a05b44b4e7fdfa5ec03a0e9297ba5992de199f4d339e374c9e950ea1eca09536ff757a858ae902184a290e4948c9cbe1a1a5e137cf33cd67a5ff23888756262fe51be52f9f1dd38c18d6a0db0df0cc5931f3c33977cec0cc4591585ed883f5b845e836a0d50a71007f66d51a83d2839458337c6c"}, {0xf0, 0x101, 0x9, "987c7b058da56a014cce5852b47625506c05bf9739cff346596b76edbac0e8e87045efa03d9fe78846a91d0a72451a820f136787d3255d716d70f665504e513b47fd6393309baccda1dadec096ec21fc48da623f21875814621c69013f28195c7e1b51975c81c5999b4338702689b31660723e62186df6958e499d756c4e88967336371aaf9cdba5e2d31f223c35f26e74c73479e66f55427c2e88d5efed74215ff4d860215e7b85b24dc4fbcecabfae51061ceb2fb1fcd85ac03e653d9a9d8a94395d60bd5ff29b2d1cae20924f64fc78b5242c7f33238003ec"}, {0x20, 0x118, 0x2349, "cd2bf4c23986959728"}, {0xa0, 0x107, 0x20, "5be165e246d3877f39c9969fee62f1e116560b7a29ce4fd32d9f71b79681472a08a22d9b4dc6e29b1264398533c170ce542805e04a4b676dba5d8ae08ca13ff26ca3af24903fe222a00b93cc3549774aa5713f422c61f129b2d9d9089319cb3383af7e7b27e4280dda63205696be4e462c23decee06553b9d612459104722816fdda6470689fc434cd"}, {0xd8, 0x108, 0x400, "d50db109803137fee8a1d35027f061e9d5d570af17194d1d0db6233ca542609aee198d1441b6bb42e05b22f2eb1b8486795f1ee3af10bf44f4d88c7bfc49565729c5e4729d3143e9ca6c9a60cf2211191069e066301ddfc427e74e66d3ef4a170c72c8f09d98566bc0036325262bce28069c3fd3a28ca2433cfc54d124ac4684ecb5be4f6d96fe45ed8579696c7d3a6045b47e724b73fdd06c212338f86e87cc40891b12e02505cbc41acea7d81dbd2633810742c4cf8a60f27659763e26447dc4bc4edf"}, {0x20, 0x29, 0x8, "bbbd31ee9693b425a760"}, {0x18, 0x88, 0x10000, '!'}, {0x108, 0x102, 0x37b3, "a15e58eeae0fe56d3180ea78d7f073e9913e3620cc785bf4e534717bf45806a95dd7220b16bf7e8df44c70cac329f65cc9c37935b71e4cdf3c99235eb2324a9b53addcf9f3b307e5d6084b8ec2e991cc14783d5a5dba612715116f7f8d71d862bf188005620c07a18dcf43e94692f6d935a9ac4c679916d5c38732e423772ed044754fe61a678fce22d47731ea14354e3cabfc4ce0a87a97f15cb9e5a4e4a915b0eb9bb3ac6580d5de66e4325f8cc4e7a2f34f5fd78b3b3ab9f031615948fd877d1cad50fa8dfea0633e00aedfe07b3a91ccbde1796a7bd23bdb216d170443f617763b6e2866330dee22fa338a0d041c35056c"}], 0x570}}], 0x5, 0x20008110) r13 = accept4(0xffffffffffffffff, &(0x7f000000bc40)=@alg, &(0x7f000000bcc0)=0x80, 0x101000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000000bd00)={0xfff, 0x82, 0x8400, 0x4000000, 0x2, 0x2, 0x6444, 0x2, 0x0}, &(0x7f000000bd40)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f000000bd80)={r14, @in={{0x2, 0x4e21, @broadcast}}, 0x5, 0xfffb, 0xffff, 0x0, 0x4, 0xfffffffb, 0x3f}, 0x9c) r15 = accept4$inet6(0xffffffffffffffff, &(0x7f000000be40)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f000000be80)=0x1c, 0x80800) setsockopt$inet6_MRT6_ADD_MFC(r15, 0x29, 0xcc, &(0x7f000000bec0)={{0xa, 0x4e20, 0xfffffffe, @rand_addr="1911fef023c68f0d29b47c1f4fdd1d6f", 0x1}, {0xa, 0x4e23, 0x4, @rand_addr="9c796b5d5a783e8c7767a8033c284acb", 0x8}, 0xfff7, [0x3f, 0x432, 0x8, 0x1, 0x1f, 0x7, 0x4, 0x2]}, 0x5c) [ 2116.284380][T29116] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xc0fe}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x10) [ 2116.366018][T29145] IPVS: set_ctl: invalid protocol: 33 172.20.20.12:20002 [ 2116.434508][T29148] IPVS: set_ctl: invalid protocol: 33 172.20.20.12:20002 09:26:32 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1202, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2116.552262][T29143] Š: (slave bridge725): Enslaving as an active interface with an up link 09:26:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_team\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0xc080) 09:26:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x1, 0x9, 0x3f, 0x8}, 0xc) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 09:26:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x60) 09:26:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:32 executing program 1: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000140), 0xff4d) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000c80)={@mcast2, 0x0}, &(0x7f0000000cc0)=0x14) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000e00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x90, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x7}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8e2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "77b0f7b360c7673f38f8c78d1e2c66881fdead7d6dcf5baaedad81fdd072dd3cfe81008970511034c5e5df97ae1be7db2f67672c9cac1e1ad3"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x14020081) 09:26:32 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1602, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2116.993963][T29177] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2117.084397][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2117.176807][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2117.196172][T29180] Š: (slave bridge726): Enslaving as an active interface with an up link 09:26:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf0) 09:26:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @multicast2}, &(0x7f00000005c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x11, 0x4, 0x2, 0xfffffffc, 0x280, 0x1, 0x1, [], 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) r3 = accept4(r0, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x80, 0x5377a913d8fea6ac) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000540)=0x1950, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="005c9d54984a6e870a761572a1b5285c4f06b24b1337c0799097fb4adfaf511c3396d8991a94eba05fed0d3c603905482c8a87d333c4464969d8844a6aa369a6df33cab9148c72c6fc016b7129d4c87af495982aaf6ce4"], 0x1) listen(r5, 0x5) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x3c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x2c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @gre_common_policy=[@IFLA_GRE_TOS={0x5, 0x9, 0xe}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x20}], @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x5c}}, 0x0) 09:26:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xe02e}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:32 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1803, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2117.472864][T29180] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000400)={'veth0\x00'}) r1 = socket(0x2, 0x0, 0x0) r2 = epoll_create1(0x0) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000440)=""/156, 0x9c}], 0x2, &(0x7f0000000380)=""/96, 0x60, 0x6}, 0x10003) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'vxcan1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000140), 0xff4d) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev={0xfe, 0x80, [], 0xe}, @in=@rand_addr=0xfffffffd, 0x4e22, 0x0, 0x4e20, 0x8000, 0xa, 0x80, 0xe0, 0x88, r6, r7}, {0x40, 0x1, 0x10000, 0x9, 0x9, 0x1692, 0x9, 0x1000}, {0x8, 0x0, 0x0, 0x1}, 0x91, 0x6e6bbd, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x3505, 0x3, 0x3, 0x36, 0x6, 0x6d, 0x6}}, 0xe8) getsockname(r1, &(0x7f0000000540)=@in={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x80) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000140)=r2, 0x18a) socket$inet6(0xa, 0x40000000003, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20000010, 0x3f00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000070000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000400"], 0x28}, 0x1, 0xf000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000180)={r11, 0x0, 0x1, '/'}, 0x9) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000080)={r11, 0x3}, 0x8) 09:26:33 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfc) 09:26:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xa0002000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:33 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1a00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2118.128367][T29238] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:33 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)}], 0x1}, 0x3828}, {{&(0x7f0000000500)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/91, 0x5b}], 0x2}, 0x2}, {{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/231, 0xe7}, {&(0x7f0000000800)=""/100, 0x64}, {&(0x7f0000000880)=""/31, 0x1f}, {0x0}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/78, 0x4e}, {&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f00000009c0)=""/177, 0xb1}], 0x8}, 0x1f}, {{&(0x7f0000000b00)=@tipc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b80)=""/25, 0x19}, {&(0x7f0000000bc0)=""/234, 0xea}, {&(0x7f0000000cc0)=""/174, 0xae}, {&(0x7f0000000d80)=""/51, 0x33}], 0x4, &(0x7f0000000e00)=""/156, 0x9c}, 0x332b}, {{&(0x7f0000000ec0)=@nfc_llcp, 0x80, &(0x7f0000001640)=[{&(0x7f0000000f40)=""/53, 0x35}, {&(0x7f0000000f80)=""/183, 0xb7}, {&(0x7f0000001040)=""/201, 0xc9}, {&(0x7f0000001140)=""/205, 0xcd}, {&(0x7f0000001240)=""/135, 0x87}, {&(0x7f0000001300)=""/205, 0xcd}, {&(0x7f0000001400)=""/250, 0xfa}, {&(0x7f0000001500)=""/215, 0xd7}, {&(0x7f0000001600)}], 0x9, &(0x7f0000001700)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002780)=""/30, 0x1e}, {&(0x7f00000027c0)=""/159, 0x9f}, {&(0x7f0000002880)=""/218, 0xda}], 0x3, &(0x7f00000029c0)=""/187, 0xbb}, 0x7}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002a80)=""/126, 0x7e}, {&(0x7f0000002b00)=""/181, 0xb5}, {&(0x7f0000002bc0)=""/206, 0xce}], 0x3, &(0x7f0000002d00)=""/91, 0x5b}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/230, 0xe6}, {&(0x7f0000002e80)=""/71, 0x47}], 0x2, &(0x7f0000002f40)=""/4096, 0x1000}, 0xb38}, {{&(0x7f0000003f40)=@isdn, 0x80, &(0x7f0000004140)=[{&(0x7f0000003fc0)=""/159, 0x9f}, {&(0x7f0000004080)=""/51, 0x33}, {&(0x7f00000040c0)=""/104, 0x68}], 0x3, &(0x7f0000004180)=""/110, 0x6e}, 0x7}], 0x9, 0x2, &(0x7f0000004440)) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000004600)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f00000045c0)={&(0x7f00000044c0)={0xe8, 0xb, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x77}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_IFACE={0x14, 0x17, 'team0\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0xfffff800}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4d9d}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x1) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r5, &(0x7f0000000200)="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", 0x200, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000006640)={r4}) setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000006680), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffe3b}]}, 0x1c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 09:26:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x300) [ 2118.215398][T29242] Š: (slave bridge727): Enslaving as an active interface with an up link [ 2118.322909][T29244] Š: (slave bridge727): Releasing backup interface 09:26:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xfc00}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 09:26:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 09:26:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) [ 2118.876506][T29242] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x600) 09:26:34 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 09:26:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1a01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2119.078833][T29244] Š: (slave bridge727): Enslaving as an active interface with an up link 09:26:34 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 09:26:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xa0008000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xa00) 09:26:34 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:34 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 09:26:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xfe80}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1a02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2119.493650][T29304] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xb00) [ 2119.620481][T29313] Š: (slave bridge728): Enslaving as an active interface with an up link [ 2119.725128][T29318] Š: (slave bridge728): Releasing backup interface 09:26:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xc00) 09:26:35 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1c02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2120.198748][T29313] Š: (slave bridge728): Enslaving as an active interface with an up link 09:26:35 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1}, 0x3}, 0xfffffffffffffcd0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr="10e8d0366a2ade0d8eb870d58e758ca5"}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x2b24998f, @dev={0xfe, 0x80, [], 0x23}, 0x8}, 0x1c) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 09:26:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xb569efd1, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xe00) 09:26:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xfec0}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:36 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x1f00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2120.522071][T29354] validate_nla: 1 callbacks suppressed [ 2120.522083][T29354] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2120.632285][T29357] Š: (slave bridge729): Enslaving as an active interface with an up link 09:26:36 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf00) [ 2120.683814][T29366] Š: (slave bridge729): Releasing backup interface [ 2120.756806][ T922] tipc: TX() has been purged, node left! [ 2120.769799][ T922] tipc: TX() has been purged, node left! 09:26:36 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x121d) [ 2120.972882][T29354] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:36 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000009480)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000009240)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001280)=""/46, 0x2e}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/189, 0xbd}, {&(0x7f0000003380)=""/218, 0xda}], 0x9, &(0x7f0000003540)=""/199, 0xc7}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000003640)=""/206, 0xce}, {&(0x7f0000003740)=""/201, 0xc9}, {&(0x7f0000003840)=""/145, 0x91}, {&(0x7f0000003900)=""/4096, 0x1000}], 0x4, &(0x7f0000004940)=""/252, 0xfc}, 0xfffffffb}, {{&(0x7f0000004a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004ac0)=""/56, 0x38}], 0x1}, 0x80000000}, {{&(0x7f0000004b40)=@hci, 0x80, &(0x7f0000005d00)=[{&(0x7f0000004bc0)=""/50, 0x32}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/40, 0x28}, {&(0x7f0000005c40)=""/184, 0xb8}], 0x4, &(0x7f0000005d40)=""/91, 0x5b}, 0xfffffeff}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000005dc0)=""/187, 0xbb}, {&(0x7f0000005e80)=""/67, 0x43}, {&(0x7f0000005f00)=""/26, 0x1a}, {&(0x7f0000005f40)=""/46, 0x2e}, {&(0x7f0000005f80)=""/235, 0xeb}, {&(0x7f0000006080)=""/167, 0xa7}, {&(0x7f0000006140)=""/125, 0x7d}, {&(0x7f00000061c0)=""/190, 0xbe}, {&(0x7f0000006280)=""/123, 0x7b}, {&(0x7f0000006300)=""/227, 0xe3}], 0xa, &(0x7f00000064c0)=""/82, 0x52}, 0x4}, {{&(0x7f0000006540)=@phonet, 0x80, &(0x7f0000006740)=[{&(0x7f00000065c0)=""/63, 0x3f}, {&(0x7f0000006600)=""/193, 0xc1}, {&(0x7f0000006700)=""/34, 0x22}], 0x3}, 0x3}, {{&(0x7f0000006780)=@tipc=@name, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006800)=""/52, 0x34}, {&(0x7f0000006840)=""/42, 0x2a}, {&(0x7f0000006880)=""/120, 0x78}, {&(0x7f0000006900)=""/100, 0x64}, {&(0x7f0000006980)=""/12, 0xc}], 0x5, &(0x7f0000006a40)=""/2, 0x2}, 0xff}, {{&(0x7f0000006a80)=@ax25={{0x3, @netrom}, [@netrom, @null, @default, @null, @default, @bcast, @null, @rose]}, 0x80, &(0x7f0000008000)=[{&(0x7f0000006b00)=""/241, 0xf1}, {&(0x7f0000006c00)=""/84, 0x54}, {&(0x7f0000006c80)=""/59, 0x3b}, {&(0x7f0000006cc0)=""/149, 0x95}, {&(0x7f0000006d80)=""/3, 0x3}, {&(0x7f0000006dc0)=""/215, 0xd7}, {&(0x7f0000006ec0)=""/73, 0x49}, {&(0x7f0000006f40)=""/188, 0xbc}, {&(0x7f0000007000)=""/4096, 0x1000}], 0x9, &(0x7f00000080c0)=""/111, 0x6f}, 0xfffffffa}, {{&(0x7f0000008140)=@in, 0x80, &(0x7f00000091c0)=[{&(0x7f00000081c0)=""/4096, 0x1000}], 0x1, &(0x7f0000009200)=""/45, 0x2d}, 0x9}], 0x9, 0x10000, &(0x7f00000094c0)={r2, r3+30000000}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000009540)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000009840)={&(0x7f0000009500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000009800)={&(0x7f0000009580)={0x258, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1bb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffd3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2747200a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9cb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x56}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x408c004}, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x1, 0x80000, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000009880)={0x8a8d, 0x2, 0x81}) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2c}]}, &(0x7f0000000180)=0x10) [ 2121.189449][T29366] Š: (slave bridge729): Enslaving as an active interface with an up link [ 2121.211363][T29354] Š: (slave bridge729): Releasing backup interface 09:26:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xff00}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x1d12) 09:26:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xc3ffffff, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x2088, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x3f00) [ 2121.720263][T29424] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2121.849537][T29429] Š: (slave bridge730): Enslaving as an active interface with an up link [ 2121.862465][T29433] Š: (slave bridge730): Releasing backup interface 09:26:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x4000) [ 2122.071554][T29424] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x2202, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2122.269268][T29433] Š: (slave bridge730): Enslaving as an active interface with an up link 09:26:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xd1ef69b5, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x5865) [ 2122.370655][T29450] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2122.452378][T29450] Š: (slave bridge731): Enslaving as an active interface with an up link 09:26:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xff0f}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:38 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x2203, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2122.693998][T29450] Š: (slave bridge731): Releasing backup interface 09:26:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) accept$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r6}, 0xc) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000400)={r7, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r8, &(0x7f0000000640)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="3093b34e1938"}, 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000000085000000080000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r12, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r12, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, 0xfffffffb, 0x7}, &(0x7f0000000480)=0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0xb, &(0x7f0000001700)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r7, @ANYBLOB="00000000ff0300009500000000002cfe5f09636ac21fedc09a7aa91020024e4ee9293ff67c07bf4d2d743082dcfeab0fc88ab50d2d6ff7f91b0643353fcfbc2e2b1e31ada71df7"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x8, [], r11, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x2, 0x6, 0x8}, 0x10, r13, r14}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x10, &(0x7f00000003c0)={&(0x7f00000002c0)=""/250, 0xfa, r13}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfd}], &(0x7f0000000040)='GPL\x00', 0x8, 0x8e, &(0x7f00000000c0)=""/142, 0x41000, 0x8, [], r4, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x1, 0x8, 0x101}, 0x10, r15}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:26:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x6000) [ 2123.063152][T29488] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:38 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x2402, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2123.242251][T29488] Š: (slave bridge731): Enslaving as an active interface with an up link 09:26:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x6558) 09:26:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x80fe) [ 2123.457738][T29502] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x50000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x2803, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2123.728272][T29502] Š: (slave bridge732): Enslaving as an active interface with an up link [ 2123.815485][T29512] Š: (slave bridge732): Releasing backup interface 09:26:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x8100) [ 2124.069553][T29502] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x2a01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2124.245473][T29512] Š: (slave bridge732): Enslaving as an active interface with an up link 09:26:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xc0fe) [ 2124.378991][T29548] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x1000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='cdg\x00', 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x208, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x41000) sendto$inet(r1, &(0x7f00000012c0)="05268a927f1f6588b967481241ba7868f1eaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 09:26:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x2a02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2124.609806][T29548] Š: (slave bridge733): Enslaving as an active interface with an up link [ 2124.641670][T29554] Š: (slave bridge733): Releasing backup interface 09:26:40 executing program 1: r0 = socket(0x11, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR, @ANYRESDEC=0x0], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x12040002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 09:26:40 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf000) [ 2125.044065][T29548] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2125.237231][T29589] Š: (slave bridge733): Enslaving as an active interface with an up link 09:26:40 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfc00) 09:26:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x2000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:41 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfe80) 09:26:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3202, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2125.603756][T29604] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2125.671487][T29608] Š: (slave bridge734): Enslaving as an active interface with an up link [ 2125.715249][T29610] Š: (slave bridge734): Releasing backup interface 09:26:41 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfec0) [ 2125.968946][T29604] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3f00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2126.148908][T29608] Š: (slave bridge734): Enslaving as an active interface with an up link 09:26:41 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xff00) 09:26:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@del={0xe0, 0x11, 0x0, 0x0, 0x0, {{'ecb-aes-aesni\x00'}}}, 0xe0}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="effd00001200a74056216a8d00000000"], 0xfdef) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x6181}, {r1, 0x8000}, {r0, 0x2000}, {r0, 0x4000}, {r2, 0x208}, {r3, 0x200}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x4bd4}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r4, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0xffff, 0x2, 0xfffffff9, 0x0, 0xfffffff9}) 09:26:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2126.381013][T29646] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2126.414939][T29652] netlink: 64783 bytes leftover after parsing attributes in process `syz-executor.1'. 09:26:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:41 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$netlink(0x10, 0x3, 0x59e4cb6b4acac244) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20050000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x3, 0x2, 0x71e2429e1473774d, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', r6}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x2e35b7fd96ead625, 0x9, {0x0, 0x7530}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "7a5f516055dd1baa"}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2126.446246][T29649] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:41 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x34000) [ 2126.564343][T29654] Š: (slave bridge735): Enslaving as an active interface with an up link 09:26:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x3000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2126.657190][T29649] Š: (slave bridge735): Releasing backup interface 09:26:42 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x400300) [ 2126.914975][T29654] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2126.952348][T29661] Š: (slave bridge735): Enslaving as an active interface with an up link 09:26:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r2 = accept4(r1, &(0x7f0000000140)=@x25, &(0x7f0000000000)=0x80, 0x141800) sendmsg$rds(r2, &(0x7f0000001bc0)={&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000240)=""/200, 0xc8}], 0x3, &(0x7f0000001a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x401, 0x7fff}}, @rdma_args={0x48, 0x114, 0x1, {{0x380, 0x8000}, {&(0x7f0000001400)=""/139, 0x8b}, &(0x7f0000001900)=[{&(0x7f00000014c0)=""/186, 0xba}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f0000001580)=""/66, 0x42}, {&(0x7f0000001600)=""/181, 0xb5}, {&(0x7f00000016c0)=""/87, 0x57}, {&(0x7f0000001740)=""/35, 0x23}, {&(0x7f0000001780)=""/108, 0x6c}, {&(0x7f0000001800)=""/238, 0xee}], 0x8, 0x4, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x4}, &(0x7f0000001980), &(0x7f00000019c0)=0x2, 0x3ff, 0x6, 0x6, 0x6, 0x40, 0xfffffffffffffff8}}, @cswp={0x58, 0x114, 0x7, {{0xfff, 0x2}, &(0x7f0000001a00)=0x8000, &(0x7f0000001a40)=0x1, 0x8, 0x1, 0x4, 0x0, 0x4, 0x5}}], 0x110, 0x84}, 0x24040011) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x32, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0x4, 0x1}]}, 0x1c}}, 0x0) 09:26:42 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4203, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:42 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x8000a0) [ 2127.254857][T29693] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2127.363877][T29701] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2127.393673][T29696] Š: (slave bridge736): Enslaving as an active interface with an up link 09:26:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xe, 0xacebcf8893febd7a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000280)={0x2, 'veth0_to_bridge\x00', {0x7}, 0x5}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1c, 0x527976a5bf47d719, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x29, 0xc2}, [@NDA_DST_MAC={0xa}]}, 0x28}}, 0x0) [ 2127.424112][T29709] openvswitch: netlink: Either Ethernet header or EtherType is required. 09:26:43 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4400, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2127.593968][T29693] Š: (slave bridge736): Releasing backup interface 09:26:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x4000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:43 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf0ffff) [ 2128.036875][T29696] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:43 executing program 1: r0 = socket(0x11, 0x2, 0x0) r1 = socket(0x10, 0x800000000080003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xf7c3, {0x1, 0x5, 0x75, 0x7, 0x7f, 0x3}, 0x1, 0x6}, 0xe) getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffed4, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006a0003086c00000000005551f2ca080005003e7e1219baaf30c64ebb33682b7b7272c564c8456952bb9581ffffffffffffff0003f5491fc2ced3b47bdff0621dc9573e5a179a58fe4b11d2b01ce2ca0a31f1a19083efb41a2950aa1358b1ced400"/115, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 09:26:43 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:43 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4402, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2128.239946][T29696] Š: (slave bridge736): Enslaving as an active interface with an up link [ 2128.259901][T29742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:26:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffffc3, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:43 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x1000000) 09:26:43 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e0ff008001fffffe100004000633a77fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000}, 0x28) 09:26:44 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000180)=""/153, 0xfffffffffffffdb8) [ 2128.655611][T29756] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:44 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4603, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x5000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:44 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x2000000) [ 2128.782267][T29761] Š: (slave bridge737): Enslaving as an active interface with an up link [ 2128.924994][T29762] Š: (slave bridge737): Releasing backup interface 09:26:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:44 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d00800002400ffffe57f000028be41f2c405ffff", @ANYRES32, @ANYBLOB="0000000000079a03310000"], 0x3}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002600ff08009c00020600000000000000", @ANYRES32, @ANYBLOB="0000ff"], 0x3}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000140), 0xff4d) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)={r7, 0x0, 0x1, '/'}, 0x9) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)={r7, 0x3, 0x6, [0x3, 0x1, 0x6, 0x7, 0x6, 0x100]}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000190000", @ANYRES32=r4], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:44 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x3000000) [ 2129.433736][T29756] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:45 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4800, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2129.639092][T29797] Š: (slave bridge737): Enslaving as an active interface with an up link [ 2129.658281][T29801] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'. 09:26:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:45 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x4000000) 09:26:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x6000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:45 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4a00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2129.933133][T29817] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:45 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2130.011512][T29820] Š: (slave bridge738): Enslaving as an active interface with an up link [ 2130.068013][T29824] Š: (slave bridge738): Releasing backup interface 09:26:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000), 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x49bd2f566f275d74}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20002881}, 0x84) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000085c0)=0x1020000, 0x4) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0x14e8, 0x78c}, 0xc) connect$rose(r4, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 09:26:45 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x6000000) 09:26:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4a01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2130.553933][T29817] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2130.588813][T29820] Š: (slave bridge738): Enslaving as an active interface with an up link 09:26:46 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xa) close(r1) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x80000006}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040), 0x100000001) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$TIPC_NL_MON_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000140), 0xff4d) r11 = openat$cgroup_ro(r10, &(0x7f0000000700)='cpu.stat\x00', 0xb00000000065808, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r12, r11, 0x0, 0xffffffff800) sendfile(r12, r11, &(0x7f0000000040), 0x100000001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20003242}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r9, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000830) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)={r7, 0x0, 0x1, '/'}, 0x9) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000240)={r7, 0x101, 0x5, 0xfff, 0x8000, 0x3, 0x9, 0x1, {0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x4, 0x1000, 0x10001, 0x1ff, 0x3f}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r13, 0xb7}, &(0x7f00000001c0)=0x8) splice(r6, 0x0, r1, 0x0, 0x80000001, 0x5) 09:26:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:46 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xa000000) 09:26:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x7000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2130.913063][T29875] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:46 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[]}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:46 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xb000000) [ 2130.996836][T29877] Š: (slave bridge739): Enslaving as an active interface with an up link [ 2131.055308][T29875] Š: (slave bridge739): Releasing backup interface [ 2131.329366][T29877] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:46 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xc000000) 09:26:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x5600, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2131.520333][T29906] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2131.552129][T29908] Š: (slave bridge740): Enslaving as an active interface with an up link 09:26:47 executing program 1: unshare(0x40000000) socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e24, @multicast1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r4, 0x401}, &(0x7f0000000140)=0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = socket$inet(0x2, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f0000000000)="1b00000021002551071c0165ff", 0xd) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 09:26:47 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xe000000) [ 2131.608793][T29906] Š: (slave bridge740): Releasing backup interface [ 2131.720281][T29917] IPVS: ftp: loaded support on port[0] = 21 09:26:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x8000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[]}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:47 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x5c00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2132.104036][T29908] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:47 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf000000) 09:26:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2132.253379][T29917] IPVS: ftp: loaded support on port[0] = 21 09:26:47 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x5e02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2132.459776][T29953] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:48 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x10000000) [ 2132.585293][T29957] Š: (slave bridge741): Enslaving as an active interface with an up link [ 2132.606191][T29958] Š: (slave bridge741): Releasing backup interface 09:26:48 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[]}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:48 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x121d0000) [ 2132.847776][T29953] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x9000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2133.029547][T29958] Š: (slave bridge741): Enslaving as an active interface with an up link 09:26:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x6000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:50 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x3f000000) 09:26:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x3, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xa000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2135.443364][ T78] tipc: TX() has been purged, node left! [ 2135.450306][T30011] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:50 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x40000000) [ 2135.493756][T30015] netlink: 'syz-executor.1': attribute type 39 has an invalid length. 09:26:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x6202, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2135.684714][T30011] Š: (slave bridge742): Enslaving as an active interface with an up link [ 2135.698022][T30015] bond0: (slave bridge17): Enslaving as an active interface with an up link [ 2135.731908][T30017] Š: (slave bridge742): Releasing backup interface [ 2135.965027][T30026] bond0: (slave bridge17): Releasing backup interface 09:26:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2136.187957][T30011] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2136.204855][T30037] Š: (slave bridge742): Enslaving as an active interface with an up link [ 2136.226608][T30036] Š: (slave bridge742): Releasing backup interface 09:26:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xe000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:52 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x60000000) 09:26:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x4, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x6603, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2136.753029][T30048] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2136.777701][T30050] bond0: (slave bridge18): Enslaving as an active interface with an up link [ 2136.819085][T30054] bond0: (slave bridge18): Releasing backup interface [ 2137.044222][T30067] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2137.071784][T30069] Š: (slave bridge743): Enslaving as an active interface with an up link 09:26:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x10000000000020, 0x0, 0x0, 0xfffbf024}, {0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x138, r1, 0x400, 0xfffffffb, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 2137.100297][T30070] Š: (slave bridge743): Releasing backup interface 09:26:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@ipv4_getrule={0x1c, 0x22, 0xa01}, 0xffffffa9}}, 0x0) 09:26:52 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x10000120}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:52 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x4, 0x4, 0x3}, 0x3c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f00000000c0)="ccd6d7b144766f5d28380dd51ede78d7958a5aa26696f30a31de21ef1faec7454c5d96ecc0955d3d71") 09:26:52 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x65580000) [ 2137.473398][T30067] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x6800, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:53 executing program 1: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000004b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)='!', 0x1}], 0x1}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) sendmmsg$inet(r1, &(0x7f0000003680)=[{{&(0x7f00000007c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000800)='R', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r4}, 0x8) 09:26:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x5, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2137.669166][T30069] Š: (slave bridge743): Enslaving as an active interface with an up link 09:26:53 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x81000000) [ 2137.829814][T30118] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x6a02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2138.039397][T30124] Š: (slave bridge744): Enslaving as an active interface with an up link [ 2138.095916][T30118] Š: (slave bridge744): Releasing backup interface 09:26:53 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x18020000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2138.296189][T30143] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:26:53 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x88a8ffff) [ 2138.424471][T30118] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x6c00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x6, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2138.589093][T30124] Š: (slave bridge744): Enslaving as an active interface with an up link 09:26:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x9effffff) 09:26:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000000d0601000000000000000000000000140500050007000000050001000700000015000300686173683a69702c706f72742c6e657400000000"], 0x3c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x2) 09:26:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x6e02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2138.933913][T30169] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e21, @multicast2}}) 09:26:54 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2139.002476][T30173] Š: (slave bridge745): Enslaving as an active interface with an up link [ 2139.032351][T30175] Š: (slave bridge745): Releasing backup interface 09:26:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={r3, 0x0, 0x1, '/'}, 0x9) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)={r3, 0x4, 0x9c, "ef80e4cb438fb9dc40a250847476057d5e3b001656b181d0451dbc901c3eda324654ac09ce0f9190abc90f99caced2d96015419f43543e06f9e1283191468f07ffd8ae321860548b18521a4b1acac79f24d6d3082002c02acb40fa731db645ca3230631e506914eb078144d68ab9f503691d564eece1f1c747c750b9760e7238f227b8720878c8114963593537935dd11a0d51d607fa04a7902eb186"}, 0xa4) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x8, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0xc8, 0x0, 0xc8, 0x0, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 2139.170477][T30188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:26:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x20000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2139.338620][T30200] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 09:26:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xa0008000) [ 2139.410325][T30173] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2139.423339][T30203] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 09:26:54 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r5, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r7, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYRES64=r8, @ANYRESDEC=0x0, @ANYRESHEX=r7], @ANYRESHEX], 0x1a) splice(r0, 0x0, r4, 0x0, 0x2, 0x8) 09:26:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000080)="79343e3631017d2eef6c5bc24897fc9479a77d4868a56c9933f031d470a71e13576edb103c684223619137480f66e90bb6ce39d1e489115406c8", 0x3a}, {&(0x7f00000000c0)="da570c5695cf5e931e157e3284447206cf1997e04c399d06974f23e7082ea636dae32f4bae7adbde1e3c78a8a560e7fa8037da5f9738de3ccc1af4430d257b0c2c2018eaafce915e822f690e8cf94836be3046207bef2d5ad98b54baa1870e0d17", 0x61}], 0x3, 0x0, 0x0, 0x20000884}, 0x4000000) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x1, 0x0, 0x1f000000}) 09:26:55 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x7400, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:55 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf0ffffff) 09:26:55 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfc000000) 09:26:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) unshare(0x40000000) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000280)=0x4) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x2) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = openat$cgroup_ro(r0, &(0x7f0000000c80)='cpu.stat\x00', 0x0, 0x0) bind$xdp(r2, &(0x7f0000000cc0)={0x2c, 0x0, r5, 0x24, r6}, 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @multicast1, @local}, 0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') setsockopt$inet_int(r7, 0x0, 0xca, &(0x7f0000000000), 0x10) r8 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x6, 0x4) 09:26:55 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2139.955409][T30241] IPVS: ftp: loaded support on port[0] = 21 [ 2139.980474][T30232] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:55 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x7a00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2140.026885][T30235] Š: (slave bridge746): Enslaving as an active interface with an up link [ 2140.085548][T30250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2140.108054][T30239] Š: (slave bridge746): Releasing backup interface 09:26:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x20010010}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:55 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfe800000) [ 2140.445572][T30235] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2140.483148][T30239] Š: (slave bridge746): Enslaving as an active interface with an up link 09:26:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:56 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x7a01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:56 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfec00000) [ 2140.764216][T30243] IPVS: ftp: loaded support on port[0] = 21 [ 2140.827622][T30275] Š: (slave bridge747): Enslaving as an active interface with an up link 09:26:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007060100"/19], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0xc, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:56 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xff000000) [ 2141.065548][T30294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:26:56 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x7a03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2141.195226][T30302] Š: (slave bridge748): Enslaving as an active interface with an up link [ 2141.270371][T30305] Š: (slave bridge748): Releasing backup interface [ 2141.693851][T30293] validate_nla: 3 callbacks suppressed [ 2141.693862][T30293] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2141.776009][T30302] Š: (slave bridge748): Enslaving as an active interface with an up link 09:26:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) pwrite64(r1, &(0x7f0000000200)="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", 0x200, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001440)={r0, 0x28, &(0x7f0000001400)}, 0x10) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000013c0)=0x4) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e23, 0x0, @dev}, 0x96, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="1e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)="3bde863479da02c68b0344d4501910ad633cf86f32df030a577606fb06f94cd938b0ac7ec9f2d18c99b776ebef3432daf482c58e2c4a5a57c414f6002d8c1b205272a8f86bafd4549af8ea42869279a802ce47ddafc89db7d4cc00a1f32f12210ea75a279776170b0e869801db20784645cf29a09c8fcfa873412fd05ccb95ced1ea359c954626482f448f7fe8867fb6993d6da8a9fb9ccc5f1cdb972a641335a8a539cefc38c83540f7f1996b8ebb03609938baf6d6a1f03bd6644046e03460ffa9fb8a13b99a10e3a81ff805f70ad4488b5401051efe49e11fb3a30c4d2a2cbc80024657fc185e9c38f8c09f16e0"}, {&(0x7f00000003c0)="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"}, {&(0x7f00000015c0)="09745ce50590f9b08d92f30ea870758ca2653917499a678407512916d2e25dc7c6d2abe65e8b39caadd9eb360aa2c925b318b4a2491725c139d81817c06de2e4f2be14e03f6b12a2f1e3529efa899e73aa9b34677514f33457ea56c0fd07d46245216c0c8ac88c88871851614084eeb64257b263cbbae10b40a2b07bf3b4e4ca2366a71e49a5d8d68be9500e3c9936ac1aa89f6624c5c3b367ada16baf02913cfb19f4ae22b83a43150c7badd269e3bc3e7f0c9352c1ec5cde33374f457959a256fe30b8f6ba2925c7493792f0679f5f1cf5fb3e4c454a07bc0f6356066202dfc6cba28400102942", 0x373}, {&(0x7f0000000140)="03e14357732911ce2afeb949a9d5aff437eb55b637fce8dfbdaa55cd2decbe5d9c49e69ddac8b0986916", 0x24f}, {&(0x7f0000000240)="e2ce561e9165c3590314f5ab670f949810178456016fa834436e8868fe8d1b9ff02a855e329d3ceda953540fdcaa88a098b3d7f33a63e44fbdb454e6c155bacb0a03200315c62a8dd0365f40ac286c3d87f1f56edff701af929ce93a7e52ae155d688aea3c6d6cf9d47824f88048fdf7f918bb3c19be95ec12cd7c11646ee8a99edb9efd778a98d24c7dd81aae8f52be2fc8ac71739d04dd8a3dfeab0100000000000000014789574e313c6c003fff"}], 0x0, 0x0, 0xffffffffffffff60}}], 0x264, 0x404d000) 09:26:58 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xffffa888) 09:26:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x3e77186d}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:58 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007060100"/19], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0xe, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:58 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x8100, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2143.203008][ T78] tipc: TX() has been purged, node left! 09:26:58 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfffff000) [ 2143.275669][T30323] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2143.290498][T30330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:26:58 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x8200, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:26:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080)={0x4c}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r1, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, r1, 0x3b4) r2 = socket$inet6(0xa, 0x3, 0x400000000006) ioctl(r2, 0x8912, &(0x7f0000000200)='\x00'/11) unshare(0x60000b00) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'\x00', 0x101}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = accept(r4, &(0x7f0000002840)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000028c0)=0x80) shutdown(r5, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000440), &(0x7f0000002940)=0x4) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) sendto$llc(r5, &(0x7f0000000100)="f970073b521a3a2059fcfb4e8ff5daaa892b23d0d93e42e29fd18b0a0ba812eee04266ea1e381a4bb2e397868f69542dd70dd9c732d82d1fb2fc114f477c5628dfd9882cb1704a9f32aac44aae8374041822b9186cf14d60459bd23b2cdfa2331560f6603715660f40eb2abb6eb4ac55a1b1b79c6b0cf8b2b9318c3851c8c082044b202dfddf065073e5b86df813839f8469d5e3897560064588b8857deb8aa08bb97eab5a3c887c75722b8f29c0676355437301c7bab02cae987fb632bc787275cc10ffa7d27aec6dde9675ce109785c50042c06113974ffe11fc8c778aa09dfb093bb384905f3b6b5899e819b4f5263cb840bd", 0xf4, 0x800, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_newrule={0x30, 0x20, 0x200, 0x70bd2d, 0x25dfdbff, {0x2, 0x20, 0xb4, 0xcf0, 0x0, 0x0, 0x0, 0x6, 0x10}, [@FRA_SRC={0x8, 0x2, @empty}, @FRA_FLOW={0x8, 0xb, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000002c0)={'\x00', {0x2, 0x4e23, @multicast1}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0xfdcc}}, 0x4) setsockopt(r0, 0x53, 0x3a, &(0x7f0000000240)="01aeefef2d5883d4b1375b1f2c600b3abece185118e1d6987f223823a5", 0x1d) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '-GPLvmnet1GPLppp0em1'}, {}, {0x20, '[bdev'}, {0x20, '}'}]}, 0x29) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{}, "00fd090000001000", '\x00', "80150060", "0000000000000300"}, 0x28) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) bind$bt_l2cap(r0, &(0x7f0000000800)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4777}, 0x9, 0xfffffffffffffffe}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)=ANY=[@ANYBLOB="0701eca20100070020abe1ff0000000099ed78c38a3f144de930d46ebd660de3192b0c62b9da357b5f9eb6c9e1"]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 2143.488612][T30333] Š: (slave bridge749): Enslaving as an active interface with an up link [ 2143.516383][T30323] Š: (slave bridge749): Releasing backup interface 09:26:59 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xffffff7f) [ 2143.907430][T30333] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2143.937554][T30333] Š: (slave bridge749): Enslaving as an active interface with an up link 09:26:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0xf, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:26:59 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007060100"/19], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:26:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x3f000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:26:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x8401, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2144.181557][T30372] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:26:59 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xffffff9e) [ 2144.339585][T30387] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2144.378115][T30377] Š: (slave bridge750): Enslaving as an active interface with an up link [ 2144.425748][T30385] Š: (slave bridge750): Releasing backup interface 09:27:00 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfffffff0) [ 2144.760478][T30372] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x8600, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2144.949033][T30385] Š: (slave bridge750): Enslaving as an active interface with an up link 09:27:00 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x40030000000000) 09:27:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x10, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:00 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:27:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000980), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_getrule={0xb4, 0x22, 0x0, 0x70bd28, 0x25dfdbfe, {0xa, 0x10, 0x10, 0x85, 0x40, 0x0, 0x0, 0x8, 0x1001a}, ["", ""]}, 0xc0}}, 0x0) 09:27:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x40000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2145.299224][T30428] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x8803, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:00 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = socket(0x9, 0x1, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "2f81423c59db1715", "e5e439e3957d1aca6f03e43eea8d695620e85d9b9955f9b1cd0e55f4b15d03ba", "92407c54", "3546b07d13a4bee1"}, 0x38) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="006d656d6f727901"], 0xda00) write$binfmt_script(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="b4"], 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6ebc, 0x5, [0x1, 0x6d, 0x400, 0x0, 0x6]}, &(0x7f0000000180)=0x12) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r4, 0x3}, 0x8) write$cgroup_int(r2, &(0x7f0000000200), 0x3fe00) 09:27:00 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x8000a0ffffffff) [ 2145.405769][T30432] Š: (slave bridge751): Enslaving as an active interface with an up link [ 2145.469031][T30428] Š: (slave bridge751): Releasing backup interface 09:27:01 executing program 1: socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x4e21, @multicast1}}) socket(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)) pwrite64(r1, &(0x7f0000000200)="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", 0x200, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000440}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fedbdf250e00000008002600000000000500a2000700000014004c0003ac0f0011ac0f000ff4100008ac0f0004000501"], 0x3c}, 0x1, 0x0, 0x0, 0x4c024}, 0x24000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 09:27:01 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2146.014625][T30432] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:01 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x8e02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:01 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf0ffffffffffff) [ 2146.089939][T30428] Š: (slave bridge751): Enslaving as an active interface with an up link 09:27:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x48, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:01 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x100000000000000) 09:27:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x40020000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:01 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9001, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2146.423794][T30480] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2146.460517][T30482] Š: (slave bridge752): Enslaving as an active interface with an up link [ 2146.497298][T30486] Š: (slave bridge752): Releasing backup interface 09:27:02 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x200000000000000) [ 2146.729693][T30480] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2146.767701][T30486] Š: (slave bridge752): Enslaving as an active interface with an up link 09:27:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x4c, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:02 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:27:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9003, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2146.940870][T30507] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2146.990623][T30509] Š: (slave bridge753): Enslaving as an active interface with an up link [ 2147.028413][T30513] Š: (slave bridge753): Releasing backup interface 09:27:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x6d18773e}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:02 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x300000000000000) 09:27:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000005880)=0x78a, 0x4) r1 = socket(0x10, 0x80002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendmmsg$alg(r2, &(0x7f0000005ec0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="855db6edea2f976c0d2963788cdb8ae2162374b8c2a27d811e3cb357598e7982d02264e1df07590e254728abbf22bc0596e3bcd194a5eba6be73b0c57baa540f19ba6c72917471e9951867555a44628de9817682542277fcc05c4e401a51b8ce2c", 0x61}, {&(0x7f0000000180)="f520a27581fb5ba253b88f1b499e221ebdb55560", 0x14}, {&(0x7f0000000280)="dd3b90141a0c", 0x6}], 0x3, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x10000}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x50, 0x117, 0x2, 0x37, "0128237aa7f719856571f7be55f6fb00fb77cada1ea531375443e119773b3b637e30f8acbea525df63408b6e3e30541e2d0c6db363a93f"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xd0, "04a41edbcc528be100763ef17795cb8b04f27602328ca9fc630c902bd241cbd2990d586fa01e9634138af88bf8a46b4a1b0320fa2ff73eabb6f5dde65206e56af89ad2afdf1fd03d19c36241bf3e5522fd8ed1360aef52dad9579c434cd7cd8b41c7664c5bab759da71754f4f98b175c68b218cbbe9984f05e3f53a4cc9c451c7c003716181596977528e9117cdcfeb7f9a836f689496bfd2a16cd3ab930a597794991982657b3925034fc02394c5f4e284d9fe58609e781d26213241ca8519143412a2a1c8fc536528c91fce0fb2453"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x11c8, 0x4}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)="b8e561f89e46e2c0aca8e40e6e006630dce3745e257463dba01dd676ee7418055704b8c67d6c9ef922b64da2a49aeebf44df374db1a06bf4492042ff6a5bee03d6fc9fa3fd79fd8c4081ef140c7241d357aabe6642f12bb2b2e18af7bfd8d6ed42b7a3c78648c382a086b314f5c1c1a27f19fb5a5791534a9009c587a4f9482b6dc7", 0x82}], 0x1, &(0x7f0000001640)=[@assoc={0x18, 0x117, 0x4, 0xfffffffd}, @assoc={0x18, 0x117, 0x4, 0x18}, @iv={0xb8, 0x117, 0x2, 0xa1, "7b609f5cf7a7500f80bc4c9c3f4d14bbda779d90a254d9ed315cd104bc4c8523b4bbdf78666724abea314f64882b715f3bb4e4a88ab90dbb2dec3d7000a8b1f7793bdf12d9a5c27ead184637086a472fb686651a385ae4b2af99ddda516950a13fe16761b23f6a3ec608b3aca03ade7ccf5cb089295e662f5fca21ad1dabf8b0c779e6d11776bed66ae7edfe436a28ba09db3ca0a355d79f12eec0fc70891e3775"}, @op={0x18}], 0x100, 0x4000}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001740)="8484c02f6207ada9fbdc02e488e83cbd959f1d207926a47c972ec582f922ccfa2c3ae82fc3f96e4afdb24fcace7e9486", 0x30}, {&(0x7f0000001780)="e0474da2a3f558edd2ed5cde4f8380c7ba30a3458f795825684f651e866212e91284d33b948b4e970e46e6abbb5f17a17f07be6803911d3367c2bfe1962a7404b80c0299ebc71e8d446209dddc06379e2f9a3c0b29bc256ebe360940266ff1066967a28ae588559caa83909847c5f27181173208a5765c0e13ccfca3e11a7070fdc8463052023b7acd7d3d99600ae8", 0x8f}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="9a37c81fd31d8002f35e6a469301b5c556ac46421c0643a509fdade14eedc049a7d4396519df7f57040a94d3dd2d49895f108bc5203abdea66a793c1bc775eaddc74bc301b7aab40e36c94e95c1c84b428960593c7a70210a11a98d596fa87e3a74c744ce50b501aa72a6f47e40f63ef782cce4324fa021201e092eb7179b3026c0778912ebcdf1fb296ca77dbf44e8dd18482ad3f2764e31dda65244e7dd59191a33239f3c7b269f2", 0xa9}], 0x4, &(0x7f0000002940)=[@op={0x18}, @iv={0xa8, 0x117, 0x2, 0x8e, "16648d701767449cbbcc89b8ad04e8e2ee1dcd0d1df27932c21f4f95db48dcd78e6cad8c3cf7393cb62c64d4b3efe9f7c4a2d521a6b7af9f19104a0eb32dbdeffda56a46dfdfc08c1fbea4295210740d4f59ee24be30a72054a7a0c78fe05c2f2773ec7ba2671febaf4592ddc7f4a439911612bfbba5ae1d89e2c5c462dbab1a0ff0e213692ab3a388c85deea758"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xcc}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x9, "97f8b81aeff46bf285"}], 0x140, 0x80}, {0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002a80)="bee546b6e2a8fc31df516be7fe961bfef44bdf613be397619294dfc7b555ccb10989206c211bc23a9f4d30b7405e2cac19405b", 0x33}, {&(0x7f0000002ac0)="f47c3f2a583d0e6a538f4c51926e2f7a006313acad44c510ddd4ed20899b1ce3bf4c800715aa9eeece4a0751938a694f7816a1875c8e9cf40ad6b35a0555aa14919c85706537b0aaa9a6c9d222124499e773dbe1fae9087b6ca9b45e22784ea9d02bf16e39fcf0d0e126d33a352bf1adba402a571632416f61e3c6d31d841a5d329ce3d6fd234aba0f02d6e1572c6bae1716fabb6d84fb9815e76e0866ca75d20ba9566c8866ad8a", 0xa8}, {&(0x7f0000002b80)="8c91f4ce0ca9fd93b2c1aa2c2709c67ddb57a53deb3b3eb3b3a82808b77847a5da389b402bea5ff81ef3d4505ffd5060086ea5c66d6d1c6c9c3bd28e9258d77553f8bcd6f814b2dc3ed5c3344a3e29cd8d3d480226ae8ae1a25ed1d1d833c3a7a023020486f5d9888f44ff677db1389fb0400b9bfdbd255e16bfaf2457fb4f4ea123f6a29575ed096026c7416866a93e56df650eecfcb73e066a7969", 0x9c}, {&(0x7f0000002c40)="5488eb96f8dd4d846337da587c0fea72f0a280a73d5c8975893f6e6a0070c0096581e8da265392b31a0f3c471ae24913e8f28acb063a8992ce9705a36f38a89d9af338f2370947296085ac1fc9026aae1ce62b65df996c0614", 0x59}, {&(0x7f0000002cc0)="63da58a2072dac901d854719f9b05bac25dd31300e442c5983ae69d924069e3d4c9446f475c26e356c328f74d0c9c668e3ae6695d088a0fdfd1bd7056fe901073e7a12a1d828665c4d1ef83f34b597de2b26b13ebfcfe93c46ff6e4572920c918666c664bb1b1de24124d31e8d00ad6869ca904eb29b0b15884a9f957557d60f2adab0701de56623b3972f9c76cafdbd454056f09a2e025eda3af70882e827dc1c0d196f325fc20080d1269c056ebdaad895ae", 0xb3}, {&(0x7f0000002d80)="40fd3fec598caebb75e8c2cf9f36c38210b0213dbf9d213784337bde45ad29ee1d05bee69f12ba2fb9da35e82c51657b7df31b7f502b192b25a2987a0f5cf79f48e206c8a6cc9ac5bc5dca73a834803ef970ffc60c48e80e882e2fd0840d0129a5fb3aedb0388733ac4b7d0603056a436f1e063dee93313b39dfacad780cc8934688929ece724bcdec1122f3b03d7627b40cac1432d1c0dc6efca0546281aa3ff3db2f59c84fabbd1c44683be04dca", 0xaf}, {&(0x7f0000002e40)="49effc01f7343d39b88f2d444013c15bcd7c6386d23629b61fe1113528eb364c4072aa98b3692c266f282a11798c8b2d9021b39c39b29c8c509e17cc4393ead857eeecd34657ab5c275a37e7fc70a8c5272e5b083e633f8f820b5955d2bcb2448435c6e11cf3bbdd6674083ee7048dacaede621db3e1e6a98b762e934e4de4bf9a33d3a873e1f7fb439b916ba744e08bdf17378f3184a58ea4b1d363e4e33641c0544c0904741e386cb4e598d601e536cc883c96885679", 0xb7}, {&(0x7f0000002f00)="d9e98fea03cc4ecca1cb48c47bc72ec61aecf8f50f765890cfbd2a37dfa818554b12ff00867e91dac82ef8f7ecb6138da2cc23a28d93a5181b4671e690d1d7f8f669ae57d010607672c2ff076941229a6bef91f7ab4666b2c82107967189ceff84a306ae482d8d5df0334f989e0d648677e2bdc9e8346718771a81b4706aa181ca033adfe9d84b8960e851d090c7b301ddd79b2dd030d8c5345f6553e931c3eebef2031a52e9eafb4ce809eccba859135a0bf1ded13a8e23ca3c39f203e6b716e526234d274143de7bd8e8b19f2ce9e167c8c151acbff9913c56919abe13095c0ac4ca6a45605c06b33cfdee2e7e24", 0xef}, {&(0x7f0000003000)="1324e0762e19e0fbc5795de1080ceba91ae7b106748c255ecd0d8af467e39d03d8acefc2b2eedf5bfb029fb0af5b177f6775e82af6a9bbe9e950d9772227b143b248e38d4737a762f4b454b629bcc1230b1d128c5ab2600355f914bfa25c05f79354520afe11affaf5ac53e6", 0x6c}, {&(0x7f0000003080)="d6320116b1845546fa5d40751e37470c4c364d36dbcc5bcf3b013caac10015c3ee0971d594499ae938f6efb110be030374432dbb183114d80ca56e14f902934fa7285ee51a20d4c62c93a28ca2c1f032fe06c47520654d811f1e32a2eb8a6b4883f6282a12ad39bb7da56518720fe2285eb2af7ab862f77ab48b843eefcb01adaa5cac2903ade66582ae3df7e56e40440734722f6c8fb80ef29f3c7db18a7d", 0x9f}], 0xa, &(0x7f0000003200)=[@iv={0x78, 0x117, 0x2, 0x64, "abf4fbfcef8156c355114ad2aea8935fe5d6aad93fb4b6166a9576ec50bd6c8af68697523df2fde24c41c6bec44701c8422d38ec6d8fdf7e28f58b9626e889a3e19441abd712edc16b0e549724f054df159748e95ace83b2af7c4595e19720a1d69fdcf7"}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @op={0x18, 0x117, 0x3, 0x4ce3442b2482a35}, @iv={0x48, 0x117, 0x2, 0x31, "3ce88d74835a0c4cbdccc8b59589c832eef2bd4ea3e2e79197057bad65e05b1f87c18809b56db1cc133d1c8fa4d6d7130f"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xe9, "f5cec2042c5ba1459339ad4ff2037d5581d1b8bc400671024d064cdf5c922a25533d3216d0b9f4d9e5623e9c88c642c3dfcc851c4bf1f1a8d848d72cdc02c9e245cad6986ebad32d334721875c1a67dca017de6be5d6c4e4899a94fa01f888763034eef3680eda3a376e20d5e9d73d60af928bdee1a0f7d15e383dfd7c651c32dd28edfb06063f5706902909a85ecef56935db9c0e04d10c619ebb075fb7bcc18f072434f3f6cd57b86f7fd5f7c86b3af616f6e5c2ea964d7f1e41d159d390b5fbd8f95d2123dcc4e2790cb46c6d18fe3dfdc20bb40ab525c60c542f4a13005cf77d7c87a51b790fc6"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x1268, 0x8000000}, {0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004480)="83aedfe5508a36b82737b67efa2ac41392198b86dc5bac2e1273f3b1fc9d029ffd5283a515849516c1f43e8b3469aa43deac34e568440213ca553d18fd0778c8ade67edf6d340eeeff5b87037bc93c8f32768d11bd3305961282a88ccbfc4e3df121604637f6aaf132cc5a4f84b5270cc23e795d5e5ff921fdbb7ab86fbd966b8411a0472bfc3548c4e74b8d2b34eb38ed4457e335c50f3da2d05333ff76df2722708dfcec2b13906296c1c91470a6247d5b6f1bec471da68834c1c1d641494bca7fe95c83c99541079e52ddb0c3db", 0xcf}, {&(0x7f0000004580)="b0f357828f420a527fffb78c3b9332c4d6c0efb0b8ac75346c", 0x19}], 0x2, &(0x7f0000004600)=[@iv={0x50, 0x117, 0x2, 0x37, "fb318c2a07b707bd95ac5ea808b5f081b795a02eea3b8d76031f12b84e9e7f2578db40db0e682514d0e09b28949ba67b3a3d4b6a17e6f5"}], 0x50, 0xc050}, {0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000004680)="fbc3828ce7285cf7620db4dfd4bfde1c2ff6592a42e0ee87a9c82206044b64e44c22da057b736ccfaa803e6adae97709a3076d95d9bb4058f4b2899c47ebf85ac3def45219761e81dc856c2f13af968a146d2bfc84856eecfd0cd7e02324dec9803602e6f02f73d7672577241eaedfe06b5b3c1e4862a76267f0aad1e6951197357723e0422f78a1c6178f400d8bf5158b110171b9994ebc4daee17dcb12a7cb71edabd3e069e7b200b69c7e8778b5dc441d6e261caf80f79a831fe4d9564a9da92e0bfea70dd857ba6fa032bdaae5302106e4a749e17c26b39004cf41c3ce108b659f4627923332d6676f29", 0xec}, {&(0x7f0000004780)="3a1d0472134c203f22a88773de1a7e2820c7c3700db97f19b345688b69ccbd8b9db4bcbc9cd3e8f98e5ee3066721ce74db1efe790709283079bd61f059bd83458ea860b5f490024fc77bd893b25e8be5140b4205bf187fd1c4ed0a737ddad31f620506bda086ffde6384ef50c26c2cac9d03dd1b117b63f3a2faec0c3367279fa7051069787302eca6dcfe37f9cdaa79dc2fa84c5d7e8f9a9e0c5822762b361ac6bf413a625aa08dd89be8144bbac5fbb2abf695121100c54af19573c8c8593edcb7aadaef2bc49eadc23e596dd1ba782cbb6b3fdfb3199bac0a2ae5b6a6a36abb44cdac676dc3fa1f7461f8d4f47f", 0xef}, {&(0x7f0000004880)="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", 0x1000}, {&(0x7f0000005880)}, {&(0x7f00000058c0)="85dbe1d8da38f01047c06ef511c3d812f4b5e7c03137c5a877a04a671dadcc85ed08b5b622a72ba0e40e1e2626a92c70f03639fecfd225c3c3e7aeb3222fdcd7a605d78763ee0458e21aea03fb7b81bdc06bdd79812f5f7f", 0x58}, {&(0x7f0000005940)="fe7943e74e095541b81e7ce317c7425f02bc07c8868f85d5f2d033c22155e3f2facba3b96e7c2656242e2c29a1edf0a01702c269bf573b5d35b95d7090c9d74ec5be576fe16910c45ab317b23139c8f4f4511b8284a2729f65c8bdee3df162d63df3b9dcd7866a84e818abd917ca21c64e402cf606ca0a19c53239cee95b55dd6daab4f3938af7fb5910bf229b5f3dfcb827f69f27f9a1e7c39f3d5d75ec060c287414d89a1398b6af8f8df1", 0xac}, {&(0x7f0000005a00)="e29fbc0917ecdc31bc21901d293c8d1b631a1fb1829ec37f3260e3e052bc3784a48b8d5326d06f89266405b0aa55032f888785ec8878260d27e8768819b98f70904285d0dea389abe15ac2e2adeaf0dabf7b13bf679dfc32c6676af72483a7fc920281dcb9f914edc605d6acb6515c70a595f81dfc1112d51fd7a0e6c2d6ce802cb4bf45061512dd3c42178e0b9dbe832aef1d3adf204dc1063eaa9d5204283368a3d277600a8d3c1d5d942b5d68d1f6a222c3e5b7d559015877f22c48c7292c8d44b8ac09fb982b08742ab412dbfffbbf26d82d0428f229b2cacdbc8ba0e2d99e5b316989d54e49b37a7e11bcc9b93729c83b0d5540", 0xf6}, {&(0x7f0000005b00)="6194e0d442db1c42bdcdb5ff387f2a6d8bd5caada4c737cca8174b9a278a874f7352ee8e", 0x24}, {&(0x7f0000005b40)="e7efd468ec093dbaaf59c134f9daf11b6174124cef508fd7837fec019e177961cca729489fdf6334d3be78af6cfa0abf43ec68e029647f6b84bc93b2f2f5ab5ed0d13fecd25c52e3f2f89f309f9c24f263b0af4e62a701c9a4e8ac024d9a607a96cc3e248eed484bd4efaac5aa86bd7d344ee49c1dad1be9659f301be6edb7a886256a9ff89f8c2b3b886e091d9f89d532e2e7bac56960cff53bd9784225ab30f95e2a8c6c475b2ff3", 0xa9}], 0x9, &(0x7f0000005cc0)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x88, 0x117, 0x2, 0x72, "1a8522ee4f36a1535600cca012c1e842ec5b63505f6b283e4d5478309e5db2a04bf2e613a467923142f691ad2c7be4be92f7b32770ed1f821ec6a4b1593576aa8d86a304128637afe277c68e860cd50e516531a44d82ac20d8e9fa6a1791a4c7fc76003813bf19e3cf5917eed3896bb174e8"}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x3}, @iv={0x60, 0x117, 0x2, 0x4b, "6a2000f0ec5f00f57fcc05953b8c15dabcee80100e79ef82c28a96db8543d6d8f1ecd720c97ef103d61ed130282eaa99575750cae8021bb9c79db5fa6f344b77c37e39f64ec0b91fc23fa6"}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x9a, "e5d23cf4d15393a67f928dc49c1bd7b4bea1b3da5726d5cce890ca9e9551c6f27c269d7f1c7b06940f6e8b1c1ed7d0e59eee882c635f3066c5acf01483f68f30fcc7623a1d698e09097b437588e0d471d512abd92f03703892ef9914ec33d0ef619c93ecf90b9e6219674947f232f612e27fa625b1ab783d3a4a8ae27386b45e39d936438ee46f1a3f37c1bac298c548fb2d9d4bc0b4b392d1d6"}], 0x1f8, 0x80}], 0x6, 0x1000) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0030000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) [ 2147.422569][T30507] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2147.449134][T30509] Š: (slave bridge753): Enslaving as an active interface with an up link 09:27:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x60, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:03 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9400, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:03 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x400000000000000) [ 2147.690072][T30545] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:03 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010000000000000000000000000105000100"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2147.807633][T30546] Š: (slave bridge754): Enslaving as an active interface with an up link 09:27:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0xffffffff800) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x20020090}, 0x4006) 09:27:03 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x600000000000000) 09:27:03 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9403, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2148.014267][T30546] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x8dffffff}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x68, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2148.366980][T30574] device bond6 entered promiscuous mode [ 2148.399169][T30574] 8021q: adding VLAN 0 to HW filter on device bond6 09:27:03 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xa00000000000000) 09:27:04 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9601, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:04 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010000000000000000000000000105000100"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:27:04 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000200)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) getpeername$netrom(r2, &(0x7f0000000040)={{0x3, @rose}, [@netrom, @netrom, @null, @rose, @bcast, @default, @rose]}, &(0x7f00000000c0)=0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, @hci={0x1f, 0x7}, @isdn={0x22, 0x80, 0x7f, 0x5, 0xf5}, @vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0, 0x0, 0x0, 0xc47a, &(0x7f0000000100)='team_slave_0\x00', 0x7, 0x7f, 0x8001}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r4, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000001c0)) [ 2148.842953][T30589] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2148.922170][T30592] Š: (slave bridge755): Enslaving as an active interface with an up link [ 2148.982885][T30598] Š: (slave bridge755): Releasing backup interface 09:27:04 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xb00000000000000) 09:27:04 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c400000000000000000020000000100"], 0x2c}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond_slave_0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x9, 0x6, 0xbbd, 0x3ff, 0x8, 0xdf, 0x7fffffff, 0x78}}) r1 = socket(0x0, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x70000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r5, &(0x7f0000000200)="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", 0x200, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000200), &(0x7f0000000380)=0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0xffffffff800) sendfile(r7, r6, &(0x7f0000000040), 0x100000001) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000002c0)={0x1000, {{0x2, 0x4e23, @local}}}, 0x1e) accept4$rose(r7, 0x0, &(0x7f0000000180), 0x80400) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") 09:27:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x91ffffff}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9a02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2149.533560][T30589] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2149.569441][T30598] Š: (slave bridge755): Enslaving as an active interface with an up link [ 2149.581204][T30592] Š: (slave bridge755): Releasing backup interface 09:27:05 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010000000000000000000000000105000100"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:27:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x6c, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:05 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xc00000000000000) 09:27:05 executing program 1: socketpair(0x25, 0x1, 0x7, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000003c0)={0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="180000ff04000000000000000100010018160000", @ANYRES32, @ANYBLOB="000000000000000095000000000000002954ffff000010009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) socket$inet(0x2, 0x75210f583bdccda4, 0xff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000080)=""/135) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x4, 0x7f}]}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000001c0)={'macvlan1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}}) [ 2150.067738][T30655] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9a03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2150.110399][T30658] Š: (slave bridge756): Enslaving as an active interface with an up link 09:27:05 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xe00000000000000) [ 2150.295542][T30655] Š: (slave bridge756): Releasing backup interface 09:27:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xe02e0000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:05 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) [ 2150.588019][T30655] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2150.617933][T30662] Š: (slave bridge756): Enslaving as an active interface with an up link 09:27:06 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf00000000000000) 09:27:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f0000000180)=0x78) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000085fe53558486a39cc5b2726500140002000500"/40], 0x40}}, 0x0) 09:27:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9c03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2150.815771][T30655] Š: (slave bridge756): Releasing backup interface 09:27:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x74, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2151.083756][T30697] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 09:27:06 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x1000000000000000) 09:27:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x2c}}, 0x0) 09:27:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x9e02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2151.303118][T30709] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2151.340972][T30712] Š: (slave bridge757): Enslaving as an active interface with an up link 09:27:06 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 09:27:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xf5ffffff}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:06 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x121d000000000000) [ 2151.476818][T30714] Š: (slave bridge757): Releasing backup interface 09:27:07 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x89, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x218, &(0x7f0000000280)=""/189, 0xbd}, 0x9}], 0x1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[]], 0x8) r2 = socket(0x1e, 0x1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000180), 0x4) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) read(r3, &(0x7f0000001600)=""/4096, 0x1000) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1b7}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="4d50b441e692763113ef8745ffa3", 0x0, 0x400}, 0x28) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r4, r5}) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0xdd}}, 0x24) sendmmsg(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000140), 0xff4d) sendmsg$NFT_MSG_GETSET(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0xa, 0xa, 0x202, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x41}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80080) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) setsockopt$inet_buf(r6, 0x0, 0x30, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4) 09:27:07 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x3f00000000000000) [ 2151.767090][T30709] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:07 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000200)="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", 0x200, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x7, @mcast1, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="6cd58fe19cbb9338b9ab062794f9d5cd7584d53c84ec2fbc2a575afeafa52cd46a", 0x21}, {&(0x7f0000000100)="285471da7b", 0x5}, {&(0x7f0000000140)="29d8a1a4852e8deb9a036aef191e52539a748d3f64594bbdcc9beba08f81fb87127b0a6461a0757f49eabc453e3b22d5b19b442b9e559f8cc7438db801d1bd001bbd616c712a72cc5b61bb51303f3421fecdef815593a28622716872d00c89ff3fc24f6a1ffe1dc8057b91a25da64a702dd36331d51bc15304", 0x79}, {&(0x7f00000001c0)="47948608d8df37bd2121046d42b76333db1d5b120fd1d19a3e511ecf76e2dfa7f7", 0x21}, {&(0x7f0000000240)="c001ca8957a89d6e2cc4789f2b5637b4339420b3f36bb5b5b5cd166b61464f3be72ec7ab5afebde6288b9adc412a6c86b2da1fc7adf890f6d30a9cd5b29db05b5337adf742ea2c2c01587e56db8939097a1362634a4a49e4ab5fd3520ed4c9d75f7c9b421abeb8f1a06b91d2", 0x6c}, {&(0x7f00000002c0)="489059fbf6c514ae39a5db6907f5e7c78cc95dce6fa20f880661a9465bed1fc2fd9ee7e869c55445c288c0", 0x2b}, {&(0x7f0000001a80)="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", 0x1000}], 0x7, &(0x7f0000000380)=[@tclass={{0x14, 0x29, 0x43, 0xfff}}], 0x18}, 0x800) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="bc79ba7373fc5f8c0b2a359bc70f0df805000000"], 0x10094) 09:27:07 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xa201, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2151.948698][T30714] Š: (slave bridge757): Enslaving as an active interface with an up link 09:27:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x7a, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:07 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x4000000000000000) 09:27:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={{0x1, 0xfe, 0x47, 0x4, 0x7, 0x1f}, 0x3f}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x5, 0x1, 0x5, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000200)="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", 0x200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x71e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd83}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x1) [ 2152.101111][T30761] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:07 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xaa01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:07 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) [ 2152.319517][T30761] Š: (slave bridge758): Enslaving as an active interface with an up link [ 2152.346174][T30769] Š: (slave bridge758): Releasing backup interface 09:27:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xfc000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=0x0], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="240012000e000100697036677265746170000000100002000400120006000200be000000ae8985f0cfcad5b271754c193f6afd3fdc64d8328c50b96895e26355a3ab8664a608d8cefd5b79cbdf355b7eeb227967c356d874c5543fa6b56da3"], 0x5}, 0x1, 0x0, 0x0, 0x40003}, 0x0) [ 2152.728169][T30761] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:08 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x6000000000000000) [ 2152.790501][T30769] Š: (slave bridge758): Enslaving as an active interface with an up link 09:27:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:08 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xac03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2153.003940][T30805] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:08 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x6558000000000000) [ 2153.080630][T30807] Š: (slave bridge759): Enslaving as an active interface with an up link 09:27:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r0, &(0x7f0000000200)="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", 0x200, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x2) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e00"], &(0x7f0000000100)=""/249, 0x37, 0xf9, 0x1}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f00000005c0)={0x42, 0x4, 0x2, 0x8, 0x1, 0x9}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r5, 0x0, 0xffffffff800) sendfile(r7, r5, &(0x7f0000000040), 0x100000001) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r5, &(0x7f0000000440)="e6a88e3e6f457b911e893e5e9dd3ab32ecbfc57fd196f82ec3bbf61af2e8fef6127e51d35c3757b467f32b2a19ab7dc6a5de081cbf0c3297bc46717cf4148381d5f4a8fc317c40215a518548498800e00fab2cc90ec1b1b23362742521fd6daee26c8e0938afca36fe062c0666bca7ab956eda52b1a939b4686e476d3fa73358a4413133b82935d75ebb7e1f04c07f956316d62a40587aa4856c9e349eb737561da1d7c4fba179b6c8150bb591e35b3b3793ab8eb09842ae1b89127842b75ab0525d3030"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r2, 0xc, 0x0, 0x2, 0x10, 0x0, 0x180}, 0x70) [ 2153.141579][T30805] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:08 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:27:08 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xac10, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xfe800000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2153.557455][T30805] Š: (slave bridge759): Releasing backup interface 09:27:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x2, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x8000000000000000) 09:27:09 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000480)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0x80}, {r4}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) socket$inet6(0xa, 0x3, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2b, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r8, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r8, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r8, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0x3f000000}, 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0x0, 0x190, 0x80, 0x0, 0x0, r9}, {0x1c993630, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x6, 0x6e6bba, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x4d4}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0xa7f8935fca5fa15b, 0x3cef14a422163db1, 0x2, 0x0, 0x0, 0xd2}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in=@empty, 0x4e22, 0x401, 0x4e22, 0x8000, 0xa, 0x80, 0x120, 0x2f, 0x0, r9}, {0x2, 0x7f800, 0x100000001, 0x100000000, 0x100, 0x1, 0xff, 0x99c}, {0x6, 0xffff, 0x2, 0x49f}, 0xe6c, 0x6e6bb9, 0x0, 0x2, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xff}, 0x1, @in, 0x3507, 0x3, 0x0, 0x5, 0x1f, 0xff, 0x800}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@broadcast, 0x4e23, 0x83, 0x4e21, 0x5, 0xa, 0x80, 0x90, 0x1d, 0x0, r9}, {0x8, 0x2, 0x7, 0x6, 0x6f, 0x100000001, 0x2, 0x100}, {0x80000000, 0xb3, 0x4, 0x10000}, 0x6, 0x6e6bb4, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0x33}, 0x8, @in6=@rand_addr="b7677c1b8b9f67513a0073d337d3d023", 0x0, 0xf13d7da3df0727ef, 0x0, 0x0, 0x5, 0xc3fc, 0x8}}, 0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@updpolicy={0x148, 0x19, 0x0, 0x70bd25, 0x25dfdbff, {{@in6=@rand_addr="980423d06c0c782767a8e193086b7d4c", @in6=@local, 0x4e24, 0xff, 0x4e24, 0x8000, 0xa, 0x80, 0xb0, 0xa9, 0x0, r9}, {0x10001, 0xff93, 0x0, 0x8, 0xffffffffffffff74, 0x5, 0xfff, 0x4}, {0x2, 0x5, 0x100000000, 0x5}, 0x6, 0x6e6bbf, 0x0, 0x1, 0x2, 0x1}, [@lastused={0xc, 0xf, 0x2}, @algo_auth={0x7a, 0x1, {{'crct10dif-pclmul\x00'}, 0x190, "d358ba927e763229356f470887b2a563384331ba261a94bb26b8b8f2fda4b7052a40890a406328bc751c9234bc5ed106527d"}}, @proto={0x5, 0x19, 0xff}]}, 0x148}, 0x1, 0x0, 0x0, 0x24000040}, 0x808) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r11, 0x8b2b, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r13, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r13, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r13, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r13, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r13, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0x3f000000}, 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0x0, 0x190, 0x80, 0x0, 0x0, r14}, {0x1c993630, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x6, 0x6e6bba, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x4d4}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0xa7f8935fca5fa15b, 0x3cef14a422163db1, 0x2, 0x0, 0x0, 0xd2}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in=@empty, 0x4e22, 0x401, 0x4e22, 0x8000, 0xa, 0x80, 0x120, 0x2f, 0x0, r14}, {0x2, 0x7f800, 0x100000001, 0x100000000, 0x100, 0x1, 0xff, 0x99c}, {0x6, 0xffff, 0x2, 0x49f}, 0xe6c, 0x6e6bb9, 0x0, 0x2, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xff}, 0x1, @in, 0x3507, 0x3, 0x0, 0x5, 0x1f, 0xff, 0x800}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@broadcast, 0x4e23, 0x83, 0x4e21, 0x5, 0xa, 0x80, 0x90, 0x1d, 0x0, r14}, {0x8, 0x2, 0x7, 0x6, 0x6f, 0x100000001, 0x2, 0x100}, {0x80000000, 0xb3, 0x4, 0x10000}, 0x6, 0x6e6bb4, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0x33}, 0x8, @in6=@rand_addr="b7677c1b8b9f67513a0073d337d3d023", 0x0, 0xf13d7da3df0727ef, 0x0, 0x0, 0x5, 0xc3fc, 0x8}}, 0xe8) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@updpolicy={0x148, 0x19, 0x0, 0x70bd25, 0x25dfdbff, {{@in6=@rand_addr="980423d06c0c782767a8e193086b7d4c", @in6=@local, 0x4e24, 0xff, 0x4e24, 0x8000, 0xa, 0x80, 0xb0, 0xa9, 0x0, r14}, {0x10001, 0xff93, 0x0, 0x8, 0xffffffffffffff74, 0x5, 0xfff, 0x4}, {0x2, 0x5, 0x100000000, 0x5}, 0x6, 0x6e6bbf, 0x0, 0x1, 0x2, 0x1}, [@lastused={0xc, 0xf, 0x2}, @algo_auth={0x7a, 0x1, {{'crct10dif-pclmul\x00'}, 0x190, "d358ba927e763229356f470887b2a563384331ba261a94bb26b8b8f2fda4b7052a40890a406328bc751c9234bc5ed106527d"}}, @proto={0x5, 0x19, 0xff}]}, 0x148}, 0x1, 0x0, 0x0, 0x24000040}, 0x808) r15 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, r15}, 0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, r14, r15}, 0x639) gettid() socket$inet_dccp(0x2, 0x6, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) r16 = socket$inet6(0xa, 0x0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r16, &(0x7f00000092c0), 0x4ff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x801, 0x0) r17 = socket(0x100000000011, 0x2, 0x0) getsockname$packet(r17, &(0x7f0000000040), &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, [0x0, 0x0, 0x6], 0x28}, 0x2}) r18 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r18, 0x114, 0x6, &(0x7f00000000c0), 0x4) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r19, &(0x7f0000000040)=ANY=[], 0x2343a726) ioctl$EXT4_IOC_SWAP_BOOT(r19, 0x6611) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x2343a726) getgid() r20 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r20, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) socket$nl_crypto(0x10, 0x3, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) 09:27:09 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xae03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2153.895955][T30852] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2153.985196][T30856] Š: (slave bridge760): Enslaving as an active interface with an up link 09:27:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x8100000000000000) [ 2154.035854][T30852] Š: (slave bridge760): Releasing backup interface 09:27:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:27:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x88a8ffff00000000) [ 2154.348666][T30856] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000200)="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", 0x200, 0x0) recvmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x5, &(0x7f0000001500)=""/113, 0x71}, 0xa4) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5000100}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, 0x0, 0x600, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x38}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'ipvlan0\x00', {0x2}, 0x401}) 09:27:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xfec00000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:10 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xb200, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x3, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:10 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x9effffff00000000) [ 2154.710014][T30904] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:10 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xb201, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2154.968117][T30913] Š: (slave bridge761): Enslaving as an active interface with an up link [ 2154.997929][T30904] Š: (slave bridge761): Releasing backup interface 09:27:10 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:27:10 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xf0ffffff00000000) [ 2155.288509][T30904] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2155.336743][T30913] Š: (slave bridge761): Enslaving as an active interface with an up link 09:27:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xff000000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:10 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xb203, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2155.505847][T30904] Š: (slave bridge761): Releasing backup interface 09:27:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000200)="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", 0x200, 0x0) recvmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x5, &(0x7f0000001500)=""/113, 0x71}, 0xa4) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5000100}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, 0x0, 0x600, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x38}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'ipvlan0\x00', {0x2}, 0x401}) 09:27:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x4, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:11 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 09:27:11 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfc00000000000000) 09:27:11 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xb402, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2156.085030][T30960] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:11 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfe80000000000000) [ 2156.150877][T30963] Š: (slave bridge762): Enslaving as an active interface with an up link [ 2156.182520][T30960] Š: (slave bridge762): Releasing backup interface 09:27:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xff0f0000}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:11 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfec0000000000000) 09:27:12 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xba02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2156.649411][T30982] Š: (slave bridge762): Enslaving as an active interface with an up link 09:27:12 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xff00000000000000) 09:27:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x5, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000024ffffffec", @ANYRES32=0x0, @ANYBLOB="05000000"], 0x44}}, 0x0) 09:27:12 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 09:27:12 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xbc00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:12 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x313, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 09:27:12 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xffffff7f00000000) [ 2156.947822][T31003] validate_nla: 1 callbacks suppressed [ 2156.947833][T31003] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2157.082474][T31005] Š: (slave bridge763): Enslaving as an active interface with an up link [ 2157.107320][T31011] Š: (slave bridge763): Releasing backup interface 09:27:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xffffff8d}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2157.314592][T31018] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2157.385445][T31023] bond7: (slave gretap2): Enslaving as a backup interface with an up link 09:27:12 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xffffffff00000000) [ 2157.442475][T31025] bond7 (unregistering): (slave gretap2): Releasing backup interface [ 2157.602331][T31025] bond7 (unregistering): Released all slaves 09:27:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x6, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2157.676727][T31005] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2157.692530][T31034] Š: (slave bridge763): Enslaving as an active interface with an up link 09:27:13 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 09:27:13 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xc003, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2157.853128][T31051] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2157.906683][T31054] Š: (slave bridge764): Enslaving as an active interface with an up link [ 2157.915647][T31023] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:27:13 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xffffffffa0008000) [ 2158.086891][T31056] Š: (slave bridge764): Releasing backup interface 09:27:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xffffff91}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000900)="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", 0x1000, 0x40, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14c) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000024000705000000000000000000001000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e5dd6cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 2158.510198][T31051] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2158.535472][T31054] Š: (slave bridge764): Enslaving as an active interface with an up link 09:27:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) [ 2158.581192][T31056] Š: (slave bridge764): Releasing backup interface 09:27:14 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0xfffffffffffff000) 09:27:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x7, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:14 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xc202, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2158.973002][T31085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2159.001892][T31096] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2159.048820][T31098] Š: (slave bridge765): Enslaving as an active interface with an up link [ 2159.068284][T31099] Š: (slave bridge765): Releasing backup interface 09:27:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffff5}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:14 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800110300100000000000000a00000000000000000000000603000000000000"], 0x24}}, 0x0) [ 2159.272972][T31086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 09:27:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000900)="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", 0x1000, 0x40, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14c) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000024000705000000000000000000001000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e5dd6cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 2159.318348][T31096] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2159.368323][T31099] Š: (slave bridge765): Enslaving as an active interface with an up link 09:27:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 09:27:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xa, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:15 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xc203, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2159.584148][T31119] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2159.625211][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2159.636301][T31134] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) [ 2159.697160][T31136] Š: (slave bridge766): Enslaving as an active interface with an up link [ 2159.709749][T31138] Š: (slave bridge766): Releasing backup interface 09:27:15 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x48b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5b76d0ed}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x8369575b1c23a4b) 09:27:15 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff16, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x10, 0x0, 0x25dfdbfb, {}, [@RTA_EXPIRES={0x8, 0x17, 0x4}]}, 0x24}}, 0x0) [ 2160.052389][T31136] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x17) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:15 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xca00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2160.248325][T31136] Š: (slave bridge766): Enslaving as an active interface with an up link 09:27:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xc, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 09:27:15 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x2ee8445c5c12bbbf, 0x84) sendto$inet(r1, 0x0, 0x0, 0x240e8050, &(0x7f0000db4ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x4) write(r1, &(0x7f00000000c0)="e6eb12d78547246ce6813236920df2cf1564b83ccf9520ae50453cac457f8eda02cf38f036ea5b5e69cc32cb03daeb79792a5fec9ca194dc62df0569d6d312a25e214a05", 0x44) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800739e404743e08c5fbcce9ea611032abd7000000000000a00000300000000000000000600150003000000"], 0x6}}, 0x0) 09:27:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000680)={{&(0x7f0000000580)=""/148, 0x94}, &(0x7f0000000640), 0x10}, 0x20) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x42b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) sendmmsg$sock(r0, &(0x7f0000000240)=[{{&(0x7f0000000100)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)="d9141fff323137107d7ce8759b7436c524abc826bacb8eb739"}, {&(0x7f0000000940)="6aeeaaf15e6df6b577cbafa4a55aa71df45ed11f96bee7715f368bbe4d99a25aa2c550", 0xfffffdda}, {&(0x7f0000000980)="0a50d8070f2ba444f5c0487967f41aa61e2f55fd459d5b6fe9fa2922e18585d51a72e2db4c41aff068bcf05e2f3ddf2b3ca9502c6b83fa4865306cb06b1f9490d2e3c9bd3600105c6f1a1ece0496e108598e3cb840fefcf87974d880a4ab0696674b031425339b3b1baaffe021341b866b6d8613cc58a4a71544203df84333d1fede38a39fe85e8e0da44cf0fdf8a44f92fca2008904df0ef03c84651b435d938a86fcc7889a81a62d41870db1ce62f04a409ac41259bab1fdfb8bebd2c09d8e60b344db216fb8e94c8335e46541790f9ae2e6698b592c3baa9cbff61b7b7d07592306f6896ded"}, {&(0x7f0000000a80)="ac9137ca7473c2cc17b461688ba20198b86093035e"}], 0x4, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x20000001}}, @mark={{0x0, 0x1, 0x24, 0x9}}, @mark={{0xfffffffffffffe46, 0x1, 0x24, 0x6}}], 0x48}}], 0x1, 0x4000000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 09:27:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x2000001c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:16 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xd001, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2160.758295][T31184] Š: (slave bridge767): Enslaving as an active interface with an up link [ 2160.839303][T31180] Š: (slave bridge767): Releasing backup interface 09:27:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r5, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r8}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000007c0)={'team0\x00', r8}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x11, 0x800000003, 0x0) bind(r12, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r11, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r13}]}, 0x24}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r14, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r16}]}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0}, &(0x7f0000000e80)=0x14) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket(0x11, 0x800000003, 0x0) bind(r19, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r19, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r18, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r20}]}, 0x24}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000fc0)=0xe8) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket(0x11, 0x800000003, 0x0) bind(r23, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r23, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r22, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r24}]}, 0x24}}, 0x0) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket(0x11, 0x800000003, 0x0) bind(r26, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r26, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r25, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r27}]}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000001000)={0x11, 0x0, 0x0}, &(0x7f0000001040)=0x14) r29 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r29, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r29, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_pktinfo(r29, 0x0, 0x8, &(0x7f0000001080)={0x0, @dev, @broadcast}, &(0x7f00000010c0)=0xc) r31 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r31, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r31, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r31, 0x0, 0x10, &(0x7f0000001140)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000001240)=0xe8) r33 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r34 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r34, r33, 0x0, 0xffffffff800) sendfile(r34, r33, &(0x7f0000000040), 0x100000001) accept4$packet(r34, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000012c0)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001300)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000001400)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004a80)={'dummy0\x00', 0x0}) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket(0x11, 0x800000003, 0x0) bind(r39, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r39, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r38, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r40}]}, 0x24}}, 0x0) r41 = socket$nl_route(0x10, 0x3, 0x0) r42 = socket(0x11, 0x800000003, 0x0) bind(r42, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r42, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r41, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r43}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004ac0)={'netpci0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000051c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005180)={&(0x7f0000004b00)={0x648, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x158, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r13}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x2, 0xfb, 0x3f, 0x40}, {0x2, 0x7, 0x8}, {0x3, 0x0, 0x80, 0x1f}, {0x800, 0x1, 0x1f, 0xffff854f}, {0x9, 0x3, 0x5, 0x7}, {0x7f, 0x20, 0xe6, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x174, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r24}}, {0x8}}}]}}, {{0x8, 0x1, r27}, {0x144, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r28}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x8, 0x20, 0x8a, 0x80000001}, {0x2, 0x40, 0x7f, 0x2}]}}}]}}, {{0x8, 0x1, r30}, {0x78, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r32}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r36}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r37}, {0xbc, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r40}}}]}}, {{0x8, 0x1, r43}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r44}}}]}}]}, 0x648}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r45, 0x0, 0x0, 0xc1800) 09:27:16 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x2b, 0x0, "f26733e556959a45547fc7d4214da46c5d210ba65dd67d932cda506aaef703638656a57e496a4ac9ad5b96da0fb59113c1f0ddf3016d5f7995e9b9390c5adb2f1f53a6c8ed9d06654478b187cb71bfe4"}, 0xd8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) 09:27:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 09:27:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xe, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2161.490568][T31225] Š: (slave bridge767): Enslaving as an active interface with an up link 09:27:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0x1f, 0xc0000123, &(0x7f0000001880), 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r1) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb90406c065160800030014000000020504140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 09:27:17 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xd, 0x6, 0x887, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58000}, 0x20000800) 09:27:17 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x7e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xff80, 0x7, [0x6, 0x3, 0x2, 0xfff, 0x5, 0x4a00, 0x6]}, &(0x7f0000000080)=0x16) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='ipvlan0\x00') ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000c7a099b311a4000000000095000000000000004f7711572418e34764d3966cd568c8998a391b48cacdc17cb3ebabb87a3923302ecf12b7ab8f055adeca30fa51d9a6c795bb6800dc1df99e4583d8b66f9471d466ffbba4e9a9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:27:17 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xd002, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2161.881517][T31244] Š: (slave bridge768): Enslaving as an active interface with an up link [ 2161.906847][T31249] Š: (slave bridge768): Releasing backup interface 09:27:17 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="430000001800110300000000000000000a00000000000000000000000600150003000000ed187769b93be856b015e83441b97664f05fe7a6877a8c581e2920c2a09288d01cc579d2db68e92a879e8d37bbab4a9256a67c8fdf8e73deaf7dc3827398fdf30fc90aa93924ae7d995eaa8c947c34ad10fac60d"], 0x24}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x800, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000000c0)={0x14216, 0x2}) [ 2162.129596][T31242] validate_nla: 3 callbacks suppressed [ 2162.129606][T31242] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xf, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2162.178459][T31244] Š: (slave bridge768): Enslaving as an active interface with an up link 09:27:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 09:27:17 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xd203, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2162.348801][T31274] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2162.442053][T31275] Š: (slave bridge769): Enslaving as an active interface with an up link 09:27:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xffffffffffffffb5, 0x20, &(0x7f0000001880), 0xfffffffffffffeeb) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000002c0)=[{{0x3, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1}}], 0x50) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040), 0x100000001) recvmsg$can_raw(r5, &(0x7f0000000740)={&(0x7f0000000040)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000180)=""/40, 0x28}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/24, 0x18}, {&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000000640)=""/76, 0x4c}], 0x8}, 0x1) accept4(r3, 0x0, 0x0, 0xc1800) 09:27:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1e) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={0x0, r2, 0x1d}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c, 0x12, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0xc, 0x2, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xffffffff}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 2162.482318][T31277] Š: (slave bridge769): Releasing backup interface 09:27:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='rdma.current\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x161dd6617f796ac6}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x240, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, [{0x2c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x329002ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb8685f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x180561db}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd8449ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x44, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7852a1c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x530ee249}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fea338}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a92b6e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1529ede2}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d22fd4e}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd37871}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}, {0x1c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77197161}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0x1c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e65c1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3609133}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, [{0x3c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c2dd9cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6de252d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cf425a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ea7a50f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc362}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7af2b782}]}, {0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeea6}]}, {0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a270fac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d5cbc5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1305a85e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68d749fa}]}, {0x24, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x768c2bdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x736930de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72a09a53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f38}]}, {0x4}, {0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x127bd5d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7980}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bb5}]}, {0x24, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71b57b7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x652e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbd7}]}, {0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x166aa6ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6372}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x189d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1265}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x734d8033}]}, {0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xabd7d63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fa1cf52}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) [ 2162.828300][T31274] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xda03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newroute={0xfffffc62, 0x18, 0x800, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x24}}, 0x20000) [ 2162.979270][T31277] Š: (slave bridge769): Enslaving as an active interface with an up link 09:27:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x10, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0x311, 0x0, 0x4000}, 0x1c}}, 0x4044800) 09:27:18 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 09:27:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xdc02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2163.283045][T31320] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2163.349121][T31324] Š: (slave bridge770): Enslaving as an active interface with an up link [ 2163.373891][T31329] Š: (slave bridge770): Releasing backup interface 09:27:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80000) listen(r2, 0x926) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5ffeffff000000000000f2dc10a84e52db65605600dc00"/36], 0x24}}, 0x0) [ 2163.601461][T31320] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x11, 0x1a001000000}, [@ldst={0x6, 0x3, 0x3, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) socketpair(0x1c, 0x5, 0x3f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210028bd7000fbdbdf25110000001800071f0c00030001000000000000400800020008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000200)="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", 0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x38, r4, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x5, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22012}, 0xc, &(0x7f0000000240)={&(0x7f0000000bc0)={0x3c4, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x257}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x205}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x211, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x20}, 0x4aae}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0xffffffffffffffc2, 0x4, {{0x20, 0x1, @in6={0xa, 0x7f, 0x2, @dev={0xfe, 0x80, [], 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_LINK={0x130}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12cd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xccb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xc81}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x2161}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xf17}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4}, 0x2048040) 09:27:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_getaddr={0x54, 0x16, 0x100, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x40, 0xfe, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x2f56, 0x4, 0xfffff317}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IFA_LOCAL={0x14, 0x2, @rand_addr="73fa3a9daa76218463c7b4dc4412b8e2"}]}, 0x54}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0xff4d) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000000)={0x2001, 0x7ff, 0x8, 0x4}) 09:27:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0x1f, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x20022}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:19 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xde03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2163.808253][T31329] Š: (slave bridge770): Enslaving as an active interface with an up link 09:27:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x10001) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r4, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r5, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r7, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffc90, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000182b070000f3e1e537dcf43621d5eb00004000000000000600150003000000", @ANYRESHEX=r3, @ANYRESDEC, @ANYPTR=&(0x7f0000001380)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="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", @ANYBLOB="f93ad26d0bb7b0e7ec212c2b61ba5dc604a1fb367e6c007876b2875f67b0ced58e4f0f1ee963087f6abecf0ba8f985559e10e02accc27f0006ee10edafc438a90b5553fc46b4cd594155a651204c2f14054b4dfd6279", @ANYRESHEX], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="f1d5bf041ed5d4431a08165ac481b99e3e98890de3d8b4bbd15ad8dce82ac9908dc656669832ef5b329e0c", @ANYRESOCT=r0, @ANYPTR, @ANYPTR64=&(0x7f0000001300)=ANY=[@ANYRES32=r3, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r4, @ANYPTR64, @ANYRES64=r5, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYPTR, @ANYPTR64, @ANYRES32=r1], @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=r6, @ANYRESOCT=r7]]], 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) socket$l2tp(0x2, 0x2, 0x73) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r9, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f00000002c0)={0x0, @generic={0x2, "7b984f7104f9ed4c336cf1911b45"}, @ethernet={0x306, @dev={[], 0x2b}}, @nl=@kern={0x10, 0x0, 0x0, 0x8400100}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)='bridge_slave_1\x00', 0x2, 0x0, 0x2}) 09:27:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) setsockopt(r0, 0x65, 0x10000000005, &(0x7f0000000000)="e1affde3", 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) [ 2164.037759][T31368] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:19 executing program 2 (fault-call:6 fault-nth:0): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2164.192620][T31372] Š: (slave bridge771): Enslaving as an active interface with an up link [ 2164.210526][T31378] Š: (slave bridge771): Releasing backup interface [ 2164.239375][T31388] FAULT_INJECTION: forcing a failure. [ 2164.239375][T31388] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.252349][T31388] CPU: 1 PID: 31388 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 2164.261011][T31388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.271055][T31388] Call Trace: [ 2164.274358][T31388] dump_stack+0x197/0x210 [ 2164.278707][T31388] should_fail.cold+0xa/0x15 [ 2164.283317][T31388] ? fault_create_debugfs_attr+0x180/0x180 [ 2164.289142][T31388] ? ___might_sleep+0x163/0x2c0 [ 2164.294042][T31388] __should_failslab+0x121/0x190 [ 2164.298972][T31388] should_failslab+0x9/0x14 [ 2164.303479][T31388] kmem_cache_alloc_node_trace+0x274/0x750 [ 2164.309385][T31388] ? _raw_spin_unlock_bh+0x2c/0x30 [ 2164.314538][T31388] ? release_sock+0x156/0x1c0 [ 2164.319583][T31388] __get_vm_area_node+0x12f/0x3b0 [ 2164.324712][T31388] __vmalloc_node_range+0xce/0x790 [ 2164.329837][T31388] ? netlink_sendmsg+0x685/0xea0 [ 2164.334794][T31388] ? netlink_sendmsg+0x685/0xea0 [ 2164.339723][T31388] vmalloc+0x6b/0x90 [ 2164.343619][T31388] ? netlink_sendmsg+0x685/0xea0 [ 2164.348556][T31388] netlink_sendmsg+0x685/0xea0 [ 2164.353344][T31388] ? netlink_unicast+0x7d0/0x7d0 [ 2164.358283][T31388] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2164.363831][T31388] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2164.369290][T31388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2164.375529][T31388] ? security_socket_sendmsg+0x8d/0xc0 [ 2164.380979][T31388] ? netlink_unicast+0x7d0/0x7d0 [ 2164.385921][T31388] sock_sendmsg+0xd7/0x130 [ 2164.390346][T31388] kernel_sendmsg+0x44/0x50 [ 2164.394865][T31388] sock_no_sendpage+0x116/0x150 [ 2164.399740][T31388] ? sock_kzfree_s+0x70/0x70 [ 2164.404323][T31388] ? lock_acquire+0x190/0x410 [ 2164.409038][T31388] ? pipe_lock+0x65/0x80 [ 2164.413333][T31388] kernel_sendpage+0x92/0xf0 [ 2164.417930][T31388] ? sock_kzfree_s+0x70/0x70 [ 2164.422538][T31388] sock_sendpage+0x8b/0xc0 [ 2164.426968][T31388] pipe_to_sendpage+0x2da/0x3c0 [ 2164.431833][T31388] ? kernel_sendpage+0xf0/0xf0 [ 2164.436615][T31388] ? direct_splice_actor+0x190/0x190 [ 2164.441901][T31388] ? splice_from_pipe_next.part.0+0x2a2/0x350 [ 2164.447974][T31388] __splice_from_pipe+0x3ee/0x7c0 [ 2164.452997][T31388] ? direct_splice_actor+0x190/0x190 [ 2164.458283][T31388] ? direct_splice_actor+0x190/0x190 [ 2164.463588][T31388] splice_from_pipe+0x108/0x170 [ 2164.468460][T31388] ? splice_shrink_spd+0xd0/0xd0 [ 2164.473404][T31388] ? apparmor_file_permission+0x27/0x30 [ 2164.479025][T31388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2164.485290][T31388] ? security_file_permission+0x8f/0x380 [ 2164.490996][T31388] ? rcu_read_lock_held+0x9c/0xb0 [ 2164.496027][T31388] generic_splice_sendpage+0x3c/0x50 [ 2164.501428][T31388] ? splice_from_pipe+0x170/0x170 [ 2164.506475][T31388] do_splice+0xba4/0x1680 [ 2164.510805][T31388] ? ksys_dup3+0x3e0/0x3e0 [ 2164.515300][T31388] ? opipe_prep.part.0+0x300/0x300 [ 2164.520413][T31388] ? __fget_light+0x1a9/0x230 [ 2164.525114][T31388] __x64_sys_splice+0x2c6/0x330 [ 2164.529974][T31388] do_syscall_64+0xfa/0x790 [ 2164.534479][T31388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2164.540366][T31388] RIP: 0033:0x45aff9 [ 2164.544269][T31388] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2164.563981][T31388] RSP: 002b:00007f4229741c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2164.572386][T31388] RAX: ffffffffffffffda RBX: 00007f42297426d4 RCX: 000000000045aff9 [ 2164.580351][T31388] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2164.588309][T31388] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 2164.596404][T31388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2164.604494][T31388] R13: 0000000000000b28 R14: 00000000004cc76c R15: 0000000000000000 [ 2164.622817][T31388] syz-executor.2: vmalloc: allocation failure: 4416 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2164.652934][T31388] CPU: 1 PID: 31388 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 2164.661649][T31388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.671713][T31388] Call Trace: [ 2164.675020][T31388] dump_stack+0x197/0x210 [ 2164.679365][T31388] warn_alloc.cold+0x87/0x164 [ 2164.684158][T31388] ? zone_watermark_ok_safe+0x260/0x260 [ 2164.689716][T31388] ? kmem_cache_alloc_node_trace+0x398/0x750 [ 2164.695716][T31388] ? __get_vm_area_node+0x2e7/0x3b0 [ 2164.700935][T31388] __vmalloc_node_range+0x44c/0x790 [ 2164.706150][T31388] ? netlink_sendmsg+0x685/0xea0 [ 2164.711096][T31388] vmalloc+0x6b/0x90 [ 2164.715003][T31388] ? netlink_sendmsg+0x685/0xea0 [ 2164.719953][T31388] netlink_sendmsg+0x685/0xea0 [ 2164.724734][T31388] ? netlink_unicast+0x7d0/0x7d0 [ 2164.729683][T31388] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2164.735241][T31388] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2164.740712][T31388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2164.746961][T31388] ? security_socket_sendmsg+0x8d/0xc0 [ 2164.752422][T31388] ? netlink_unicast+0x7d0/0x7d0 [ 2164.757374][T31388] sock_sendmsg+0xd7/0x130 [ 2164.761798][T31388] kernel_sendmsg+0x44/0x50 [ 2164.766313][T31388] sock_no_sendpage+0x116/0x150 [ 2164.771234][T31388] ? sock_kzfree_s+0x70/0x70 [ 2164.775848][T31388] ? lock_acquire+0x190/0x410 [ 2164.780532][T31388] ? pipe_lock+0x65/0x80 [ 2164.784787][T31388] kernel_sendpage+0x92/0xf0 [ 2164.789384][T31388] ? sock_kzfree_s+0x70/0x70 [ 2164.793985][T31388] sock_sendpage+0x8b/0xc0 [ 2164.798418][T31388] pipe_to_sendpage+0x2da/0x3c0 [ 2164.803454][T31388] ? kernel_sendpage+0xf0/0xf0 [ 2164.808220][T31388] ? direct_splice_actor+0x190/0x190 [ 2164.813508][T31388] ? splice_from_pipe_next.part.0+0x2a2/0x350 [ 2164.819575][T31388] __splice_from_pipe+0x3ee/0x7c0 [ 2164.824602][T31388] ? direct_splice_actor+0x190/0x190 [ 2164.829900][T31388] ? direct_splice_actor+0x190/0x190 [ 2164.835196][T31388] splice_from_pipe+0x108/0x170 [ 2164.840049][T31388] ? splice_shrink_spd+0xd0/0xd0 [ 2164.844987][T31388] ? apparmor_file_permission+0x27/0x30 [ 2164.850541][T31388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2164.856791][T31388] ? security_file_permission+0x8f/0x380 [ 2164.862458][T31388] ? rcu_read_lock_held+0x9c/0xb0 [ 2164.862481][T31388] generic_splice_sendpage+0x3c/0x50 [ 2164.862497][T31388] ? splice_from_pipe+0x170/0x170 [ 2164.862513][T31388] do_splice+0xba4/0x1680 [ 2164.862532][T31388] ? ksys_dup3+0x3e0/0x3e0 [ 2164.862552][T31388] ? opipe_prep.part.0+0x300/0x300 [ 2164.891753][T31388] ? __fget_light+0x1a9/0x230 [ 2164.896446][T31388] __x64_sys_splice+0x2c6/0x330 [ 2164.901303][T31388] do_syscall_64+0xfa/0x790 [ 2164.905819][T31388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2164.911888][T31388] RIP: 0033:0x45aff9 [ 2164.915893][T31388] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2164.935500][T31388] RSP: 002b:00007f4229741c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2164.943911][T31388] RAX: ffffffffffffffda RBX: 00007f42297426d4 RCX: 000000000045aff9 [ 2164.943921][T31388] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2164.943931][T31388] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 2164.943940][T31388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2164.943949][T31388] R13: 0000000000000b28 R14: 00000000004cc76c R15: 0000000000000000 [ 2164.968726][T31388] Mem-Info: [ 2164.988730][T31388] active_anon:61163 inactive_anon:225 isolated_anon:0 [ 2164.988730][T31388] active_file:8308 inactive_file:75966 isolated_file:0 09:27:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2164.988730][T31388] unevictable:0 dirty:137 writeback:0 unstable:0 [ 2164.988730][T31388] slab_reclaimable:18297 slab_unreclaimable:149977 [ 2164.988730][T31388] mapped:61082 shmem:293 pagetables:934 bounce:0 [ 2164.988730][T31388] free:1201357 free_pcp:506 free_cma:0 [ 2165.030572][T31388] Node 0 active_anon:244652kB inactive_anon:900kB active_file:33092kB inactive_file:303864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244228kB dirty:544kB writeback:0kB shmem:1172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 102400kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2165.061167][T31388] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2165.088188][T31388] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2165.117956][T31388] lowmem_reserve[]: 0 2535 2535 2535 2535 [ 2165.126504][T31388] Node 0 DMA32 free:1020264kB min:36088kB low:45108kB high:54128kB reserved_highatomic:0KB active_anon:246728kB inactive_anon:900kB active_file:33092kB inactive_file:303864kB unevictable:0kB writepending:544kB present:3129332kB managed:2599264kB mlocked:0kB kernel_stack:9512kB pagetables:3880kB bounce:0kB free_pcp:1996kB local_pcp:1392kB free_cma:0kB [ 2165.159696][T31388] lowmem_reserve[]: 0 0 0 0 0 [ 2165.165201][T31388] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2165.193727][T31388] lowmem_reserve[]: 0 0 0 0 0 [ 2165.198442][T31388] Node 1 Normal free:3766900kB min:53800kB low:67248kB high:80696kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2165.229891][T31388] lowmem_reserve[]: 0 0 0 0 0 [ 2165.234928][T31388] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2165.249680][T31388] Node 0 DMA32: 1165*4kB (UM) 976*8kB (UME) 330*16kB (UME) 231*32kB (UME) 24*64kB (UME) 48*128kB (ME) 22*256kB (M) 15*512kB (UME) 16*1024kB (ME) 2*2048kB (UE) 233*4096kB (UM) = 1020980kB [ 2165.268896][T31388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2165.281128][T31388] Node 1 Normal: 1*4kB (E) 52*8kB (UE) 199*16kB (UME) 95*32kB (UME) 40*64kB (UME) 19*128kB (U) 7*256kB (UME) 5*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 914*4096kB (M) = 3766900kB [ 2165.299450][T31388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.309587][T31388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2165.319209][T31388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.328879][T31388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2165.338567][T31388] 48094 total pagecache pages [ 2165.343355][T31388] 0 pages in swap cache [ 2165.347835][T31388] Swap cache stats: add 0, delete 0, find 0/0 09:27:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2165.354078][T31388] Free swap = 0kB [ 2165.358125][T31388] Total swap = 0kB [ 2165.362095][T31388] 1965979 pages RAM [ 2165.366005][T31388] 0 pages HighMem/MovableOnly [ 2165.370894][T31388] 344636 pages reserved [ 2165.375215][T31388] 0 pages cma reserved [ 2165.391087][T31393] Š: (slave bridge771): Enslaving as an active interface with an up link 09:27:20 executing program 1: r0 = socket(0x39, 0x6, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 09:27:20 executing program 3: r0 = socket(0x10, 0x80000, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={@mcast1, 0x41, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000000c0)=""/131) 09:27:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x4c, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:20 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xe001, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2165.629707][T31423] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:21 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r4, 0x1}, 0x14}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000140), 0xff4d) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000340)={@mcast2, 0x0}, &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x138, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2165.756491][T31434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:21 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xe201, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2165.818837][T31423] Š: (slave bridge772): Enslaving as an active interface with an up link [ 2165.841197][T31431] Š: (slave bridge772): Releasing backup interface 09:27:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x8f3f3be6496db64e, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0x1f, 0x100, &(0x7f0000001880)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r3, 0x0, 0x0, 0xc1800) [ 2166.143162][T31430] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2166.182741][T31435] bond0: (slave bridge19): Enslaving as an active interface with an up link [ 2166.203949][T31437] bond0: (slave bridge19): Releasing backup interface 09:27:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x2) [ 2166.486437][ T27] audit: type=1800 audit(1579166841.933:3034): pid=31434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16928 res=0 [ 2166.491107][T31434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2166.517577][T31423] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x60, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2166.545602][T31457] Š: (slave bridge772): Enslaving as an active interface with an up link [ 2166.547135][ T27] audit: type=1804 audit(1579166841.933:3035): pid=31436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir594382638/syzkaller.Fuk8UY/2893/memory.events" dev="sda1" ino=16928 res=1 09:27:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2f, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x78) r2 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$x25(r3, &(0x7f0000000080)="a2f319c719f2b18e96306cbc6725d97aae3bb9a4bf61580514dde4f885acbfae66e6b176b10fc0e3a90a60dcb63fc3ad3e8867940a597dbc65c1aab57eebd27ec4fe7b8091e2e29101c6c7d428ecb0e8a2d4b3790cfead9302e2a39f22f58672ddf39a6aa3309aba94c33007e6e6ba6157ac63024159bc44bb7acab4e51213b2624083f84376c036e9c333c61e918d2f7f76d93a76bafc41d09f85", 0x9b, 0x4000, &(0x7f0000000180)={0x9, @remote={[], 0x1}}, 0x12) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000001c0)=[{0x50}, {0xa, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xcc0, 0x0, &(0x7f0000000000)="b90703e6680d698cb89e15f005ea", 0x0, 0x100}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r4, &(0x7f0000000200)="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", 0x200, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x8, 0x3, [0x5, 0x3, 0x6]}, &(0x7f00000002c0)=0xe) 09:27:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x8001, 0x100, 0x7fff, 0x30, 0x2058, 0x7}, &(0x7f0000000340)=0x9c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)={r4, 0x0, 0x1, '/'}, 0x9) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x58, 0x3, 0x100, 0x10000, 0x4, 0x5, 0x20, 0x5, r4}, 0x20) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) 09:27:22 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xe803, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2166.783149][T31465] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001080)=ANY=[@ANYBLOB="0fa4cc000078fc6626dc220683b6632db655f81b252d94f5ab26f40df52b28787b8338d98f25d10e911324fcea8dc674215c0148fe3f91a8e57c5eda0509b93c53d3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @rand_addr, 0x8000003}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={r3, 0x0, 0x1, '/'}, 0x9) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001240)=@assoc_value={r3, 0x1000}, &(0x7f0000001280)=0x8) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000001200)=@netrom) getsockopt$bt_hci(r1, 0x84, 0x2, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0xfffffffffffffed7) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001d00)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000001d40)=@assoc_value={r3, 0x2}, 0x8) r6 = accept(r0, &(0x7f0000001180)=@ax25={{0x3, @bcast}, [@null, @bcast, @bcast, @default, @null, @rose, @null, @bcast]}, &(0x7f0000000040)=0x80) setsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000001100)=0x1, 0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000012c0)={r4, 0x2, 0xffff, 0x8, 0x1, 0xffffffff}, 0x14) [ 2166.841031][T31470] Š: (slave bridge773): Enslaving as an active interface with an up link [ 2166.867371][T31473] Š: (slave bridge773): Releasing backup interface 09:27:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r4, &(0x7f0000000200)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) sendmsg$inet6(r4, &(0x7f0000001740)={&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @loopback, 0x94}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)="b76b81b507b5d03854c0a28bb7959495076243542a4e3c3f", 0x18}, {&(0x7f0000000200)="d3e5f88c297964bd3122aed2d045554e99145ae8568c47ea99819d8e3e44cd64fd05a4e7a8c365e0660adc50ffade8c4c0b63dcf8020da861d3014b33330bf2988840ac4b248d5c096c96901dbb23404f335de524d3223fabe5f73657413e70d", 0x60}, {&(0x7f0000000280)="7404c9f88ab0ca66936b", 0xa}, {&(0x7f00000002c0)="b0ee4cad9f8b3753a26a0336157c4fc008a3eb6866fbe60d1d0a541b4e2044b028979bb42a00cae97c4f6929582fdaf58c89975a073fdee6378fcf5cd4b4ea6371aa7e55f81abde18deae480ac5e6caf6457e5d7cb8c017b12520b61b3c06e5ac0c62a", 0x63}, {&(0x7f0000000340)="8629660ee8645f60c7cf434368fba98fa9923aca959847f7e2d2d71147a05220a84a65ba61d75a632f5b2cb3eec6432b477b5c8c8984e6e42b3c5f7774a26f44eaae7ee9ab7eb743a4a8acf20716bec08bdac47cb41f4d45a099ada82c3936ca3ed79994df656f016353f6356d87737428d595f55defad8523c9352dd9891c176d636128bc5695d3041fa900cdcc181d6326e5922d609e74a7159e8c9eece5d3be5ac929f5de66e96320b4503c1c4f5930481644390fea2edc52a901a53589c8005e9cc732f6fd52", 0xc8}], 0x5, &(0x7f00000004c0)=[@dstopts_2292={{0x100, 0x29, 0x4, {0x8, 0x1c, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xf}}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @generic={0x7f, 0xaa, "ea456757dfbc06ec27d54c965837b4c83da9dcfa2fe345c088b195f04a6518b87c0cc445099a25b2bd6f26f7caae09c14563050a95872fcd68ba689056dacef723160e333cbaf4cf64dee64418c764794594521b026799713f85543f33799b14470fc914e7197f32145df3641088fcaacb0f5d0f0ce20ad3cdd59a6319a2f6b491b0320b45f1a14cf3de4f6517ba2fa3ef0b8bc9038ed6b77cffe4319c4a00e5f7ae2dba020281d49e85"}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x2b, 0x2, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x7f, 0x401, [0xa39]}}]}}}, @rthdrdstopts={{0x1120, 0x29, 0x37, {0x3c, 0x221, [], [@hao={0xc9, 0x10, @mcast1}, @generic={0x0, 0xc6, "587d5f88972806c90ea932571714cd149b013d36fc8c2e0f721b8cdeb1f9cddbadf7649a5863057d13604d035ad89214f76bf45a8e91d882abd58674d0e19445602aca52de9206b13e6aaac9e113a8797009650f2f0cd95050fa88ff4dcffb6011d4661604f789c5650ac53169ce95632c5677d55c4fc266f0763313de9d7a2ae78f6815839291b6f2f4e8f5d50e3afe2cafa0a898234558c3714fcbed0e7758b89b8c9c0d986b32aa1084c88ba2f8d25e659aebb2ae4026bf7be98bd0a2f9520d2ed6511309"}, @generic={0xf8, 0x1000, "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"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x1250}, 0x42000) accept4(r3, 0x0, 0x0, 0xc1800) 09:27:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3) 09:27:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='*trusted,\x00', r1}, 0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="960000000a008000d9bb1414dd5e4a0000100000000000069b786c2ae1176b7af3a85783001500038d499fe7d5fa2f22000000173db710c327ef9d1f5318fb64519cef3cb337d71fca0f448c57a3c19758f8f45b1ae14b9a4ee7"], 0x24}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x80006}, 0x10) sendmsg$inet(r1, &(0x7f00000016c0)={&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="ec45b6587ee01063b8e234fcf4f1fdf690484af6cf7a4478e713bcc89c052add4e4806c9c58df687c13f96ff6a41770452414288671a8525166e94a834fa4b59daf3281676e078a9133ac781a24ae3c387f8e0ad7e878760181f7a6302cbe08c72bda4ea94bd8241faa178913d53086e6a9ad17acccaa56b3bda7787c631fbb50bdea6db04dacea07a6175af0f3b5ed8780ca1aba1d428639aa1351d0155748095d81eeff3599c8a2eecae671866255a37e2f95bfcd20836f4c9b3a3f93512ecbb5211e6", 0xc4}, {&(0x7f0000000340)="24b6e33974c58f40d6e2f50878d41828c4fceb830377c4d117aa78e9edad6bbb0bf0861b245f25f8b7664bb246a8caa32a85b17c1028f52fe302e54cb3a3597bcad9f6b85e7e85be559326dadc2b45d57beb6154245ac6ccfb6d7a68c58197e4a59d5a1908920062e73316af332b87880d72a314e71d45ad5500dac9008b2d85772d93bbb111b69400cce6eaaf87855c764bfd1a1d700e", 0x97}, {&(0x7f0000001540)="29b19140f640508eaf0cec28ebc48fc14be46e7c68a695749bdab2f300b7b1ffc7cd6dd6e192c48ac99993b55b9e38d3461b9f108e4f7f17abac3d784e24d4e326719aa952e1c32e0918fc94161c58030241535199aa884ceb2001653d197e125e5fd6249cf29333fa3208b349bb79b3a5cb02c048662954e6dc75a5e578791ea23ac5cc5602bda5fed5cff84430fd5afe7fd89a69cdf6eee18f62afd49f2e58674636a8b38628ea7dd291a7d10b054c64d0c278b0e4bd23e096301c816ff1249a4a6deb9439190d253c5b64d7fa217bc92462f93e6c0946f60c014e24ac78", 0xdf}], 0x4, &(0x7f0000001680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x18}, 0x800) r7 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r4, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r4}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r8, 0x111, 0x3, 0x1, 0x4) [ 2167.222300][T31465] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:22 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xea01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x68, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2167.399656][T31473] Š: (slave bridge773): Enslaving as an active interface with an up link [ 2167.504790][T31514] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xea03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2167.688785][T31514] Š: (slave bridge774): Enslaving as an active interface with an up link [ 2167.708292][T31517] Š: (slave bridge774): Releasing backup interface 09:27:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x2) 09:27:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdb2, 0x40004, &(0x7f00000000c0)={0xa, 0x4e1f, 0xffffc72a, @rand_addr, 0x850}, 0xfffffffffffffe4a) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x0) bind$netrom(r2, &(0x7f0000000580)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r3, 0x0, 0x0, 0xc1800) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000080)=0x4, 0x4) [ 2167.975536][T31517] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) 09:27:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x4) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x9fad, @loopback, 0x8, 0x1}, 0x20) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r3, 0x0, 0x0, 0xc1800) 09:27:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xee03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2168.145491][T31517] Š: (slave bridge774): Enslaving as an active interface with an up link 09:27:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="402200001200000426bd6683fad8fa7bb5f60000", @ANYRES32=r2, @ANYBLOB="804000000010000018011a80280002802400018008000300fdffffff08001f000000000008000600020000000800030001040000040007000400070058000a800500080006000000050008000200000014000700fe880000000000000000000000000001050008000100000014000700fe8000000000000000000000000000aa1400070085135935049128b41f36efa49a64b7d104000700100002800c00018008001c000800000078000a801400070000000000000000000000000000000000050008000600000014000700fe80000000000000000000000000002e050008000800000014000700ff01000000000000000000000000000114000700fe8000000000000000000000000000aa14000700fe8000000000000000000000000000370800230000000000"], 0x140}}, 0x0) 09:27:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x6c, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xf000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2168.483416][T31570] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f00000000c0)="70fd3716885bcc8a1d62b743f860c6236110be7db708fd8084de5a26c1eae0bab73ca08173a5f125024cbf24c64305626824d0a3b9a47f0fff209a2d012da327b34ea210f52ea1844c658ff23988b27925195a0e3f42ee60a7be48fc305359a8fcbf2892ecb2105b06e8b6565ef31c96d84da6b6b54e9258f8083d088a6927ba597dc503b86d35f0498f8fc67e8c794e5e8823857ea9a45d5ca3af9a0ff8b834abf10472faf910d7a7e44b75a705269c445811e8e8ce29abb2e6c4f3bae5d093c0fdf0cba0674cc3abce39cedee1cd07bc1c309b69bb39174633682fdbb5fa016962ea758d475b4717314ac58f4f4d", 0xef}, {&(0x7f0000001200)="1c06229c6679e0a77a9e26b311eef885fa1b3964268a48db38cad9cc1bcd73d66905274f8e5fb27177243e2046f55fe4e3fbf2fe29", 0x35}, {&(0x7f0000001240)="a8964bf0fcd6130327f9ce6d11f3f2cecaeab19b5467b37aa8ffd345547760d288a42695f6b80f973536a044dd6c8036f49bd180d22fa9bd37b8956e8c06", 0x3e}], 0x4}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000012c0)="614898665c33e78df7e8055158a20117d0cd8b1ec3f90548ef2cd7e742d93f115be12b2c11802c60787e7a033210c4d970bae3a408dc2937120606fd067e1036058b9066e3ce1c60806978c8", 0x4c}], 0x1, &(0x7f0000001380)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x30}}, {{&(0x7f00000013c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)="c6f966eafafb0459766acc31de44a9e682487dd1691a17d15f3cdeb26c1c6da315c8ff7e4edca17ae371760acf63c12548118f5416321afb44c4309cf4a2c649881e5fa2a988323cce759b8d85d78c6acbba5d9f2ad93135f599799dd523ff5d49e53bc0666c365fbe688d1e946de8cd60d4227a433f379e59bb8467b647adbe926dcefbce3779edfb97a33340673befc192ee11e5c8ab67e4f0f3049ee91ad901240c9043a829189ca7647ff59e2fd86878144710c604e96f7c67c5a9833c214021b0addd0d6d3dbac23efe8a15f2e34bca8adfd14f022e59d7b932c5b3225296de77666920ce27accf169bc0bc7e2cd8a747f94ab364", 0xf7}], 0x1, &(0x7f0000001580)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0x90}}], 0x3, 0x20c4) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2168.576134][T31575] Š: (slave bridge775): Enslaving as an active interface with an up link [ 2168.601333][T31577] Š: (slave bridge775): Releasing backup interface 09:27:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socketpair(0x29, 0x0, 0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r2, 0x6, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff9, 0x4}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x58f6784abf9d6f19}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xa147}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffeff}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x32}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xf1}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1ff}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x81}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x10}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x30}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newaddr={0x5c, 0x14, 0x0, 0x70bd26, 0x25dfdbfc, {0xa, 0x38, 0x211}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0xc2}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast2}}]}, 0x5c}}, 0x0) 09:27:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket(0x59, 0x6, 0x1) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x12001, 0x10004}, [@IFLA_PROTO_DOWN={0xfffffffffffffe15, 0x1c, 0xffffffef}, @IFLA_PROMISCUITY]}, 0x28}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) 09:27:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080eb5055ea336b868707177cec71716f25c34387b756b17224b86b54449d3d6a4cc7c3d803986f73eb5d754") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r4 = socket$netlink(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r5, 0x1}, 0x14}}, 0x0) accept4$packet(r0, &(0x7f0000002a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002ac0)=0x14, 0x80800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0xffffffff800) sendfile(r8, r7, &(0x7f0000000040), 0x100000001) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000003fc0)=0x0, &(0x7f0000004000)=0x4) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x2c, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000008}, 0x10) r10 = accept4$packet(r0, &(0x7f00000002c0), &(0x7f0000000380)=0x14, 0xc0800) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000400)={0x0, @sco={0x1f, {0x40, 0x1, 0x5, 0x3e, 0x0, 0xff}}, @in={0x2, 0x4e20, @remote}, @nfc={0x27, 0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x200, &(0x7f00000003c0)='netpci0\x00', 0x5, 0x5, 0x9}) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x38, r3, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x5, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r3, 0x3, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xcdc3, @empty, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @empty, 0x80000001}}}}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf3e0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d6f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8db60}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0xffffffffffffffb5, 0x1, 0x8001}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000) [ 2168.935622][T31594] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2168.972309][T31570] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:24 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xa) [ 2169.122470][T31609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2169.152842][T31592] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:27:24 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xf001, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x96}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000200)="ffbae2b84ddb27984fafc0a9461624926e1408027808dec4b974a619964a216f87cc371e4423877f7fa8aedf59f5714f5b157d96d902a4c8dc5511eaa9c9fd93e4743ea12254ce57affc7440e1bb8de131434cc8062738bfe0372d42304d77ea48c177aa8e398ef09083e575f085b26e0247f907d0b8b38cd4064ad1a43aa2730448d4ff52f83aa08836e985b24efacab771a9dd04e0c69433dba287e8429e321961815481f2ea", 0xa7}, {&(0x7f00000002c0)="0b650ed1f1dfcd58f737877e595ccaa9a1a5ac4588d2922f4cd92f8c8898bbd99ccb9275066d41fdce4f4ec7b15338a0d15e64c554cb03e6151850db4c5a77e7bf24af673e5d727319c0d4355e2c2e6d", 0x50}, {&(0x7f0000000340)="f81e207e4d4e58f6625d7c8c9e8a726dfa6cfe083ca6991a9a7353754e949993a40864d04b6be6cbedfcbfb151fbcea83ce9a11d1ec506e793bfc5054c7439152636acd88e7c966423f0988e492e53077eb75c9e529ad8d39a652f94abf85c83be460b831bfa71bf78daa193362e544f7351a364", 0x74}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="07067c9a00fb8c44c26cb3137afa289b224c808bce86bd894b84646497540ca45deb54bc511d4880dbe8d5924e4599e17a6a5c8c622fa92432d459bcc3f025a3ac7986d34a7c4393d9413d45139821759c3cbe151f222f4739079e28d6ed9642cd9cacddf6cf4e2c342ef7ec8688043ef86f38bdf371534c365cd6cc5e61b363b4bf8351c45a9d7afcb29675fa343c6e1adf9f496c400d4667a5ac69a176d13cb10e4827f7a733edaecb83961d2dec6bb9029e4cb6cd3b13", 0xb8}, {&(0x7f0000001480)="a0cc40850cf4b770307a684768f7021acff9f230ab427c8cc924b2b1e1a5f4d815d3473b762e76ed6bf568e1d690dfb7f73ab7be2ecebe671f84aeb9e27841d0683865add709f3971b92369bc1cc252f5909fdc8d072a35ec1eff3c4ef4219779c6b782947f2b6eab06723", 0x6b}, {&(0x7f00000000c0)="fc96aa475331e0e4d0a4578220621975cc686aaf70a660d33799a236e80e1c223d00166e755fce", 0x27}], 0x7}, 0x40000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2169.178256][T31575] Š: (slave bridge775): Enslaving as an active interface with an up link [ 2169.202212][T31603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:24 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(0xffffffffffffffff, r2, &(0x7f0000000400)=0x6, 0x2069) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0xffffffff800) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) write$cgroup_int(r5, &(0x7f0000000140), 0x12) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0xffffffff800) sendfile(r8, r7, &(0x7f0000000040), 0x100000001) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000180)={{0x1f, 0x1f, 0x62, 0x7f, 0x8, 0x54}, 0x0, 0x6, 0x7ff, 0x7, 0x80, "b260dbefc2ba6c7c9434c24b828d5120547b3d4f276a57d51e9a0deb4a460f90a53a6231c454264692cc7bcd584e63bd78e9b2e69d2b8761402108a177ecd8f4259817f457c5db6365354cf3891c2525d0eb5e75328e0dd29ad4a7d4e55f2d306c77bfa4daee04de63af7cb06ff0e80f16a3423e7d5b2bae53306072389bbc83"}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0xc080661a, &(0x7f0000000240)={{0x2, 0x0, @reserved="6429b5e145907e93d4a677809888bcac823d721d0f96a3fe80f6682f52ecd579"}}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x100000001) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) poll(&(0x7f0000000080)=[{r0, 0x80}, {0xffffffffffffffff, 0x31b}], 0x2, 0x9) ioctl$FS_IOC_RESVSP(r9, 0x40305828, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002ec0), 0x14) 09:27:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x74, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400fe0627951103000000000000000009f100000000274fba0000000000000600156b0300000000967ada8a3ff81b96b663dd9acec927b823f103dc84ef78d4c987e290369ade7f50bc1e76d840e802632e5f6ccfc0ca27cfbc8382dc093cecee2cbea97fd49a6e3446662c5c28411af65a9dba24d0207aa2cea53e91485641a4f14b19e11483b9566be1eeff6388a716944cbba3425a8cfcdf1e332a709f3e0d0754d0aeb80aceddc6651c128c584f410125d7dd6c1018166fae50d23b7fadb50840c5005d360b05d8611cb08ec85f40bcf47756f54514b6e4efcb20fcc25a11b85a8d902790325d8af043b33cbe0279f00223d359f370ebc4a25964b9f9cc6496340634dca2d6eaaf76fd908754ed50c70dbadaa544f6dbe0c023f149a9f33976a17fa31a826c721337f3b495a3d42bc1cd98b234a76740097c2ff0f3144da9f0897f2a42fd4927cad0a961026f71f22473252e106f0c4c10ac6675a3da4014244c321c8835fc39966ed89c3770"], 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'vlan0\x00', {0x4}, 0x76}) [ 2169.414979][ T27] audit: type=1804 audit(1579166844.863:3036): pid=31623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3023/memory.events" dev="sda1" ino=16922 res=1 [ 2169.460232][ T27] audit: type=1800 audit(1579166844.863:3037): pid=31623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16922 res=0 [ 2169.482131][ T27] audit: type=1804 audit(1579166844.863:3038): pid=31623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3023/memory.events" dev="sda1" ino=16922 res=1 [ 2169.512530][ T27] audit: type=1804 audit(1579166844.883:3039): pid=31623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3023/memory.events" dev="sda1" ino=16922 res=1 [ 2169.539281][ T27] audit: type=1800 audit(1579166844.883:3040): pid=31623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16922 res=0 09:27:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x6c, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2169.561000][ T27] audit: type=1804 audit(1579166844.883:3041): pid=31623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3023/memory.events" dev="sda1" ino=16922 res=1 09:27:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES16=r4, @ANYRESHEX=0x0], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x108460431}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xc8, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x94, 0x84, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, "89f3d263f99f85e100"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x13, 0x1, "98d3f122fed64508268546edff6a23"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xf9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x43f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffff9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x81}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="caf0088dcc52"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="73d3ce368dee"}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r8, 0x0, 0x0, 0xc1800) [ 2169.615747][ T27] audit: type=1804 audit(1579166844.883:3042): pid=31623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3023/memory.events" dev="sda1" ino=16922 res=1 09:27:25 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xf203, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2169.691176][ T27] audit: type=1800 audit(1579166844.883:3043): pid=31623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16922 res=0 [ 2169.723838][T31630] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2169.776525][T31634] Š: (slave bridge776): Enslaving as an active interface with an up link [ 2169.816313][T31638] Š: (slave bridge776): Releasing backup interface 09:27:25 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xe) [ 2170.083883][T31644] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2170.105393][T31646] bond0: (slave bridge20): Enslaving as an active interface with an up link [ 2170.117316][T31651] bond0: (slave bridge20): Releasing backup interface 09:27:25 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x9) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800110300000000000000000a000000fc0000000000b1595837775f00000600"], 0x24}}, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) [ 2170.338528][T31630] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2170.370329][T31638] Š: (slave bridge776): Enslaving as an active interface with an up link 09:27:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000000000000e17d14c86c6a2e221de7d5574feca990264e59d300000061878d7c651e686e9721d58af72ac1fe5886e9efb4be69f7f11aec5170cc311d1b6c236bb3da6799735ecc2c8f08436f1fafae545bb86e3ad9c239c4112fa136df78b2be01bdc5a441ef834049dc9856db94a3fe0dadcab3ac382fa3c20f46c857ba6eadc15c7b3550760ab1b92d873eb4430b5dd3199bd3777c4da2d9d1442d2733bb30c49d696584b16bf6534f9641a12471639125989a6c49fccda5d87e2a815d89bae1860393137f98360aeb"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2170.388057][T31634] Š: (slave bridge776): Releasing backup interface 09:27:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3201080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0xa, 0xa, 0xe0345d774d554eb8, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x35}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xbd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 09:27:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4053678ff007300d2d5e4c7c843bb5d304a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xd}, 0x10}, 0x78) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = accept$inet(r2, 0x0, &(0x7f0000001240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001280)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x37, 0x0, "875d2bac8f25d8c890f6b707c0354cc75872504b13d8ba59151377e2eea1de3cc965e4ed73c1b3ff4b359e591e2f3f2779dcdc438952cfb4a74b3a86a7866035af3f71f012300edefaebb1a3fa6c601a"}, 0xd8) 09:27:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040), 0x100000001) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000000)={0x7}) connect$inet6(r2, &(0x7f0000000140), 0x1c) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:27:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf) 09:27:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x7a, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="74478f04ebf62e6b33d4859935c2d2b6", 0x10) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r3, 0x0, 0x0, 0xc1800) 09:27:26 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xf400, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2170.954973][T31677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2170.986183][T31695] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2171.061326][T31677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x9, 0x4, 0x81) sendmsg$nl_crypto(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@del={0x120, 0x11, 0x400, 0x70bd27, 0x25dfdbfd, {{'authenc(md5-generic,ctr(des3_ede))\x00'}, [], [], 0x6000, 0x400}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x3e0000}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0xee}, {0x8, 0x1, 0xaf65}, {0x8, 0x1, 0xfffffffa}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2171.126024][T31698] Š: (slave bridge777): Enslaving as an active interface with an up link [ 2171.147903][T31695] Š: (slave bridge777): Releasing backup interface 09:27:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xe) 09:27:27 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800110300000000000000000a0000000000000000004b0a3b10f8d0000006000500030000002992ec631a436d9694b93b438539ce851dc0d39dd49c2dde930d75955e32e6a6dbfd421e6af1bfc7e6f7e5135249d674b40af445d3ae0fd76033852e86a917a3648d60e7c82b01ae132e1e72898ab18076d2f431a23db8078ef11aaa0fd9d5e0736e446f9eadb2d20cb99c74"], 0x24}}, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000080)=0xfffffff8, 0x4) [ 2171.544013][T31720] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:27 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x10) 09:27:27 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xf402, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2171.753561][T31698] Š: (slave bridge777): Enslaving as an active interface with an up link [ 2171.763143][T31728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:27 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800110300000000000000000a00000000"], 0x24}}, 0x0) [ 2171.823489][T31725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xbbd4) socket$kcm(0xa, 0x0, 0x11) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, [], [{0x0, 0x2, 0x81, 0x3, 0x1, 0x3}, {0x3c02, 0x1, 0x1, 0x200000000, 0xfffffffffffffe00, 0x6}], [[], [], [], [], [], [], [], []]}) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) socketpair(0x1a, 0xa, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r4, 0x0, 0x0, 0xc1800) 09:27:27 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xf403, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2172.097776][T31748] Š: (slave bridge778): Enslaving as an active interface with an up link [ 2172.122214][T31749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2172.156112][T31753] Š: (slave bridge778): Releasing backup interface 09:27:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0x237b64d8ec09620, 0x12, &(0x7f00000001c0)={0x77359400}) 09:27:27 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x400, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0xfffffce2, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2172.408840][T31741] validate_nla: 1 callbacks suppressed [ 2172.408852][T31741] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x30) 09:27:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xfa01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2172.655413][T31741] Š: (slave bridge778): Enslaving as an active interface with an up link [ 2172.680478][T31753] Š: (slave bridge778): Releasing backup interface 09:27:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="7f00000001005535050f92c012e0d43e8d040a99549167712f64d2287aedfb29611a487f081879a4952b5f32a22633bbb27cff9e98732818a1df3ede1a6ec9a33307b8b6b4c2a1c0faa0302a98360ff88430cd9ada1c4eec60aa54484f93016b15989a6ad43e44e66435745a9728ce143300"/130]) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r4, 0x0, 0x0, 0xc1800) 09:27:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 09:27:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xfa02, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2173.087528][T31790] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2173.171839][T31797] Š: (slave bridge779): Enslaving as an active interface with an up link [ 2173.220527][T31800] Š: (slave bridge779): Releasing backup interface 09:27:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x60) [ 2173.550653][T31800] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2173.577947][T31797] Š: (slave bridge779): Enslaving as an active interface with an up link 09:27:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r0, &(0x7f0000000200)="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", 0x200, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000180)) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x14, r5, 0xffff}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xc8, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x94}, 0x8045) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800110300000000000000000a00000000000000000002000600150003000000"], 0x24}}, 0x0) [ 2173.771588][T31816] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:29 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xfa03, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2173.923170][T31822] Š: (slave bridge780): Enslaving as an active interface with an up link [ 2173.957866][T31816] Š: (slave bridge780): Releasing backup interface [ 2174.266863][T31830] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2174.461768][T31822] Š: (slave bridge780): Enslaving as an active interface with an up link 09:27:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @rand_addr="00000007000000000000000500"}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) 09:27:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x200, 0x0, 0x0, {0xa, 0x0, 0x1e, 0x7f}, [@RTA_EXPIRES={0x8, 0x17, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x146cc51d76d7cd5}, 0x0) 09:27:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf0) 09:27:30 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xfc01, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2175.212291][T31845] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2175.237451][T31847] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800110300000000000000000a00000000000000000000000655875b756070a700c4806ea57199ad75bc372ffa3046f141abb3137fafd2d6baae563f6d7f"], 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xf1eaabced6a337aa) [ 2175.281613][T31845] bond0: (slave bridge21): Enslaving as an active interface with an up link [ 2175.342553][T31847] Š: (slave bridge781): Enslaving as an active interface with an up link 09:27:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xfeff, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2175.529540][T31853] Š: (slave bridge781): Releasing backup interface [ 2175.767241][T31845] bond0: (slave bridge21): Releasing backup interface [ 2175.993511][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:31 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x300) [ 2176.035430][T31853] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) accept4(r2, 0x0, 0x0, 0x80800) [ 2176.091405][T31847] Š: (slave bridge781): Enslaving as an active interface with an up link 09:27:31 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000013001d04000080000000000000000000be56467d92a436a78f86fe3de5ab47a58c19699ef45e0ccfae721aed4eeb38fc42834e25fae4b45c27a58f17ee440ec25ebe09bf1c0e994fb3e245ee9407f548df80cfc65eb6e8df4e9ede5e2bed0d9c9c150bb99af570980d948116823f003708260936dbe649974d78bfb4190327dd", @ANYRES32=0x0, @ANYBLOB="00d547bf00000f6c20000008000a0048b64efa62109c234dcaca0233145810000000140003004661cf270a2e00"/61], 0x3c}, 0x1, 0xf0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000038c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000039c0)=0xe8) sendmsg$xdp(r4, &(0x7f0000003d00)={&(0x7f0000003a00)={0x2c, 0x1, r5, 0x2a}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000003a40)="033a08b7a0e7c3a6911a740e1ee1e88c1eaa01aa753446dd8cbcd15318c953237deb11bf84b8e636897733f211c280ba69b7950a7e350fe93e90343851be301bdfbcad14cdca6dadc8", 0x49}, {&(0x7f0000003ac0)="2ffc50c3df72bc4d66058d9e09ec547d08c0497a2d9033ecbaa3861fc59a06f7e229feaf161c85cdd35c253c04aba0cc756d83cd5dec26174843dbffb080aa95b4dc39fe2aaf6601775eb420787228570d6c359ea38a2ed0ba354359961f510b6c62ba604f3d821631fcf2d85e95dbfca6ddb570d220ee24b59fb3946f8ba136b1368910fc92690435f15a3fe42bbeb87c826c9d0412b9519ff3f4df6151bf42a8fc0eae6bb56de6fd49b406e1a6348cc61564f3f2454c7ead7a083bbd", 0xbd}, {&(0x7f0000003b80)="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", 0xfb}, {&(0x7f0000003c80)="3e6fac40001f64e870e8a8b4bf2f", 0xe}], 0x4}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0xffffffff800) sendfile(r7, r6, &(0x7f0000000040), 0x100000001) getsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpid() sendmmsg$unix(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r9}}}], 0x20}], 0x198, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000140)=r9) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) [ 2176.189386][T31860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x200, 0x70bd2b, 0x0, {0xa, 0x0, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) 09:27:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xff0f, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2176.374666][T31888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2176.403904][T31893] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:31 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e22, 0x3, @local, 0x3}}, 0x0, 0x0, 0x2, 0x0, "52ce7dd5b1e872b68239364955460349bbbf2fa6af11d02da4b5460ff19d94ec6f7ed335ec8b21941fc9b1002fe554d4af45823f28e7f6f20af3bc72e794af88293da9d206f827e4e99445d33d2fbe66"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x198, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x33}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x1}}, @NL80211_ATTR_IE={0x162, 0x2a, "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"}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, [{0x7, 0x0, [0x4, 0x5, 0x7]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000}, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) [ 2176.453198][T31901] Š: (slave bridge782): Enslaving as an active interface with an up link [ 2176.462146][T31891] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2176.480304][T31905] Š: (slave bridge782): Releasing backup interface [ 2176.671989][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 2176.672005][ T27] audit: type=1804 audit(1579166852.113:3054): pid=31910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3033/memory.events" dev="sda1" ino=16958 res=1 [ 2176.711832][ T27] audit: type=1800 audit(1579166852.153:3055): pid=31910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16958 res=0 [ 2176.734024][ T27] audit: type=1804 audit(1579166852.153:3056): pid=31910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3033/memory.events" dev="sda1" ino=16958 res=1 09:27:32 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) socketpair(0x22, 0xc0809, 0x1d, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r1, 0x0, 0x2ef1a046) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x0, 0x0, 0x4, &(0x7f00000004c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xac922c7c}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x1, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x2018800) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getpeername(r8, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xbc, r10, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x52ef}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="66696c746572000000020000000000000000000000f9996644000000000000000000000004000000"], &(0x7f00000003c0)=0x1) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r12, @ANYBLOB], 0x3}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@multicast2, 0x4e20, 0x1ff, 0x4e21, 0x41, 0x2, 0x80, 0x0, 0x6d, r12, r13}, {0x100000000, 0x80000001, 0x7f2, 0x8, 0x2000007, 0xffffffff80000001, 0x6}, {0xffffffff, 0x5, 0x2}, 0x2, 0x0, 0x3, 0x7b08fb7063a47c63, 0x2}, {{@in6=@rand_addr="4e37bcc5e5b9541521a78af0f3dd439d", 0x4d4, 0x33}, 0xa, @in6=@remote, 0x3504, 0x3, 0x1, 0x2, 0x7f, 0x0, 0x20}}, 0xe8) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0xc, r14}) 09:27:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x28}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2176.850903][T31901] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xa00) [ 2176.940665][ T27] audit: type=1804 audit(1579166852.383:3057): pid=31919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3034/memory.events" dev="sda1" ino=16958 res=1 [ 2176.990402][ T27] audit: type=1800 audit(1579166852.383:3058): pid=31919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16958 res=0 [ 2177.022444][ T27] audit: type=1804 audit(1579166852.393:3059): pid=31919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3034/memory.events" dev="sda1" ino=16958 res=1 09:27:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0xe, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008105e00f80ecdbc0b9f207c804a01b000000a30306000a0002000a0ada1b40d805000500c50083b8", 0xffffffa0}], 0x1, 0x0, 0xff53, 0xf000}, 0x0) [ 2177.078753][ T27] audit: type=1800 audit(1579166852.523:3060): pid=31919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16958 res=0 [ 2177.128880][T31901] Š: (slave bridge782): Enslaving as an active interface with an up link 09:27:32 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xff7f, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1a, 0xa, 0x3, &(0x7f0000000180)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) [ 2177.210639][ T27] audit: type=1804 audit(1579166852.523:3061): pid=31931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3034/memory.events" dev="sda1" ino=16958 res=1 [ 2177.244451][T31893] Š: (slave bridge782): Releasing backup interface 09:27:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)='X', 0x1, 0x1, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr="c68e52393cacf401805e574757dfe78f", 0x4}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000200)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 09:27:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0xca6}]}, 0x24}}, 0x0) 09:27:33 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0xfffe, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2177.693115][T31957] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2177.752207][T31960] Š: (slave bridge783): Enslaving as an active interface with an up link [ 2177.771430][T31957] Š: (slave bridge783): Releasing backup interface 09:27:33 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xe00) 09:27:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) [ 2178.017920][T31960] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2178.057613][T31960] Š: (slave bridge783): Enslaving as an active interface with an up link 09:27:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:33 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd27, 0x25dfdbff, {0x80, 0x20, 0x14, 0x7f, 0xff, 0x0, 0x0, 0x7, 0x2900}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x7a05, 0x1700) sendfile(r8, r6, 0x0, 0xffffffff800) sendfile(r8, r6, &(0x7f0000000040), 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x7fff, 0x7, 0xb9ba, 0x400, r2, 0x7, [], r5, r8, 0x4, 0x1}, 0x3c) 09:27:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f00000000c0)={0x6, 'syz0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) listen(r3, 0x7fffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x2, 'hsr0\x00', {0x4}, 0x5}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r5, &(0x7f0000000200)="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", 0x200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, [], 0x34}, 0x3}, @in={0x2, 0x4e22, @rand_addr=0x1}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfbfa}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @remote}], 0x88) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r4, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x40080) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r7, 0x0, 0x0, 0xc1800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 09:27:33 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x34000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2178.215807][T31976] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2178.360277][T31992] IPVS: ftp: loaded support on port[0] = 21 [ 2178.381636][T31986] Š: (slave bridge784): Enslaving as an active interface with an up link [ 2178.414175][T31989] Š: (slave bridge784): Releasing backup interface 09:27:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001800)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000011}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x7c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0xd0fb}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004844}, 0xd0) r1 = socket(0x10, 0x80002, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000340)=""/36, &(0x7f0000000380)=0x24) ioctl(r1, 0x1002008912, &(0x7f00000001c0)="080db5055e02cfe8697071") r2 = accept4(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x80, 0x40000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040), 0x100000001) recvfrom$llc(r5, &(0x7f00000002c0)=""/37, 0x25, 0x80, &(0x7f0000000300)={0x1a, 0x30d, 0xb4, 0xd2, 0x6, 0x8}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x6, 0x1ff, 0x6, 0x6, 0x40, 0x3f, 0xa, 0xf, 0x6b, 0x0, 0x3f, 0x7, 0x4, 0x7, 0x4f, [0x5, 0x1]}}) accept4$phonet_pipe(r2, &(0x7f0000000180), &(0x7f0000000200)=0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x8, 0x9e9360cac756127a, 0x4, 0xfe}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) 09:27:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xec0) [ 2178.808490][T32007] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2178.946427][T32007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2178.971320][T32007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2178.997094][T32007] 8021q: adding VLAN 0 to HW filter on device team0 [ 2179.089532][T31995] IPVS: ftp: loaded support on port[0] = 21 [ 2179.095891][T32007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2179.113746][T31976] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r4, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000002c0)="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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0xffffffff800) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r7, 0x0, 0x0, 0xc1800) 09:27:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x3ffff, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2179.303343][T31989] Š: (slave bridge784): Enslaving as an active interface with an up link [ 2179.312571][T32018] IPv6: NLM_F_CREATE should be specified when creating new route [ 2179.381534][T32010] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 09:27:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2179.478543][T32010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2179.606054][T32010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 09:27:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, "4805b78dc5d956"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x41) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2179.661005][T32042] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf00) [ 2179.776137][T32043] Š: (slave bridge785): Enslaving as an active interface with an up link [ 2179.797631][T32044] Š: (slave bridge785): Releasing backup interface [ 2179.827610][T32054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:35 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2180.173194][T32052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2180.183151][T32043] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2180.222137][T32044] Š: (slave bridge785): Enslaving as an active interface with an up link 09:27:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xc, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r2, 0x0, 0x0, 0xc1800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r4 = accept(r3, &(0x7f00000004c0)=@ipx, &(0x7f0000000540)=0x80) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000580), 0x4) 09:27:38 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x87225, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) 09:27:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xfe4) 09:27:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'ip6erspan0\x00', {'veth0_to_bond\x00'}, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) shutdown(r0, 0xb6d80f45584c1dcf) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x70d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, &(0x7f0000000040), 0x100000001) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@delneigh={0x28, 0x1d, 0x100, 0x70bd2a, 0x25dfdbfd, {0x18, 0x0, 0x0, r6, 0x27, 0x8, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00!\"\x00\x00'], 0x20}, 0x1, 0xa000000}, 0x0) [ 2183.348410][T32079] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x87226, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2183.564118][T32079] Š: (slave bridge786): Enslaving as an active interface with an up link [ 2183.579778][T32090] Š: (slave bridge786): Releasing backup interface 09:27:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2183.856702][T32079] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2183.900442][T32090] Š: (slave bridge786): Enslaving as an active interface with an up link 09:27:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000bc0)={0x2, 0x2, 0xb0}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xc460eff15de061c2}, 0xc, &(0x7f0000000980)={&(0x7f0000000c00)={0x48, 0x7, 0x6, 0x303, 0x0, 0x0, {0x4, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000a000100767863616e000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x7}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000be00000004cd2d5dfbe0c08910ca0aaa8c8c4dd4e10c67622b7929a2d21f30c72ee693c7939224605aafe78d1be10a776847c9abdd8a1212f5ce94deed2deedd5a34d2b91957bccbbbfac9129569a33547d8cca332a14b1373370983a2d9b9caf7835cc12b91aba1d8dfc1b15fcf4f61a6bbfd9039130ad220bf9f053c77a5db7762ed37bb703058b375208f6a04ae73d306ca56706f838e539ca2579bc17febadd2e18f4b8799cc2f1ab6a338694302df1c1b3673ae2cb4d6c000eb6ef9ec0dcc64"], &(0x7f0000000b00)=0xe2) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000680)=""/58, 0x3a}], 0x8, &(0x7f0000000740)=""/216, 0xd8}, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r9, r8, 0x0, 0xffffffff800) sendfile(r9, r8, &(0x7f0000000040), 0x100000001) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000900)=[{}, {}], &(0x7f0000000940)=0x10) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000b80)={0x5a, 0x9, 0x5, 0x8, 0x8}) r10 = socket$netlink(0x10, 0x3, 0x19) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r10, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0x88, r11, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr="e514c7254fe05e70512360e8f8d7a44f"}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:udev_exec_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r7, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000b40)={0x0, r7, 0x6, 0x2d, 0x9, 0x1de}) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000880)={0x4, 0x6, 0x2, 0x81}, 0x8) 09:27:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000200)="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", 0x200, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000540)='cpuacct.stat\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000440)={0x27, 0xba, 0x5, 0xa, 0x6, 0x1, 0xa8, 0x8, 0x9, 0x1, 0x5, 0x7, 0x24, 0x8}, 0xe) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0xffffffff800) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000480)=0xfffff801, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000005c0)=0x9c, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') pwrite64(r7, &(0x7f0000000200)="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", 0x200, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00'}, &(0x7f0000000580)=0x44) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc006}, 0x8044082) 09:27:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x87227, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 09:27:39 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)='Q', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2b, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r8, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r8, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r8, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0x3f000000}, 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0x0, 0x190, 0x80, 0x0, 0x0, r9}, {0x1c993630, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x6, 0x6e6bba, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x4d4}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0xa7f8935fca5fa15b, 0x3cef14a422163db1, 0x2, 0x0, 0x0, 0xd2}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in=@empty, 0x4e22, 0x401, 0x4e22, 0x8000, 0xa, 0x80, 0x120, 0x2f, 0x0, r9}, {0x2, 0x7f800, 0x100000001, 0x100000000, 0x100, 0x1, 0xff, 0x99c}, {0x6, 0xffff, 0x2, 0x49f}, 0xe6c, 0x6e6bb9, 0x0, 0x2, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xff}, 0x1, @in, 0x3507, 0x3, 0x0, 0x5, 0x1f, 0xff, 0x800}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@broadcast, 0x4e23, 0x83, 0x4e21, 0x5, 0xa, 0x80, 0x90, 0x1d, 0x0, r9}, {0x8, 0x2, 0x7, 0x6, 0x6f, 0x100000001, 0x2, 0x100}, {0x80000000, 0xb3, 0x4, 0x10000}, 0x6, 0x6e6bb4, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0x33}, 0x8, @in6=@rand_addr="b7677c1b8b9f67513a0073d337d3d023", 0x0, 0xf13d7da3df0727ef, 0x0, 0x0, 0x5, 0xc3fc, 0x8}}, 0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@updpolicy={0x148, 0x19, 0x0, 0x70bd25, 0x25dfdbff, {{@in6=@rand_addr="980423d06c0c782767a8e193086b7d4c", @in6=@local, 0x4e24, 0xff, 0x4e24, 0x8000, 0xa, 0x80, 0xb0, 0xa9, 0x0, r9}, {0x10001, 0xff93, 0x0, 0x8, 0xffffffffffffff74, 0x5, 0xfff, 0x4}, {0x2, 0x5, 0x100000000, 0x5}, 0x6, 0x6e6bbf, 0x0, 0x1, 0x2, 0x1}, [@lastused={0xc, 0xf, 0x2}, @algo_auth={0x7a, 0x1, {{'crct10dif-pclmul\x00'}, 0x190, "d358ba927e763229356f470887b2a563384331ba261a94bb26b8b8f2fda4b7052a40890a406328bc751c9234bc5ed106527d"}}, @proto={0x5, 0x19, 0xff}]}, 0x148}, 0x1, 0x0, 0x0, 0x24000040}, 0x808) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x2a}, @in6=@remote, 0x4e21, 0x8, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x87, r4, r9}, {0x7fffffff, 0x80, 0x400, 0xb96, 0x4, 0x9, 0xfd, 0x9}, {0x4, 0xb714, 0x4, 0x6}, 0x5, 0x0, 0x2, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x7, 0x4d2, 0x33}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x0, 0xff, 0x3, 0x2, 0xdbd1}}, 0xe8) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r10, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000000)) 09:27:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x1bf5) 09:27:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @loopback}, 0x3, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="f831ac370f55633557cf6877ea475737bc0269a93e6a7dac6a86c76c03f676550098916d87cb84d00db231fea3d1492f42b0c445c4c7db7162213518998e197370ab41bab3de2243890233fff8421b87c75eca06cc2c6f3e7ce9af2a00ce03c7a0eabd53f32565dc9dcadca1fd3596f0b2ae348bff17d8cd82e1b15ef6e833d92a925f8db916182f1aa52c4b64c925bf8b39584769fec4a1d719cc", 0x9b}, {&(0x7f00000002c0)="b7a7beb1c076fd9c36a2c5f35df9145589b2e0f871bfc45fdb022f87b6ac75867a7fd1af7af727f182aaaed6e6d0d19a7f53fe48621f661ae56855f87ee4d3465f5db54b73d2163cb3b3f14f070ef04391b241c327711c9ef0dfee73675b3d53803b95606cbef3ef7a0fc86c3712e2204cab16258a78989f7e3453ffe1ef7938077d9ea43f5c4bf448a863c3727847f3a1d1ec39cf7f55f5", 0x98}], 0x2, &(0x7f0000000380)=[{0x108, 0x119, 0x3, "94288addf5a4358adc96d45220f7ee008c8fff650035c4ab4f195c8d612374dd700ed48e17f111cc73aeac25c0f08874b3c032b8aa8185cf396e7e40179fb8b0d3f593392d1972f5171d055d104aca93f94769d3cdbba0ed3e1ff8e3fab23f81d0422dcd287748b5762fc05a53f13696f292db6d0bc1c67534ea783010c1108e1e56155dd6968ddcc69471df905dbb9cb1ba9b252203961cd5399f91fb2fa3943501ef8fe2e76cc3bd5ef001e0de1391372077be7206dabcff820ed0485eeb6a7ddd49726ae2893adab8c27edaa92b328335baf414b4b33a6cdcd6898ae69f2b7ed3301150925cbe3195de7e7f8bac17c805c4"}, {0x50, 0x114, 0x40, "fe0b6c097ff64e03052133e2395d5adbd6519e961e90a6528f1505ea704b52a3250fe2f334bdd09e3c969771934a638c1e1bda8c81f99db87dcf6a2401"}, {0x70, 0x103, 0x4, "b383720bb8ad83c763fd749bd0049c4f4e8b8ea53778cdbb8b8446d76aac5ccfee9fe6813a7fab597c454dfcb26b49112772b5453387fa3dae8a8a17f8b80ad69e6772698169e3bff69c8d362ee3dfb847ecd3afc84a0922bd4955c7"}, {0x70, 0x0, 0x5, "1d3487ebfd33c69166fcb39fe3551598bf929f8a8ed3561a846563d4d0550bc0b040cfaa2fdcb84ca1f29835af603342508923235a75b764a3eb9a830c075b2a88d349bf9199b999664810409278f53b33cbfe7f2e05b9779eb02cddbf22"}, {0x100, 0x110, 0x4, "6d6ab55e4375b41dcebec699c94019a6e7fddd65713552958671dc1cbeaf602788bcb18db5ce9eef32eea2e969102334e4bd1031c5c30bf6ed5e28014af2b21ea27be5aca2a2bd45529abbf826ff78c6a9d2da2a2263f8586fbcbb1814463d6be2217b3eb8420f9ca31f36ec54228ac95c5bdd9b21616af47782b2624abdd0a23990a5d8d6f1a999089b6fca91216f5cfc52ad5f0ad80cd995d4b6b691bf9ba086dfb66e0279825a105cb6572e2a01ee09afb12acfa3b06889f629911d6a4061dc4ada97bf49861c82c1ceee00443a8fe32fcf5fca213fc39f0c26d4ddf59ad96739076fbcab995759"}], 0x338}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r4, 0x0, 0x0, 0xc1800) 09:27:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}, [0x400, 0x80, 0x8, 0xd0, 0x7, 0x401, 0x3ff, 0xff, 0x800, 0x3, 0xffff, 0xffff, 0x3f, 0x1, 0x6]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r5, 0xcea, 0x7}, &(0x7f0000000140)=0xc) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r7, 0x400443c9, &(0x7f0000000400)={{0xcf, 0x8, 0x1, 0x5, 0x20, 0x3}, 0x101}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="00affefe59833a8bb98ed5357813c6729264997ba7e89850f77a8315", 0x1c}, {&(0x7f0000000480)="06ee295f8a6b5061bfbd0b6e551b", 0xe}, {&(0x7f0000000540)="19069ff26f165c35dd480ec14fd4f02fb948c554def415bcc728bc3a5627dac3ca678fb6d082be37434a7e42bf7b0f1405528dc3dc75248c14180b599e82bd038c25933b37", 0x45}, {&(0x7f00000005c0)="3e00b1c7c08c51f8782e3944fd7db06a85f4da2a8ed756c22f3968937933e41a36a71e6b843533a5751853c16a8aa78635803e7246ea48cb03fb6db69e7a4dab87d1c516281cac163da9f5d8850cb81f90683e09fe66b29013b8485ad5d2febfcf527eed72cdbdd3ff9025844e61e5c320bec8c61fa2cb3865cf87d004c366d0964835b6985f50b97cfd4f34404de2054dd690a7", 0x94}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="d574a637cec890b4c227cceb05f759c26ebe84daa11ff53f5104262c28149de8b477", 0x22}, {&(0x7f0000000700)="89a0fed7d2aa6d56ee424861b7fdf846851fc7f1fd6c028f333fce8c27699cedbfa9d2ab8fc96c8f89a12c83d7cc46a946eb4f6299259806db79093f17ebba3c3da2553be04d7b33bbc79b4a627efde798b6049af36b95077a030ae469e857df1280a771", 0x64}], 0x7, &(0x7f0000001800)=[{0x30, 0x6, 0x1, "9a51e6f8c270a3d0952fb5c97407a8f82ddb575f099d39587593a9653b"}, {0xb8, 0x10d, 0x0, "a4f194336db2406678d46c52bb9211335eb603928100b92a664917821da7fed4df71249747885c84d7827924551eab7eb4db367495b00505179315e90de18943f7ec1f74efbcd7078330ef3adb3aaeef92328fa8242a057323fb24447ddd999986f951f51497d53fa94d54fd7174619c309e927281902b2a352c96c9d7d177289458dea3ab3a45f789ae56adfd25b71f8fe33ecce6aba327a64e7f0824a390df22ed3aa72a"}, {0x1010, 0x10a, 0x1000, "d894ab684c7af94910ab57663ec04cc2668eb979db32c4e1c5c6eac85cc4c1c3c95fc35efd13a63b3ce2c806dc9c5cac5b5ff72d1ecfc3671993a574d184a82323f3913f9994bd113834f5e1c7a0c67e09cee1bd7b614e65977baa7c53121ed22bd831eb63aaec6daf96e093e9d463981f970cb4e5d3610e67830652daa349f8c4e602d130e2ba57c1eb6a40667781b049ed120ffeb18ce8592c11298ea080a1e2f7fafc74f697ec6ff83941ed3e024a7aea7df728c443767911b64a9a6c98171fd544757c985f68161b1d13409a010026637645f6fbc07d624c61372230a592a812e3f81d4b445f3ffef5de259516b1b9b2731d796cb85a11a6d40fa88738e45cf82c0561858cdf12748b4dc5483cdeb9503b5fcdd51bf720e356c4bd2c0395241e8cb2bf60518cd2c233ed579004904ff0c95f4bbdbd79e6ccab3495663d8830322c3ed664bb13c9b2b93e7bacfdb2623bde4c7bd636134d19827014826862c96c4ddea5131853008be73f84ce1629b695c189ca752b94df8e99ba242ea00bbfcaf6a435026db3f4604576f5aa3979ae8e5b0a7a291096ae20f5077abfed145aaf29df1f639741d2492e2ccf329214d550aa3a63edcb033e2a8b4b744bf506ddfbea36218e0d5af897b9b51f7addbdaf665ea0fa531bd98c6c39c991f4753874bb137c4a0d8ed6666f2eeb7b1a1dc50697cfbaffa17b349a1a39a3ceb8c7a659dddc78909c67dd9e8f846da92f8189da709001440ad3e1dd84e8ece9f6e7cf513ae0678a0202b2c1f8b4cded5285e138cf59d2aa480fa83acfe7eb0ce773425d359b6c87f20c3c810a703b14b85378305af292d576262a78ea4fedde71b1d6460da32ac7741f47bfa47fc0316045cff083e529116af5de19ea5443034691df8979f3bf9d70b06876a794765680dafc6bb7f71474f96986479ad417fa9ecd5d6c40cdf49e373a49cba401bca8403ef7e23b6da4416dc92ebd7cc6823fee04beed063b0de54f5b7b9a1fbd7420d8e3149de9b0cf09839c75ddfeea93596973a2a3b1388e83b5abddc5f6aca04013a4bf2586cb122dd7f6e7027899bc8cfcbb00bd019444b1978deb2cd45c26e2d0034290d7d5053dd412e1ee55d91fda4147a15f1ee60c9aa472e9fcfa982886ebf60d32c880d6624a8064ff2330d7fe93e42df41bc7761defa74ea730ae0d8023982cf5d05214d83f4c1ee3551919c34d9daf715c6054176256399f033714351b4f6b26826d7000e26c402a16683dec34f569ed7d35a48963f7c7a04dd7acd307d7e0cf52d93f7c5bea973421dc2adc94080a2f97f5cd792f0c333900d94fc4f85030984b8c48cad54a88624d15163f11a20763301912b85ac0c9baa4bb4b505518bb53af8f058310e43a0933dae2a2c1e4a3de938de6d1773691d62374df3e92e22130febbb2b8934b5afdbafe26602e27fe6f4f66ea75c419c83031a469ee1e109150683cf7317d9acc15b71fd171d8d6e03d7b0df6934b2e0b78a80af999b8fff607bebee05fb67dff5536c32a1cfc246ac94644cae4f121e7d42d0fabf21c58ebc4c3d6c71899234269e0d37cc647c9f20ad249e3b1401cebad67c3c24845d67720015ea55feb4333be87f0210b1deba0a506e9f77202942e38dfe3568f72152e39474fe0ed990b31978838e493474934166abf603189976ba1a45df1e22f0d38652129cb44a05a851d88edb7c075ce963e3b7554bdea1c0a2de20e467684e0938a49592b7dad38dab40ee8bf91e134a135466e2d7633785ae29daa30627dbe4f5bd6a802df3bfe7d2baa3a6f7e0cf04f61fef35aeaf3dc16feff77a7669e250a39dcf3a8583ff3d645f7b3e357f3dcfe978c7621478cf835ecd32c40a955ec73caee4b177a30c00c09623c63620d5aa2a83f4d41960b9342f502d7043dc1bc4af1945871a1dad8235f6de99ba7ae1d16ec5907875ea5845016c506b64dc9895ac9dfd786b8c4210b4187879e0490e63696060df949d2d53f2d56b0770c012b1d6825dd4c42f267935169b7e2e9739f094900be6ccf95e7b3614596b8072c743f04687f98a07ea77bc1bbbd213e7fdf7e95c676412d9adaf988559d23d310e0f518acab76362a2b4720961ffb7a6ceece10c0ede38e7475d8278bbabcc669c203f30e86eb8860caad7bbec886c56b87ede651a32231ec6e387e05fafe68ce3d889aee47bd2f357b3f641315b6b809a5893a53eeac021809ad7b014203386faf30ad2792f9322bc70168c6b6cf018df9cb0758d41c8fb0c296307e427af6442f8ba164f205d5e16591fdf428373264bf2b99587ece36baa3095504d6d8bab83f6d7e29503804f9729a083696788f24aac7d5d7d66bd1e6cf99b34b8020560486edf554e76db0c6d12b75f180cd74316cf464adf0c23d63da3bc16114a9ff415f63cc1fc8d606f3d7519335c25c00d11e7f114d4c30d8bc6a55e3857e066615f7007ff46bd52c70ce98817976a841beb186fc02a31e79cb58642704ecae6d8f9a271660a0da7c9aa60c615f704d04109dd86eb36fb77520cc6c52d9afaab6d2a3ed0f101ce8c38c718cc06cbdbb7437657bc4104204a84c3fa821725a8c3b999c30d2947e6c5a3af3bdbc64c0d4e56d11e4761c54082dab85a99f13f7184cbfdc54a1b05ab4588e2dee416aedc187e694918994beddf8b2f86490749b8fd6586ef9078d00d70d2a91e90008e82ecc96b6d6faf44a98c5fc2e5e6d347640cd7b9875b620ef509c91f3d8fcf0afe22eb0a72f2d43967d784309c72d4cf5be8e307b5e88bd1f929c168739a9aafcbb571c584cbdd3a7277c8a43ed1799ec0f268a2be85ee8d304f4f9c8abdc6a2383974c4b8d068ceeb4a701affcee31f083aa6cdc1aacd94ee611e05faacddee7d5220c98e428d4cd706f644d0852f7187879784fa241ee4b0f361c9b8e2710faed2a965039b3855149839d86fae25e8f90cc552c7e276f86792fd394603e406dd4f92968adf0bf770ce0cf131a497620863da77005f3fd08dc69f85801676799bd83d4acc3a545d38ca0c7c6abf33c69568fc46e2e7fd052ee1274f15d78a62a54997ce1a94cf63902ef17d80dea420b219e7bc664fe8cee7dc38cfe9725240377cec7469fcd8b3d7e015e2823563e6ba5275d3b48931f486c5fddd406bb568427234d5b14b6078b564d4020dc3e8083b673968ad6750d0cab20ee244b23ae127b33d05101c03553a5ebc3937cf65c8b79871e3941e2eefa9e7a782c25ed6ffe65b4176041c79d9b8b49eb1c200be188e61682706504f0aad36347b5e03e1553184998f760f08d1e23cca0717e13a61760022196d02e1e5a7eba513607735806d14f7ddb2880cb8e00458737bb642aefda6394517f0e919af3a686dc747abac42497da7fdfb862b47dfd3664abdb1712508f27c1bcd4c12d961811538718b0f8dd8df540323fc2d5fb3b521d13cfd23366ee36acb33dcb62933de3d49471ab16f08eaf603d8152951b2849369daa1c3c4f37ab1be750273f950d2f4c6a8e44fff28bbbeec5dd52fd411e5841657a57e65a7f914763a1b6de9980de2a21e526af4f4d2a6d84cbc0a5d2a84e4d92809aeedff7cb450821b086ef36df9c8f6ca63eb92a2e4d6784786c72e1843f5a72e32e8d952f75e9fee72f38a1d125c6cb089de0036ece2d38ab17265da735cc7a2a2479a275815649c392131d944c4de93729aead4eaf9d5c1cd2027f694d253964dcb13d2b988802ceb2a0e1a431059a4bff12e6fc787953db010a57f48e2f6c92323e9de67dc1cd0372eb9998c48cbbd5053ce6e0617541250bb0349e0c35e5a740c432b97368a2c63c04cecfb25b543da62d9057e39c73b5d7426350fd1e0a92325498ffb4533a892fff13814a9d0544d9bf24e46ec02c24b3df5cd3db3fa6f79a8fb7faea6e9630400fb50fb6ba0ca5ac7fd6613b9359dab9ceb059ec1464f0474dca148f6b11b93d695fa7e672b68312bca63d6b13935f2f874e5f03f2ced74b65176677e187cde4cb50b68afbb0f60a51dbf1442bf0893d7c79c2ae63474ebf11768d45433a4557381582f3597a8ca6584af476428c9c687ed7b01043aa74b0b0cce690918b57ba4d7aac8f3b9538c991c89d6c60259e5afc8bfec53de62332169456617c6afdaf65510dd4cc44c0aa7cd795476d4eec273e8c0b17d832d336075e7cb08f939ca3c5016aa6808eec798f420ee2f43431c6818b068b178643170ac1e1d6f22e0ea87ec93fc577d8cfb7c92e18df6cb6ef062d35772c25b5179469e7e6a0428259bbccf1b05af3f09fd52785f72d29316b2b7b62d223868c3f0b9bb58214785fbc6ef6b185ed5dc07be1d5fd2a5211bea6d465b29545918ff2d34967c225bc3ad3f53cb69aca9137cec9d721052b5533840f0324921c045396508ae32255e5e2ce23be5ba3e39389f69e0d3ce4121103e017ff87621473f3696c9d2390fd98f2128c9f5d73407de9e82edadf1a4e140af7c99cd1ba07011ec3c65fc13d866a4754d7fbcdb1c491458403358562839a2882240d0d86da4ff768394df158eb9031e1ff44d3d859000f5b82e3560e190dab669e232e4f90e0e46b9db6bbda97e5c2e6d1a726bd0c26628655fe07395b2ace2f190072586f320a0b0d54b0abd9ac7028dba0c5fa04e8fbba547b4a485be2688d0aef6bfee6409b306308e1f95fd0ef6d70fa4b152e77c3336c9bf3991f882e36ffd246afa4f8eff2cf7ad5b17e8d9aeea5e8e7fd324ad569b2f82ed68352e0eeb3520f92da7189d25e81d20b74c1857494c513da4c28a9ff1626ec1eb6afc09b9cd41747b84784d1436821cc5023cb414a76a76dd5cbf7052513db8ea390f8219adaff60660e54344e454156fbd5e2efc31a535cb6b7f72914a150056977f484d150bd7c140be004957ac2cba6bee07fbb398f00e054dc9ec08442689b772d995fd7f5e41b0375c00c4ecae69fa56466b419d0be8b2519aefc6654283abc831ce25da5ebfaf249949dea5568b6c6277d956a0e4725b3f2b587e4e9f8192899976767abddd236bc31c1b3f8fad8ef7e0c520c5a127e742c14c0a517c4ed9401b6effb01d62cb5badb3d2e7dc98b4d97d6b5c9110c267cc7a7bbfe92b41e347ca01bdb601322e7626ad39adece1905ac9bbba4026a85ca105efae378ff34a52db0eff6983660d868b49bcba90197156b2f914e5905a478c265a7409374dd0ec9a0a7fc0cecfe64becb4f8dd6014bde63ed5d5174c9f29ddd1e0c6f4b6dab2e59f1f2e8ac6f60094e48b4f8c3a6ea4c4518432cf4a10f9e017e11d15ed4dca99ff87f429ca474d3bd493ce4143f018d8ab939bd4a366105eca39beb6918fbaa9c2e0286d4d7bfa9e8df0ebda3db9382115b18b00e6a7d40774cc9224cd903de494c8ba2f1e8971c1c2b02793dd5884a0999dc3a4005dee2923e1518c1120884561d30815beaf263e0caca7c80aeaab07ad35e15b90dfd8e3b10da4567d8f3597db0d72821813e3087d4fb6caa6b608e5c5841e1d564fc1ea2b6e51de239b18193b68b26a3e9aa20fb7367dcdcd8cf24139dab3b0bc6ad240cd5508e64c989c54c6b01d8fdfefe946b91df7cf2110177fd6f888ef93e36d4ce71c37d6359532bcc163f6de34f3b7b6f3b9fde7bc02f30a2edb605c2f9980a09646fa0167a55abe8e2ec5b73ace8936f45e7339daef8a8ebe96f26af71706bd9e35d1873b7d0f9af2593391eb045b6393be9dc4164eddd99604855e28a8fb7d3fd805fc20d528807e2abd62c22755d450cc68ceef398e35d04861ba3d13d73bbddb045e2d84db6"}, {0xb0, 0x88, 0x0, "8de0ff60b76dea0b36003fe7100c12dc301ea4bb6a2dcc5c300301b4004623d8fa2fae1e9f1bd7121be670463430e60fb9e564c393fa26c4bfecbea89ab850646add18bb29308de5c2e639215ed634bc197ea0ca6cd1da0299ac12377c67ff4903cd57f016219c023413e4247ac53b278f723010467e18184ae8a21c26983ea10ba14c7d5fffc688bb42d769194bda6a1e18ddaf655ce192e34e3b23d200"}, {0x28, 0x108, 0xd84e, "25aaf916867aa77abdc14892e67b12aed62e3628713319be"}, {0x58, 0x0, 0xff, "ab3549ed9347cf8b48f5c54394ddff87f54405ad5a98a04a0ea0773bc177db56de2561cb9d38dbdd4622c017a5fbbdf7c1c485e365d86f1d27ba088061f6f73e89f6f8fb0a54"}], 0x1228}, 0x80) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x899, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r10}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r11, &(0x7f0000000540), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r11, &(0x7f0000000180)="9fba8b07229e250721040d23f2bf59658d588cdbe8a3d1a50ee00141b1c37fa1d72bf1e3a632a377a08797baa12ba1", &(0x7f0000000300)=""/146}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2184.338322][T32140] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x87228, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2184.594034][T32146] Š: (slave bridge787): Enslaving as an active interface with an up link [ 2184.619338][T32140] Š: (slave bridge787): Releasing backup interface 09:27:40 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2184.876896][T32146] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x87229, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 09:27:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3000) 09:27:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2185.109651][T32146] Š: (slave bridge787): Enslaving as an active interface with an up link 09:27:40 executing program 3: ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'bridge_slave_0\x00', {0x2, 0x4e22, @remote}}) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24001d0018001103000000000000cd3e1c397bad210124db54dfbef401ae0000200000000600150003000000e28873213e912834cbff41fce9d14eb217a1bd7279f9ceb259d871cee64c7bcd29fdd07eb863c00f11ad3cabee3ec9e3f95f36d39c804085a39fb7f52dd838d1fbed678e025f34e55638c1ac4a22e2285f6ed185e2551f4dcebb8e0e0a6302b8a0e0d7fccac837404e1f95108c5f66ddb74281d92114f8ca5de15e93f76a93ee8d130d815cdb6e5aab8d63edda6c2bc20b75015218a26597a344ed40b54118a4d136c62974070ac6d6d68acf84ccb33540cf2847066053c05e734354e4771fdc93e7c00000000000000000ae43d26693014d2e934ef9427656080000f808768c0500000038b14f682e5a0fdaa882d27438e2ea53046c51d72e79f4015e9976bdea5f0be852580af17cd12c85dd839533a1f292db4021c9adb0ed48d0ec65503ceac1626d360f852c3ec016d47b90cd21f33a47a81a67828a14fac3fe6c790873373b0ea728248eeed4d04eb8490732e2bb8b60f667d6e8aea9dc00"/405], 0x24}}, 0x0) 09:27:40 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000140), 0xff4d) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0xffffffffffffff0c) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="7261770000000000000000000000000000000200000003000000900200000000000000010000000000000001000000000000f8010000f8010000f8010000f8010000f801000003000000000000000000000000000000000000000000000000f6589e9af7ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a000000100000000000000000200000000000000000000003000746370000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000484d41524b0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000ac01f911000000000000000000000000ac1414bb000000000000000073797a6b616c6c65723100000000000063616966300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000080000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000007f7ea9f7edb6d64af2ee788638c797baa2d9441fcfb031a8b48daa4fe32c1fc8cff38ae800"/774], 0x2f0) 09:27:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r2 = socket$inet6(0xa, 0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r3, 0x0, 0x0, 0xc1800) 09:27:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x8722a, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) [ 2185.473001][T32193] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2185.498938][ T27] audit: type=1800 audit(1579166860.943:3062): pid=32198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16833 res=0 [ 2185.544730][T32204] Š: (slave bridge788): Enslaving as an active interface with an up link [ 2185.554294][ T27] audit: type=1804 audit(1579166860.973:3063): pid=32207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3041/memory.events" dev="sda1" ino=16833 res=1 [ 2185.592119][T32208] Š: (slave bridge788): Releasing backup interface [ 2185.610889][ T27] audit: type=1804 audit(1579166860.983:3064): pid=32198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3041/memory.events" dev="sda1" ino=16833 res=1 [ 2185.640111][ T27] audit: type=1800 audit(1579166860.983:3065): pid=32198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16833 res=0 [ 2185.662448][ T27] audit: type=1804 audit(1579166860.983:3066): pid=32207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3041/memory.events" dev="sda1" ino=16833 res=1 09:27:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) pwrite64(r2, &(0x7f00000002c0)="dad8bea29ec0057e740ba9", 0xb, 0x9) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000240)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000001010504000000000000000003000005080007000000000640000d000c000300060002004e2000001c000300060001004e210000060002004e20050000000000000000001400050000000000000000000000ffff000000020800070000000000"], 0x64}, 0x1, 0x0, 0x0, 0x18810}, 0x4000) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x24}}, 0x0) [ 2185.858625][T32193] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 09:27:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000340)=0x8, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r3, 0x0, 0xffffffff800) sendfile(r5, r3, &(0x7f0000000040), 0x100000001) getpeername$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r7, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2400001800dd8d0000000000000000020000000000fe020000000008000400", @ANYRES32=r10, @ANYBLOB], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', r10}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@mpls_getroute={0xec, 0x1a, 0x2, 0x70bd2d, 0x25dfdbfa, {0x1c, 0x10, 0x10, 0x6, 0xff, 0x2, 0x0, 0x0, 0x400}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x40, 0x3f, r2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x2e, 0x2, 0x0, r6}}, @RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x79d6df74fc3f2313, "101a553a7707000000c9b697589e"}}, @RTA_NEWDST={0x84, 0x13, [{0x20, 0x0, 0x1}, {0x7}, {0x1ff, 0x0, 0x1}, {0x5}, {0x3}, {0x8b}, {0x4}, {0x100, 0x0, 0x1}, {0x62, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x2}, {0x3}, {0x77e}, {0x9, 0x0, 0x1}, {0x7fff}, {0x3f6d}, {0x5b}, {0x5e7}, {0x5}, {0x1, 0x0, 0x1}, {0x7ff}, {0x2, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0xffff}, {0x5, 0x0, 0x1}, {0x4}, {0xd7c}, {0x7fff}, {0x9bd0}]}, @RTA_OIF={0x8, 0x4, r11}]}, 0xec}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r12, &(0x7f0000000140), 0xff4d) r13 = openat$cgroup_ro(r12, &(0x7f0000000540)='cpu.stat\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r13, 0x0, 0x3, &(0x7f0000000580)=0x10001, 0x4) getsockname(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000000)=0x80) setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f0000000080)={0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'lc\x00', 0x0, 0x9, 0x2b}, 0x2c) [ 2185.953222][T32204] Š: (slave bridge788): Enslaving as an active interface with an up link [ 2185.983601][ C1] ================================================================== [ 2185.992153][ C1] BUG: KASAN: slab-out-of-bounds in __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.000568][ C1] Read of size 1 at addr ffff888056271764 by task kworker/1:5/15274 [ 2186.008547][ C1] [ 2186.010884][ C1] CPU: 1 PID: 15274 Comm: kworker/1:5 Not tainted 5.5.0-rc5-syzkaller #0 [ 2186.019297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2186.024585][ T27] audit: type=1804 audit(1579166861.473:3067): pid=32234 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3042/memory.events" dev="sda1" ino=16833 res=1 [ 2186.029454][ C1] Workqueue: rcu_gp process_srcu [ 2186.029478][ C1] Call Trace: [ 2186.029485][ C1] [ 2186.029508][ C1] dump_stack+0x197/0x210 [ 2186.070394][ C1] ? __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.076044][ C1] print_address_description.constprop.0.cold+0xd4/0x30b [ 2186.083072][ C1] ? __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.088713][ C1] ? __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.094473][ C1] __kasan_report.cold+0x1b/0x41 [ 2186.099433][ C1] ? __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.102127][ T27] audit: type=1800 audit(1579166861.513:3068): pid=32234 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16833 res=0 [ 2186.105069][ C1] kasan_report+0x12/0x20 [ 2186.105084][ C1] __asan_report_load1_noabort+0x14/0x20 [ 2186.105099][ C1] __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.105196][ C1] ? _crng_backtrack_protect+0xff/0x140 [ 2186.105222][ C1] vti_tunnel_xmit+0x277/0x17a0 09:27:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) accept4$packet(r4, &(0x7f0000008540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008580)=0x14, 0x80c00) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r6, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x3b, r7, r9}, {0x6ad, 0x5, 0x4bdb, 0x8, 0xe30, 0xe9, 0x9, 0x10000}, {0x8d, 0x7, 0x2, 0x6}, 0x5, 0x6e6bbd, 0x4, 0xcf98fbe223dbb310, 0x3ac0c0ea39abcba3, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x80ceb09ccb26bd76, 0x3, 0x1f, 0x33b, 0x7, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000006f0000000008000a000f0000002cb8d5a59054a1ef4fd1b6bf6e54f2ee08a0abc6cbdf5aa44bd79fc777d5455ea592df8f689339b2b83c26bf8afec434b2f3960f3f01daa819783dc7a855757d1bad08f61a7acd5c7660bdd37a5de1"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10, r12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 2186.137647][ T27] audit: type=1804 audit(1579166861.513:3069): pid=32234 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir920919702/syzkaller.hR2pYp/3042/memory.events" dev="sda1" ino=16833 res=1 [ 2186.141995][ C1] ? vti_rcv_tunnel+0x1a0/0x1a0 [ 2186.142024][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2186.142038][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2186.142062][ C1] dev_hard_start_xmit+0x1a3/0x9b0 [ 2186.200146][ C1] sch_direct_xmit+0x372/0xd30 [ 2186.204927][ C1] ? dev_watchdog+0xca0/0xca0 [ 2186.209591][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2186.215137][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2186.221111][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2186.227392][ C1] ? sfb_dequeue+0x421/0x4d0 [ 2186.231992][ C1] __qdisc_run+0x4bf/0x1770 [ 2186.236509][ C1] __dev_queue_xmit+0x163f/0x35c0 [ 2186.241516][ C1] ? mark_held_locks+0xa4/0xf0 [ 2186.246273][ C1] ? __local_bh_enable_ip+0x15a/0x270 [ 2186.251634][ C1] ? _raw_write_unlock_bh+0x2c/0x30 [ 2186.256828][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2186.262112][ C1] ? __local_bh_enable_ip+0x100/0x270 [ 2186.267485][ C1] ? _raw_write_unlock_bh+0x2c/0x30 [ 2186.272686][ C1] ? ___neigh_create+0xdb4/0x2560 [ 2186.278565][ C1] ? mark_held_locks+0xf0/0xf0 [ 2186.283328][ C1] ? debug_smp_processor_id+0x33/0x18a [ 2186.288792][ C1] dev_queue_xmit+0x18/0x20 [ 2186.293293][ C1] ? dev_queue_xmit+0x18/0x20 [ 2186.298354][ C1] neigh_direct_output+0x16/0x20 [ 2186.303287][ C1] ip6_finish_output2+0x109a/0x25c0 [ 2186.308484][ C1] ? ip6_mtu+0x2e6/0x450 [ 2186.312715][ C1] ? ip6_frag_next+0xb20/0xb20 [ 2186.317469][ C1] ? lock_downgrade+0x920/0x920 [ 2186.322314][ C1] ? rcu_read_lock_held+0x9c/0xb0 [ 2186.327377][ C1] ? __kasan_check_read+0x11/0x20 [ 2186.332635][ C1] __ip6_finish_output+0x444/0xaa0 [ 2186.337731][ C1] ? __ip6_finish_output+0x444/0xaa0 [ 2186.343017][ C1] ip6_finish_output+0x38/0x1f0 [ 2186.347887][ C1] ip6_output+0x25e/0x880 [ 2186.352212][ C1] ? ip6_finish_output+0x1f0/0x1f0 [ 2186.357311][ C1] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2186.363462][ C1] ? __ip6_finish_output+0xaa0/0xaa0 [ 2186.369003][ C1] ? rcu_read_lock_held_common+0x130/0x130 [ 2186.374810][ C1] ndisc_send_skb+0xf1f/0x1490 [ 2186.379605][ C1] ? nf_hook.constprop.0+0x560/0x560 [ 2186.384889][ C1] ? memset+0x32/0x40 [ 2186.388876][ C1] ndisc_send_rs+0x134/0x720 [ 2186.393482][ C1] addrconf_rs_timer+0x30f/0x6e0 [ 2186.398426][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 2186.403396][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2186.409381][ C1] call_timer_fn+0x1ac/0x780 [ 2186.414019][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 2186.418960][ C1] ? msleep_interruptible+0x150/0x150 [ 2186.424315][ C1] ? run_timer_softirq+0x6b1/0x1790 [ 2186.429505][ C1] ? trace_hardirqs_on+0x67/0x240 [ 2186.434522][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 2186.439458][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 2186.444406][ C1] run_timer_softirq+0x6c3/0x1790 [ 2186.449448][ C1] ? add_timer+0x930/0x930 [ 2186.453860][ C1] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2186.460020][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2186.465680][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2186.471849][ C1] ? trace_hardirqs_on+0x67/0x240 [ 2186.476914][ C1] __do_softirq+0x262/0x98c [ 2186.481403][ C1] ? sched_clock_cpu+0x1b/0x1b0 [ 2186.486259][ C1] irq_exit+0x19b/0x1e0 [ 2186.490482][ C1] smp_apic_timer_interrupt+0x1a3/0x610 [ 2186.496045][ C1] apic_timer_interrupt+0xf/0x20 [ 2186.501592][ C1] [ 2186.504532][ C1] RIP: 0010:queue_delayed_work_on+0x12a/0x210 [ 2186.510589][ C1] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 d8 00 00 00 48 83 3d 0e f3 45 08 00 0f 84 9a 00 00 00 e8 bb b3 27 00 48 89 df 57 9d <0f> 1f 44 00 00 e8 ac b3 27 00 44 89 f8 48 83 c4 10 5b 41 5c 41 5d [ 2186.530672][ C1] RSP: 0018:ffffc900025d7be0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 2186.539083][ C1] RAX: ffff888092efe340 RBX: 0000000000000293 RCX: 0000000000000006 [ 2186.547085][ C1] RDX: 0000000000000000 RSI: ffffffff814d41d5 RDI: 0000000000000293 [ 2186.555042][ C1] RBP: ffffc900025d7c18 R08: 1ffffffff165e7a1 R09: fffffbfff165e7a2 [ 2186.563006][ C1] R10: fffffbfff165e7a1 R11: ffffffff8b2f3d0f R12: 0000000000000200 [ 2186.571521][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 2186.579494][ C1] ? queue_delayed_work_on+0x125/0x210 [ 2186.584960][ C1] srcu_reschedule+0xd7/0x130 [ 2186.589630][ C1] process_srcu+0x125/0xe10 [ 2186.594138][ C1] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2186.600297][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2186.605834][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2186.611804][ C1] ? trace_hardirqs_on+0x67/0x240 [ 2186.616835][ C1] process_one_work+0x9af/0x1740 [ 2186.621775][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2186.627138][ C1] ? lock_acquire+0x190/0x410 [ 2186.631843][ C1] worker_thread+0x98/0xe40 [ 2186.636362][ C1] kthread+0x361/0x430 [ 2186.640419][ C1] ? process_one_work+0x1740/0x1740 [ 2186.645616][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 2186.651325][ C1] ret_from_fork+0x24/0x30 [ 2186.655746][ C1] [ 2186.658078][ C1] Allocated by task 0: [ 2186.662128][ C1] (stack is not available) [ 2186.666522][ C1] [ 2186.668839][ C1] Freed by task 0: [ 2186.672537][ C1] (stack is not available) [ 2186.676942][ C1] [ 2186.679271][ C1] The buggy address belongs to the object at ffff888056271000 [ 2186.679271][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 2186.693317][ C1] The buggy address is located 868 bytes to the right of [ 2186.693317][ C1] 1024-byte region [ffff888056271000, ffff888056271400) [ 2186.707189][ C1] The buggy address belongs to the page: [ 2186.712945][ C1] page:ffffea0001589c40 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0 [ 2186.722103][ C1] raw: 00fffe0000000200 ffffea0001589c08 ffff8880aa401848 ffff8880aa400c40 [ 2186.730739][ C1] raw: 0000000000000000 ffff888056271000 0000000100000002 0000000000000000 [ 2186.739351][ C1] page dumped because: kasan: bad access detected [ 2186.745783][ C1] [ 2186.748101][ C1] Memory state around the buggy address: [ 2186.753719][ C1] ffff888056271600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2186.761779][ C1] ffff888056271680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2186.769839][ C1] >ffff888056271700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2186.777888][ C1] ^ [ 2186.785089][ C1] ffff888056271780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2186.793158][ C1] ffff888056271800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:27:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601000000000000000000000000010500010007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3f00) [ 2186.801212][ C1] ================================================================== [ 2186.809863][ C1] Disabling lock debugging due to kernel taint [ 2186.816110][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 2186.822694][ C1] CPU: 1 PID: 15274 Comm: kworker/1:5 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 2186.832490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2186.842556][ C1] Workqueue: rcu_gp process_srcu [ 2186.847487][ C1] Call Trace: [ 2186.851029][ C1] [ 2186.853940][ C1] dump_stack+0x197/0x210 [ 2186.858695][ C1] panic+0x2e3/0x75c [ 2186.862595][ C1] ? add_taint.cold+0x16/0x16 [ 2186.867279][ C1] ? retint_kernel+0x2b/0x2b [ 2186.871898][ C1] ? trace_hardirqs_on+0x5e/0x240 [ 2186.877017][ C1] ? __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.882654][ C1] end_report+0x47/0x4f [ 2186.886812][ C1] ? __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.892457][ C1] __kasan_report.cold+0xe/0x41 [ 2186.897321][ C1] ? __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.902956][ C1] kasan_report+0x12/0x20 [ 2186.907292][ C1] __asan_report_load1_noabort+0x14/0x20 [ 2186.912933][ C1] __xfrm_decode_session+0x1cfb/0x2e90 [ 2186.918508][ C1] ? _crng_backtrack_protect+0xff/0x140 [ 2186.924065][ C1] vti_tunnel_xmit+0x277/0x17a0 [ 2186.928917][ C1] ? vti_rcv_tunnel+0x1a0/0x1a0 [ 2186.933779][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2186.939522][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2186.945527][ C1] dev_hard_start_xmit+0x1a3/0x9b0 [ 2186.950650][ C1] sch_direct_xmit+0x372/0xd30 09:27:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket(0x27, 0x1, 0xfe) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000001480)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x101, 0x0, [@null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @default, @default]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0xff7a) socket$kcm(0xa, 0x0, 0x11) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r3, 0x0, 0x0, 0xc1800) [ 2186.955426][ C1] ? dev_watchdog+0xca0/0xca0 [ 2186.960114][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2186.965769][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2186.971775][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2186.978018][ C1] ? sfb_dequeue+0x421/0x4d0 [ 2186.982611][ C1] __qdisc_run+0x4bf/0x1770 [ 2186.987127][ C1] __dev_queue_xmit+0x163f/0x35c0 [ 2186.992154][ C1] ? mark_held_locks+0xa4/0xf0 [ 2186.996918][ C1] ? __local_bh_enable_ip+0x15a/0x270 [ 2187.002297][ C1] ? _raw_write_unlock_bh+0x2c/0x30 [ 2187.007498][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2187.012779][ C1] ? __local_bh_enable_ip+0x100/0x270 [ 2187.018155][ C1] ? _raw_write_unlock_bh+0x2c/0x30 [ 2187.023362][ C1] ? ___neigh_create+0xdb4/0x2560 [ 2187.028376][ C1] ? mark_held_locks+0xf0/0xf0 [ 2187.033296][ C1] ? debug_smp_processor_id+0x33/0x18a [ 2187.038742][ C1] dev_queue_xmit+0x18/0x20 [ 2187.043240][ C1] ? dev_queue_xmit+0x18/0x20 [ 2187.047932][ C1] neigh_direct_output+0x16/0x20 [ 2187.052868][ C1] ip6_finish_output2+0x109a/0x25c0 [ 2187.058065][ C1] ? ip6_mtu+0x2e6/0x450 [ 2187.062311][ C1] ? ip6_frag_next+0xb20/0xb20 [ 2187.067069][ C1] ? lock_downgrade+0x920/0x920 [ 2187.071957][ C1] ? rcu_read_lock_held+0x9c/0xb0 [ 2187.076966][ C1] ? __kasan_check_read+0x11/0x20 [ 2187.082038][ C1] __ip6_finish_output+0x444/0xaa0 [ 2187.087158][ C1] ? __ip6_finish_output+0x444/0xaa0 [ 2187.092428][ C1] ip6_finish_output+0x38/0x1f0 [ 2187.097293][ C1] ip6_output+0x25e/0x880 [ 2187.101621][ C1] ? ip6_finish_output+0x1f0/0x1f0 [ 2187.106990][ C1] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2187.113146][ C1] ? __ip6_finish_output+0xaa0/0xaa0 [ 2187.118433][ C1] ? rcu_read_lock_held_common+0x130/0x130 [ 2187.124228][ C1] ndisc_send_skb+0xf1f/0x1490 [ 2187.128991][ C1] ? nf_hook.constprop.0+0x560/0x560 [ 2187.134266][ C1] ? memset+0x32/0x40 [ 2187.138233][ C1] ndisc_send_rs+0x134/0x720 [ 2187.142820][ C1] addrconf_rs_timer+0x30f/0x6e0 [ 2187.147755][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 2187.152677][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2187.158665][ C1] call_timer_fn+0x1ac/0x780 [ 2187.163239][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 2187.168158][ C1] ? msleep_interruptible+0x150/0x150 [ 2187.173523][ C1] ? run_timer_softirq+0x6b1/0x1790 [ 2187.178709][ C1] ? trace_hardirqs_on+0x67/0x240 [ 2187.183745][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 2187.188669][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 2187.193597][ C1] run_timer_softirq+0x6c3/0x1790 [ 2187.198628][ C1] ? add_timer+0x930/0x930 [ 2187.203028][ C1] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2187.209180][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2187.214709][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2187.220686][ C1] ? trace_hardirqs_on+0x67/0x240 [ 2187.225823][ C1] __do_softirq+0x262/0x98c [ 2187.230313][ C1] ? sched_clock_cpu+0x1b/0x1b0 [ 2187.235285][ C1] irq_exit+0x19b/0x1e0 [ 2187.239454][ C1] smp_apic_timer_interrupt+0x1a3/0x610 [ 2187.244987][ C1] apic_timer_interrupt+0xf/0x20 [ 2187.249903][ C1] [ 2187.252827][ C1] RIP: 0010:queue_delayed_work_on+0x12a/0x210 [ 2187.258896][ C1] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 d8 00 00 00 48 83 3d 0e f3 45 08 00 0f 84 9a 00 00 00 e8 bb b3 27 00 48 89 df 57 9d <0f> 1f 44 00 00 e8 ac b3 27 00 44 89 f8 48 83 c4 10 5b 41 5c 41 5d [ 2187.278599][ C1] RSP: 0018:ffffc900025d7be0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 2187.287025][ C1] RAX: ffff888092efe340 RBX: 0000000000000293 RCX: 0000000000000006 [ 2187.294985][ C1] RDX: 0000000000000000 RSI: ffffffff814d41d5 RDI: 0000000000000293 [ 2187.302952][ C1] RBP: ffffc900025d7c18 R08: 1ffffffff165e7a1 R09: fffffbfff165e7a2 [ 2187.310915][ C1] R10: fffffbfff165e7a1 R11: ffffffff8b2f3d0f R12: 0000000000000200 [ 2187.318889][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 2187.326872][ C1] ? queue_delayed_work_on+0x125/0x210 [ 2187.332432][ C1] srcu_reschedule+0xd7/0x130 [ 2187.337116][ C1] process_srcu+0x125/0xe10 [ 2187.341623][ C1] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2187.347779][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2187.353330][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2187.359394][ C1] ? trace_hardirqs_on+0x67/0x240 [ 2187.364508][ C1] process_one_work+0x9af/0x1740 [ 2187.369978][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2187.375460][ C1] ? lock_acquire+0x190/0x410 [ 2187.380406][ C1] worker_thread+0x98/0xe40 [ 2187.384918][ C1] kthread+0x361/0x430 [ 2187.388988][ C1] ? process_one_work+0x1740/0x1740 [ 2187.394179][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 2187.399908][ C1] ret_from_fork+0x24/0x30 [ 2187.405158][ C1] Kernel Offset: disabled [ 2187.409586][ C1] Rebooting in 86400 seconds..