000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) 15:42:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 646.748989][T24503] device bridge292 entered promiscuous mode [ 646.778915][T24505] bond183 (uninitialized): Released all slaves 15:42:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000478800ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 646.900045][T24508] bond290: (slave vlan217): making interface the new active one [ 646.916557][T24508] bond290: (slave vlan217): Enslaving as an active interface with an up link [ 646.939576][T24516] bond164 (uninitialized): Released all slaves 15:42:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) 15:42:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000004100ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 646.999421][T24526] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000488800ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 647.110228][T24527] device bridge547 entered promiscuous mode [ 647.128450][T24530] bond183 (uninitialized): Released all slaves [ 647.149185][T24535] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:08 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 647.306351][T24544] device bridge293 entered promiscuous mode [ 647.329866][T24542] bond164 (uninitialized): Released all slaves 15:42:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000004800ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:09 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 647.411773][T24547] bond291: (slave vlan218): making interface the new active one [ 647.430286][T24547] bond291: (slave vlan218): Enslaving as an active interface with an up link [ 647.464021][T24549] bond183 (uninitialized): Released all slaves [ 647.500272][T24552] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600ffffa88800ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:09 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x801, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 647.634599][T24558] device bridge548 entered promiscuous mode 15:42:09 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 647.685447][T24561] bond498: (slave vlan338): making interface the new active one 15:42:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 647.732212][T24561] bond498: (slave vlan338): Enslaving as an active interface with an up link 15:42:09 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 647.788287][T24560] bond164 (uninitialized): Released all slaves [ 647.817602][T24569] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfe0f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:09 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000004c00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600ffffff9e00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 647.891851][T24571] bond183 (uninitialized): Released all slaves 15:42:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 647.960139][T24575] device bridge294 entered promiscuous mode 15:42:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 648.019795][T24576] bond292: (slave vlan219): making interface the new active one [ 648.041430][T24576] bond292: (slave vlan219): Enslaving as an active interface with an up link 15:42:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 648.099338][T24590] bond183 (uninitialized): Released all slaves 15:42:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000017a500ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 648.139687][T24594] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) 15:42:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000006000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 648.273999][T24593] bond164 (uninitialized): Released all slaves [ 648.331960][T24606] device bridge549 entered promiscuous mode [ 648.346308][T24608] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 648.417097][T24610] bond183 (uninitialized): Released all slaves 15:42:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfeff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 648.468160][T24612] device bridge295 entered promiscuous mode [ 648.498032][T24615] bond293: (slave vlan220): making interface the new active one 15:42:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 648.511149][T24615] bond293: (slave vlan220): Enslaving as an active interface with an up link [ 648.526651][T24618] bond164 (uninitialized): Released all slaves 15:42:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000017a600ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000006400ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 648.638665][T24629] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000005cf00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 648.710307][T24631] bond183 (uninitialized): Released all slaves 15:42:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 648.799155][T24629] device bridge550 entered promiscuous mode [ 648.847404][T24647] bond183 (uninitialized): Released all slaves 15:42:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600ffffffef00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 648.961748][T24636] bond500: (slave vlan339): making interface the new active one [ 648.977634][T24636] bond500: (slave vlan339): Enslaving as an active interface with an up link 15:42:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xff0f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 649.009162][T24638] bond164 (uninitialized): Released all slaves [ 649.029443][T24646] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000586500ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 649.189275][T24650] device bridge296 entered promiscuous mode [ 649.253498][T24651] bond294: (slave vlan221): making interface the new active one [ 649.267994][T24651] bond294: (slave vlan221): Enslaving as an active interface with an up link [ 649.277772][T24653] __nla_validate_parse: 16 callbacks suppressed [ 649.277790][T24653] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600fffffff000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 649.311558][T24653] bond183 (uninitialized): Released all slaves 15:42:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xb00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 649.450801][T24665] device bridge551 entered promiscuous mode [ 649.489419][T24664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 649.511657][T24664] bond164 (uninitialized): Released all slaves 15:42:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000006800ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 649.578910][T24668] bond501: (slave vlan340): making interface the new active one [ 649.595994][T24668] bond501: (slave vlan340): Enslaving as an active interface with an up link 15:42:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xff7f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 649.686259][T24680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 649.745276][T24680] bond183 (uninitialized): Released all slaves [ 649.777733][T24682] device bridge297 entered promiscuous mode 15:42:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000007fff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 649.819959][T24685] bond295: (slave vlan222): making interface the new active one [ 649.835919][T24685] bond295: (slave vlan222): Enslaving as an active interface with an up link [ 649.851656][T24692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 649.903799][T24692] bond164 (uninitialized): Released all slaves 15:42:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xb9b, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000006c00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 650.039640][T24701] device bridge552 entered promiscuous mode [ 650.088662][T24705] bond502: (slave vlan341): making interface the new active one [ 650.111230][T24705] bond502: (slave vlan341): Enslaving as an active interface with an up link [ 650.122708][T24704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfffe, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460088a8ffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 650.149133][T24704] bond183 (uninitialized): Released all slaves [ 650.173856][T24711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 650.216548][T24711] bond164 (uninitialized): Released all slaves 15:42:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000007400ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 650.381278][T24719] device bridge298 entered promiscuous mode 15:42:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 650.451976][T24722] bond296: (slave vlan223): making interface the new active one [ 650.479340][T24722] bond296: (slave vlan223): Enslaving as an active interface with an up link 15:42:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xc00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 650.570857][T24732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) [ 650.633607][T24732] bond183 (uninitialized): Released all slaves [ 650.657645][T24744] Disabled LAPIC found during irq injection 15:42:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000e0ffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 650.706639][T24735] device bridge553 entered promiscuous mode 15:42:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 650.755851][T24734] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) [ 650.821580][T24734] bond164 (uninitialized): Released all slaves [ 650.900387][T24736] bond503: (slave vlan342): making interface the new active one [ 650.969764][T24736] bond503: (slave vlan342): Enslaving as an active interface with an up link 15:42:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3ffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000177600ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) [ 651.048668][T24747] device bridge299 entered promiscuous mode [ 651.088281][T24764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 651.119845][T24764] bond164 (uninitialized): Released all slaves [ 651.182072][T24768] Disabled LAPIC found during irq injection [ 651.211666][T24748] bond297: (slave vlan224): making interface the new active one 15:42:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000177700ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 651.229392][T24748] bond297: (slave vlan224): Enslaving as an active interface with an up link [ 651.263389][T24757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xc6e, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 651.290966][T24757] bond183 (uninitialized): Released all slaves 15:42:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546007fffffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 651.355195][T24773] validate_nla: 6 callbacks suppressed [ 651.355214][T24773] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 651.554689][T24774] device bridge554 entered promiscuous mode [ 651.557759][T24786] Disabled LAPIC found during irq injection [ 651.608397][T24777] bond504: (slave vlan343): making interface the new active one [ 651.631982][T24777] bond504: (slave vlan343): Enslaving as an active interface with an up link 15:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) 15:42:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000007a00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 651.653880][T24779] bond164 (uninitialized): Released all slaves [ 651.671982][T24784] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 651.850184][T24790] device bridge300 entered promiscuous mode [ 651.881372][T24807] Disabled LAPIC found during irq injection [ 651.881519][T24791] bond183 (uninitialized): Released all slaves 15:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) 15:42:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546009effffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 651.919100][T24794] bond298: (slave vlan225): making interface the new active one [ 651.935466][T24794] bond298: (slave vlan225): Enslaving as an active interface with an up link 15:42:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xc6f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 651.988441][T24800] bond164 (uninitialized): Released all slaves [ 652.007102][T24805] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000008100ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 652.167392][T24810] device bridge555 entered promiscuous mode [ 652.198946][T24811] bond505: (slave vlan344): making interface the new active one [ 652.213332][T24811] bond505: (slave vlan344): Enslaving as an active interface with an up link 15:42:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600efffffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 652.239966][T24815] bond183 (uninitialized): Released all slaves [ 652.256561][T24820] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 652.337817][T24826] Disabled LAPIC found during irq injection [ 652.369503][T24822] device bridge301 entered promiscuous mode [ 652.396303][T24823] bond164 (uninitialized): Released all slaves 15:42:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000008300ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 652.448099][T24825] bond299: (slave vlan226): making interface the new active one [ 652.466617][T24825] bond299: (slave vlan226): Enslaving as an active interface with an up link 15:42:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xd00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600f0ffffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 652.503492][T24830] bond183 (uninitialized): Released all slaves [ 652.529365][T24837] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 652.637117][T24847] device bridge302 entered promiscuous mode [ 652.690908][T24838] device bridge556 entered promiscuous mode [ 652.704459][T24841] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}]}}) [ 652.773788][T24843] bond164 (uninitialized): Released all slaves [ 652.805053][T24851] bond183 (uninitialized): Released all slaves 15:42:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000002000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000478800ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 652.870380][T24847] bond300: (slave vlan227): making interface the new active one [ 652.882819][T24847] bond300: (slave vlan227): Enslaving as an active interface with an up link 15:42:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xe00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 652.913831][T24859] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000488800ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 653.016257][T24863] bond164 (uninitialized): Released all slaves [ 653.049271][T24865] bond183 (uninitialized): Released all slaves 15:42:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000003000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}]}}) [ 653.099857][T24867] device bridge557 entered promiscuous mode [ 653.160587][T24877] device bridge303 entered promiscuous mode 15:42:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}]}}) [ 653.316504][T24859] bond507: (slave vlan345): making interface the new active one [ 653.351603][T24859] bond507: (slave vlan345): Enslaving as an active interface with an up link 15:42:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x1080000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 653.384296][T24873] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000004000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 653.471250][T24880] bond183 (uninitialized): Released all slaves [ 653.524833][T24878] bond164 (uninitialized): Released all slaves 15:42:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600ffffa88800ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 653.581096][T24882] bond301: (slave vlan228): making interface the new active one 15:42:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}]}}) [ 653.625663][T24882] bond301: (slave vlan228): Enslaving as an active interface with an up link [ 653.669964][T24895] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 653.811113][T24900] device bridge558 entered promiscuous mode 15:42:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}]}}) [ 653.876902][T24905] bond508: (slave vlan346): making interface the new active one [ 653.894121][T24905] bond508: (slave vlan346): Enslaving as an active interface with an up link [ 653.909933][T24904] bond183 (uninitialized): Released all slaves 15:42:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000005000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 653.958211][T24907] bond164 (uninitialized): Released all slaves 15:42:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600ffffff9e00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 654.001743][T24916] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}]}}) [ 654.108403][T24917] device bridge304 entered promiscuous mode [ 654.144613][T24919] bond302: (slave vlan229): making interface the new active one [ 654.158958][T24919] bond302: (slave vlan229): Enslaving as an active interface with an up link [ 654.172419][T24928] bond183 (uninitialized): Released all slaves 15:42:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffe, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000006000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:15 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r0) 15:42:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 654.357335][T24932] device bridge559 entered promiscuous mode [ 654.377671][T24936] __nla_validate_parse: 15 callbacks suppressed [ 654.377689][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:16 executing program 3: syz_open_dev$vim2m(&(0x7f0000000cc0), 0x0, 0x2) [ 654.441386][T24936] bond164 (uninitialized): Released all slaves 15:42:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000cb00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 654.518110][T24950] Disabled LAPIC found during irq injection 15:42:16 executing program 3: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) [ 654.565734][T24939] bond509: (slave vlan347): making interface the new active one [ 654.581599][T24939] bond509: (slave vlan347): Enslaving as an active interface with an up link 15:42:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 654.625062][T24945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 654.643262][T24945] bond183 (uninitialized): Released all slaves 15:42:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000007000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:16 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) [ 654.735190][T24946] device bridge305 entered promiscuous mode 15:42:16 executing program 3: add_key$keyring(&(0x7f0000003680), 0x0, 0x0, 0x0, 0xfffffffffffffff9) [ 654.794011][T24947] bond303: (slave vlan230): making interface the new active one [ 654.813042][T24947] bond303: (slave vlan230): Enslaving as an active interface with an up link [ 654.853285][T24957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 654.859925][T24963] Disabled LAPIC found during irq injection [ 654.886677][T24957] bond164 (uninitialized): Released all slaves 15:42:16 executing program 3: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="b3", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0xee01) keyctl$setperm(0x5, r0, 0x35002002) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 15:42:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x1100, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 654.916551][T24966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600ffffffef00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 654.964664][T24966] bond183 (uninitialized): Released all slaves 15:42:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000008000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f0000001200)={[{@fat=@sys_immutable}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@rodir}, {@utf8no}], [{@euid_lt}]}) [ 655.167213][T24970] device bridge560 entered promiscuous mode [ 655.205445][T24989] Disabled LAPIC found during irq injection [ 655.249861][T24992] FAT-fs (loop3): Unrecognized mount option "euid<00000000000000000000" or missing value [ 655.253279][T24973] bond510: (slave vlan348): making interface the new active one [ 655.287227][T24973] bond510: (slave vlan348): Enslaving as an active interface with an up link 15:42:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3cf86ac, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}], 0x2, &(0x7f00000017c0)=""/206, 0xce}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001980), r0) [ 655.491787][T24982] device bridge306 entered promiscuous mode [ 655.538295][T24986] bond304: (slave vlan231): making interface the new active one [ 655.548458][T24998] Disabled LAPIC found during irq injection [ 655.554310][T24986] bond304: (slave vlan231): Enslaving as an active interface with an up link [ 655.576514][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x1200, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 655.595526][T24984] bond164 (uninitialized): Released all slaves [ 655.612091][T24988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600fffffff000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000009000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 655.645463][T24988] bond183 (uninitialized): Released all slaves [ 655.750776][T24997] device bridge561 entered promiscuous mode [ 655.800125][T25013] Disabled LAPIC found during irq injection [ 655.838613][T25001] bond511: (slave vlan349): making interface the new active one 15:42:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 655.853132][T25001] bond511: (slave vlan349): Enslaving as an active interface with an up link [ 655.888978][T25010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 655.956803][T25010] bond164 (uninitialized): Released all slaves 15:42:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000005fd00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 655.997632][T25011] device bridge307 entered promiscuous mode [ 656.048402][T25021] Disabled LAPIC found during irq injection [ 656.049496][T25025] device bridge562 entered promiscuous mode [ 656.082192][T25016] bond305: (slave vlan232): making interface the new active one 15:42:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x1800, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 656.098058][T25016] bond305: (slave vlan232): Enslaving as an active interface with an up link [ 656.108867][T25017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 656.121105][T25017] bond183 (uninitialized): Released all slaves 15:42:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000a000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 656.240371][T25027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 656.261109][T25027] bond164 (uninitialized): Released all slaves 15:42:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000007fff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:17 executing program 3: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="b3", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$chown(0x4, r0, 0xee01, 0x0) [ 656.301379][T25028] bond512: (slave vlan350): making interface the new active one [ 656.317206][T25028] bond512: (slave vlan350): Enslaving as an active interface with an up link 15:42:18 executing program 3: syz_mount_image$udf(0x0, 0x0, 0x0, 0x2, &(0x7f0000003500)=[{&(0x7f0000002440)="cf", 0x1}, {&(0x7f0000002480)="04", 0x1, 0x140000000}], 0x0, 0x0) 15:42:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x5000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt(r0, 0x6, 0x0, 0x0, &(0x7f0000001000)) [ 656.465211][T25047] loop3: detected capacity change from 0 to 264192 15:42:18 executing program 3: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f00000001c0)={0x0}) r0 = eventfd2(0x9ac, 0x80801) read$eventfd(r0, &(0x7f0000000e80), 0x8) 15:42:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 656.554709][T25038] device bridge308 entered promiscuous mode [ 656.575010][T25039] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:18 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x14) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) [ 656.613066][T25039] bond183 (uninitialized): Released all slaves 15:42:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7}, 0xe) [ 656.708990][T25043] bond306: (slave vlan233): making interface the new active one [ 656.827392][T25043] bond306: (slave vlan233): Enslaving as an active interface with an up link [ 656.858359][T25046] bond164 (uninitialized): Released all slaves 15:42:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000b000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:18 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000004bc0)=[{&(0x7f0000003880)="b4aec2a421fa6c6a0448a7fcd2e199fdeb3c895a07fa957a22f58ddd961ff07f62a3076a8280b95b09c4967a1d8113c6cae80440dde714cb8440287ffd7c02af6f8e72354c15f6c767ff0d46e81a90d610c32b8410ece4c1d018537693ee32c4bea38ea582842cd88793493ed898f52a767084fcd45ad872fa0b56be8f43d98932", 0x81}], 0x0, 0x0) [ 656.915237][T25051] validate_nla: 8 callbacks suppressed [ 656.915253][T25051] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460088a8ffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 657.038500][T25055] device bridge563 entered promiscuous mode 15:42:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x6, 0x0, &(0x7f0000000040)) [ 657.161548][T25059] bond513: (slave vlan351): making interface the new active one [ 657.178659][T25059] bond513: (slave vlan351): Enslaving as an active interface with an up link [ 657.207253][T25067] bond183 (uninitialized): Released all slaves [ 657.232358][T25075] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000000)={0x17}, 0x0, 0x0, &(0x7f0000002fc0)={0x0, 0x3938700}, 0x0) 15:42:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000c000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 657.381331][T25077] device bridge309 entered promiscuous mode [ 657.414905][T25076] bond164 (uninitialized): Released all slaves 15:42:19 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000004bc0)=[{&(0x7f0000003b80)="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", 0xff8, 0x9}], 0x0, 0x0) 15:42:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000e0ffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x2100, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 657.501242][T25080] bond307: (slave vlan234): making interface the new active one [ 657.514145][T25080] bond307: (slave vlan234): Enslaving as an active interface with an up link [ 657.528680][T25089] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 657.599026][T25099] loop3: detected capacity change from 0 to 8 [ 657.638465][T25087] bond183 (uninitialized): Released all slaves 15:42:19 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x14) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xc1d1}, 0x1c, 0x0}}], 0x1, 0x0) [ 657.688558][T25093] device bridge564 entered promiscuous mode 15:42:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000d000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 657.764128][T25094] bond514: (slave vlan352): making interface the new active one [ 657.781847][T25094] bond514: (slave vlan352): Enslaving as an active interface with an up link 15:42:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x7000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 657.810519][T25098] bond164 (uninitialized): Released all slaves 15:42:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546007fffffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 657.849510][T25102] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x1}, 0x2) 15:42:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:19 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x0, 0x0, &(0x7f0000003500), 0x0, &(0x7f0000003580)={[{@iocharset={'iocharset', 0x3d, 'iso8859-13'}}], [{@smackfsdef={'smackfsdef', 0x3d, '!'}}, {@smackfsroot={'smackfsroot', 0x3d, 'shortname=mixed'}}, {@subj_user={'subj_user', 0x3d, '$){'}}]}) statx(0xffffffffffffffff, &(0x7f00000062c0)='./file0\x00', 0x100, 0x0, &(0x7f0000006300)) [ 658.033843][T25119] bond164 (uninitialized): Released all slaves 15:42:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546009effffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 658.094651][T25126] UDF-fs: bad mount option "subj_user=$){" or missing value [ 658.109794][T25106] device bridge310 entered promiscuous mode 15:42:19 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) [ 658.155290][T25107] bond308: (slave vlan235): making interface the new active one [ 658.168428][T25107] bond308: (slave vlan235): Enslaving as an active interface with an up link [ 658.192462][T25109] bond183 (uninitialized): Released all slaves 15:42:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000e000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x2500, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 658.220467][T25115] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) [ 658.396317][T25121] device bridge565 entered promiscuous mode [ 658.451913][T25123] bond515: (slave vlan353): making interface the new active one [ 658.467790][T25123] bond515: (slave vlan353): Enslaving as an active interface with an up link 15:42:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) [ 658.492237][T25132] bond164 (uninitialized): Released all slaves 15:42:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600efffffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 658.549878][T25135] bond183 (uninitialized): Released all slaves 15:42:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000022, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x0, 0x0, &(0x7f0000003500), 0x2404, &(0x7f0000003580)) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:42:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000f000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 658.617723][T25139] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 15:42:20 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x14) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xc1d1}, 0x1c, 0x0, 0x0, &(0x7f0000001880)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 658.769480][T25142] device bridge311 entered promiscuous mode [ 658.794131][T25150] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:20 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000009540)='/proc/sysvipc/msg\x00', 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 15:42:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x2f00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600f0ffffff00ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 658.907065][T25152] bond164 (uninitialized): Released all slaves [ 658.939170][T25155] device bridge566 entered promiscuous mode 15:42:20 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 15:42:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x9000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 659.029249][T25159] bond516: (slave vlan354): making interface the new active one [ 659.045823][T25159] bond516: (slave vlan354): Enslaving as an active interface with an up link [ 659.069939][T25158] bond183 (uninitialized): Released all slaves 15:42:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000010000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:20 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) fstat(r0, &(0x7f00000000c0)) [ 659.128692][T25170] bond164 (uninitialized): Released all slaves [ 659.161619][T25172] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000002000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000240)='./file0\x00', 0x19) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="a124a5dbbcd684c7562f87955612adba2eda5cfb3bb2f25e2cbcc622be1a5ec61fc8e1ed860c889c0032a58a6d33e76f8d9611fa3069a2c95ababa766e95a9f18c502b92995488ea4cd9e6c9162cbd47013c0c06dfb66d938f8c63df58cffa8a5c84a07d66a6f0f49ad45cc3771792e8121f8cc89ff46408b44d4e06800babb50607534b4a7de2a0717243899df53a023f2b7ceeb1abc62350dd51a4c1004a56ded8d9847841a924855ecea904fc25f6f55422e410683b3cf75a314bf0621a67c775f840630ff530860d8dde10f6d42bb905"], 0x141) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}, 0x4088, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 659.334059][T25174] device bridge312 entered promiscuous mode 15:42:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 659.437487][T25179] bond310: (slave vlan236): making interface the new active one [ 659.464956][T25179] bond310: (slave vlan236): Enslaving as an active interface with an up link [ 659.479059][T25180] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3a00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 659.537564][T25182] __nla_validate_parse: 12 callbacks suppressed [ 659.537583][T25182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 659.582102][T25182] bond183 (uninitialized): Released all slaves [ 659.606547][T25185] device bridge567 entered promiscuous mode 15:42:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000011000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 659.623951][T25188] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 659.662351][T25188] bond164 (uninitialized): Released all slaves 15:42:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000003000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 659.816046][T25192] bond517: (slave vlan355): making interface the new active one [ 659.840990][T25192] bond517: (slave vlan355): Enslaving as an active interface with an up link 15:42:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 659.859434][T25204] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xa000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 659.974637][T25205] device bridge313 entered promiscuous mode [ 660.021107][T25207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 660.070628][T25207] bond183 (uninitialized): Released all slaves 15:42:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:21 executing program 3: socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, &(0x7f0000000180), 0x0) 15:42:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000012000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt(r0, 0x6, 0x3, 0x0, &(0x7f0000001000)) [ 660.221846][T25209] bond311: (slave vlan237): making interface the new active one [ 660.258085][T25209] bond311: (slave vlan237): Enslaving as an active interface with an up link [ 660.281511][T25214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3f00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) [ 660.329554][T25214] bond164 (uninitialized): Released all slaves 15:42:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() getrlimit(0x0, 0x0) sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000180)={0xff, 0x9}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$security_capability(r1, &(0x7f00000002c0), 0x0, 0x0, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x14, 0x7, 0x0, 0x6, 0x0, 0x3, 0xffffffcb}, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x8000, 0x1, 0x40000, 0xe}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa8f, 0x0, 0x0, 0x100}) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x1, 0x0, 0x8000, 0x4, 0x9, 0x0, 0x8001, 0x0, 0x8}, 0x0) 15:42:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000004000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 660.508084][T25223] device bridge568 entered promiscuous mode [ 660.536366][T25224] bond518: (slave vlan356): making interface the new active one [ 660.551195][T25224] bond518: (slave vlan356): Enslaving as an active interface with an up link [ 660.561988][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 660.574042][T25229] bond183 (uninitialized): Released all slaves 15:42:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xb000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000018000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x3f}]}}) [ 660.709802][T25244] device bridge314 entered promiscuous mode [ 660.796422][T25246] bond312: (slave vlan238): making interface the new active one [ 660.810367][T25246] bond312: (slave vlan238): Enslaving as an active interface with an up link [ 660.821337][T25250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x3f}]}}) [ 660.858496][T25250] bond164 (uninitialized): Released all slaves 15:42:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000005000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 660.958039][T25258] device bridge569 entered promiscuous mode [ 660.980398][T25259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 661.002593][T25259] bond183 (uninitialized): Released all slaves 15:42:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000021000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 661.072351][T25261] bond519: (slave vlan357): making interface the new active one [ 661.098707][T25261] bond519: (slave vlan357): Enslaving as an active interface with an up link 15:42:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xc000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x3f}]}}) [ 661.128844][T25271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 661.141490][T25271] bond164 (uninitialized): Released all slaves 15:42:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000006000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() getrlimit(0x0, 0x0) sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000180)={0xff, 0x9}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$security_capability(r1, &(0x7f00000002c0), 0x0, 0x0, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x14, 0x7, 0x0, 0x6, 0x0, 0x3, 0xffffffcb}, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x8000, 0x1, 0x40000, 0xe}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa8f, 0x0, 0x0, 0x100}) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x1, 0x0, 0x8000, 0x4, 0x9, 0x0, 0x8001, 0x0, 0x8}, 0x0) [ 661.256430][T25283] device bridge570 entered promiscuous mode [ 661.278720][T25274] device bridge315 entered promiscuous mode [ 661.337917][T25275] bond313: (slave vlan239): making interface the new active one [ 661.361205][T25275] bond313: (slave vlan239): Enslaving as an active interface with an up link [ 661.396283][T25279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 661.409229][T25279] bond183 (uninitialized): Released all slaves 15:42:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000025000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4002, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 661.468251][T25285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 661.521067][T25285] bond164 (uninitialized): Released all slaves 15:42:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000007000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 661.611570][T25283] bond520: (slave vlan358): making interface the new active one [ 661.625708][T25283] bond520: (slave vlan358): Enslaving as an active interface with an up link 15:42:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xd000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600002f000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 661.736819][T25294] bond183 (uninitialized): Released all slaves [ 661.767773][T25302] device bridge316 entered promiscuous mode 15:42:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) [ 661.810028][T25305] bond164 (uninitialized): Released all slaves 15:42:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000008000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 661.950418][T25306] bond314: (slave vlan240): making interface the new active one [ 661.979045][T25306] bond314: (slave vlan240): Enslaving as an active interface with an up link 15:42:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x9}]}}) 15:42:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4100, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 662.001020][T25310] validate_nla: 6 callbacks suppressed [ 662.001037][T25310] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 662.121344][T25313] device bridge571 entered promiscuous mode 15:42:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() getrlimit(0x0, 0x0) sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000180)={0xff, 0x9}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$security_capability(r1, &(0x7f00000002c0), 0x0, 0x0, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x14, 0x7, 0x0, 0x6, 0x0, 0x3, 0xffffffcb}, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x8000, 0x1, 0x40000, 0xe}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa8f, 0x0, 0x0, 0x100}) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x1, 0x0, 0x8000, 0x4, 0x9, 0x0, 0x8001, 0x0, 0x8}, 0x0) [ 662.301705][T25316] bond521: (slave vlan359): making interface the new active one [ 662.326302][T25316] bond521: (slave vlan359): Enslaving as an active interface with an up link [ 662.345614][T25315] bond183 (uninitialized): Released all slaves 15:42:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"9206332267b324550d1299b9e394142127831144974041714f7d8860f1c6edd2af79e7b51265a5cd63c46c7e0b0952db37ac7ed12d35ab95d9671f34197522c65fbe1849dcb132947ca380a320c5a7764e2db6321e86b3c78edf308fb746d3cd777e45e654d26734fbc5fddb67e1547da4fbb2f5b079558baaca7538bf575b07718a43427120d02b834b44368c194d20afdedeeb94e6fa47d43892b073317e6e820e9c41717e7f7a288fecb4d48ef133674cb8e9f5db1267803a805525f647cccea1b5fe0ca9d247133eb76a25ac0b13ed13737630df2706427bd65bffe2599d60f2d64064f5acaaad000b38c9aaa264c0673e31f55b7c9a7f633be333eb207a2defcce171822c47ddc4fb6991e026bfe736577ab4efbe977b9b889a3828e89b50ee57e31dd3810215492b8b714eddbead002bd1fe1bbd27921fafee3e4e20bae3e3468124cd9f6f74a55987a72384cd2dbe3d8bb3ccf878712e3acb829809d276c64f182a247dfa88c44b7905b70f92ab6775b2c23772253a2852e896de0e40fa89de91f9c71afc826ca01b298e8e5103ab7382c7beef7f924471a47b772762782472c0cbf24099f252e5f3d005b188d5fbf222b1135120c3cb9f5781a174a1c8a32a6d963402c1720178b9aa7298b12b8b6b9e639f24ee90029cbefc8edf700cdb7f79553fab3ad50f54fc5ccad87ed101a4d7461494ebcc5c284f979d07fb5c5f7889dd304e0ab74a7bd5826ba252bd0b7a60f96d5f0240b2d79059f418d59289b0cd4a3db2e7d0d57bd8d867a2ac0672f8b05a06921e9a7e448d547661daa26abe2401cdc53c87d4005490c2fe94b4d838759d4b08ebba7edda3b5878817d460e1a43ed822068a0ae81e5f97b93156870ae7586b96cc7811243c40f389bf0c931d87186805d5eaa6a75df1e8ba45ed795b0cc6a45cf463a1a0b9914b54ed0f1bf54f33fa536b2312e8926922ee768f2e5791467fb9cf7823e19d3aa3d329071ae147f518474ce5c0a60739d51e189c7b99dbe6ecc0ac8be73938110579093b6ecedcbe33caa839d53829d849af8e4eebc613604f867f7367c0c72dda395b8c6d431656c58fbd7bb811fddd89d06e4815496e65ef98ce4438a0a1ccc93771f3730a8609ccb57341f71dfc3c650805e80500e1ad7243f562a6317bba3104039eddb25ca507b13f1fa6b60e38f7da2241e09cb4807e68459fc3b73440b13c2c8380b9aaf8ca92e5afb6e86e84db466f4d2bda9593fd709ea113a5204647320a1fad6a28bbd96eac16a49d958a1eb236bf38651ca2d68f97f59995e5ac12a39e2933fa7fd96514d199bc2948dd161882ac4ca7a81c2c72c49a5ede6a2a72f4643cdf4682b5c4794293c39de7544a367f917ccda47e673e817537a93de6471619a17a0c92a300e842182c0362c69f567db5aff1959baeb35cedab79b3a0ffab27"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x344daeb9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0x3f}]}}) 15:42:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xe000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600003a000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000009000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 662.392206][T25320] bond164 (uninitialized): Released all slaves [ 662.428309][T25326] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 662.537048][T25327] device bridge317 entered promiscuous mode 15:42:24 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000008480)='syz1\x00', 0x200002, 0x0) 15:42:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4788, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 662.598497][T25330] bond315: (slave vlan241): making interface the new active one [ 662.617067][T25330] bond315: (slave vlan241): Enslaving as an active interface with an up link 15:42:24 executing program 1: statx(0xffffffffffffffff, &(0x7f00000062c0)='./file0\x00', 0x0, 0x0, 0x0) [ 662.714933][T25341] bond164 (uninitialized): Released all slaves [ 662.748128][T25344] bond183 (uninitialized): Released all slaves 15:42:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000a000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000041000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) [ 662.774371][T25345] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 662.891422][T25346] device bridge572 entered promiscuous mode [ 662.925292][T25348] bond522: (slave vlan360): making interface the new active one 15:42:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000008880)={0x0, 0x0, 0x0}, 0x0) [ 662.938800][T25348] bond522: (slave vlan360): Enslaving as an active interface with an up link [ 662.950366][T25352] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 663.081769][T25357] device bridge318 entered promiscuous mode [ 663.100439][T25359] bond183 (uninitialized): Released all slaves [ 663.148764][T25361] bond316: (slave vlan242): making interface the new active one [ 663.169361][T25361] bond316: (slave vlan242): Enslaving as an active interface with an up link [ 663.187093][T25362] bond164 (uninitialized): Released all slaves 15:42:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() getrlimit(0x0, 0x0) sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000180)={0xff, 0x9}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$security_capability(r1, &(0x7f00000002c0), 0x0, 0x0, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x14, 0x7, 0x0, 0x6, 0x0, 0x3, 0xffffffcb}, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x8000, 0x1, 0x40000, 0xe}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa8f, 0x0, 0x0, 0x100}) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x1, 0x0, 0x8000, 0x4, 0x9, 0x0, 0x8001, 0x0, 0x8}, 0x0) 15:42:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) 15:42:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000048000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4800, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000b000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 663.314257][T25374] bond183 (uninitialized): Released all slaves 15:42:24 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/keys\x00', 0x0, 0x0) 15:42:24 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0), &(0x7f0000002140)={0x0}) [ 663.355845][T25376] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x400c0c0, 0x0, 0x0) 15:42:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600004c000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:25 executing program 1: accept4(0xffffffffffffffff, 0x0, 0x0, 0xc00) [ 663.475712][T25377] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:25 executing program 1: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000094c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 663.662440][T25382] device bridge573 entered promiscuous mode [ 663.715748][T25387] device bridge319 entered promiscuous mode [ 663.737097][T25386] bond164 (uninitialized): Released all slaves [ 663.798506][T25389] bond523: (slave vlan361): making interface the new active one [ 663.812476][T25389] bond523: (slave vlan361): Enslaving as an active interface with an up link [ 663.857823][T25394] bond317: (slave vlan243): making interface the new active one [ 663.890646][T25394] bond317: (slave vlan243): Enslaving as an active interface with an up link [ 663.914843][T25398] bond183 (uninitialized): Released all slaves 15:42:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000060000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000c000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:25 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x24) 15:42:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x10000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) 15:42:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4888, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0xa}, 0x98) [ 664.190044][T25409] bond164 (uninitialized): Released all slaves 15:42:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000d000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000064000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 664.232851][T25415] bond183 (uninitialized): Released all slaves [ 664.253516][T25413] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) 15:42:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000008880)={0x0, 0x0, &(0x7f0000008840)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000008880)={0x0, 0x0, &(0x7f0000008840)={0x0}}, 0x0) 15:42:25 executing program 1: r0 = inotify_init() sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0x0) [ 664.371358][T25411] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:26 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) [ 664.451904][T25420] device bridge574 entered promiscuous mode [ 664.487418][T25421] device bridge320 entered promiscuous mode 15:42:26 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x17, {0xa, 0x0, 0x0, @empty}}, 0x24) [ 664.557306][T25423] bond524: (slave vlan362): making interface the new active one [ 664.572195][T25423] bond524: (slave vlan362): Enslaving as an active interface with an up link 15:42:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x11000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:26 executing program 3: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8937, &(0x7f0000000080)={'gre0\x00', 0x0}) [ 664.624192][T25426] bond318: (slave vlan244): making interface the new active one 15:42:26 executing program 1: r0 = socket(0x18, 0x0, 0x0) connect$ax25(r0, 0x0, 0x0) [ 664.728205][T25426] bond318: (slave vlan244): Enslaving as an active interface with an up link [ 664.767566][T25429] __nla_validate_parse: 13 callbacks suppressed 15:42:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4a00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) [ 664.767585][T25429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 664.804906][T25429] bond164 (uninitialized): Released all slaves [ 664.832332][T25430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 664.865667][T25430] bond183 (uninitialized): Released all slaves 15:42:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000e000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000068000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 664.913799][T25443] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) 15:42:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000000000)={0xc8, 0x0, 0x0, 0x0, 0x0, "", [@generic="01576bd7a6687756d70fa1f8425f40469839264e27797a5194dbd5ba7af0b96dd3b11fc633ee3f969d78202321c9b973adc6c7c8d1be8cb868c67fdb7af613fe046b6bead67143d3ead459020c9d35f15f7da67a38f8160d69ac3ef87f08515229b071040262a4841e95e752abebb15f43e970b949ad353b75894e4393d645d8808ccd8fa022e0f53352bd6b84a6ed60b70d9e814487f1ed1f062e999f1612174145d7f5270592e10e9de34216cd39f652183bbb27"]}, 0xc8}, {&(0x7f0000000180)={0xdfc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x241, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="5b557377aac0f7a513d204e47f32a9c952b569824e6ceb98cbb2c51fa666750a421cc1c73d289f13530d76800fc174993855ea55eeb54131f8e2460f5903a04e33968536bdd4b2dcd2ac5ba562171f77a4787b2cfd77c611aa587586abec74aa2cd3819c6f485f91c3e5ce3d49aa26619e06583141ad3ef0e9baee58272bc1f0f46fc98c1ce7a427010d593d974a1e932dce6c2bb578a0e79743bb1aa3ff6c175bf5f732681af95ad88e606aac451a1a8c465839ed0dd53e40e0a8a2b333", @generic="ef6211024e5447ba381a3bd9d0fa022e8b593e03c15f6445423b859f4f9c11177c0087d7d084f01b30a71d90e7d33694d123f32e96d1e363557456e9a2fc9c558b272991c6a486e9e0df5da224339fb2472cd244b91490f3a6c0731e2489c9eb5b7ce903fa53bda3322cad4bfa625861ab4a1b053f77801857f2cdeb9582ea302eec78f2e2f8003fe1953ff9815d7817649f4759c0c83497ce828c2782f1d778fce452d265ef1ce8bafa6dc90b2cbb4265facfc4e8c3b1269ebb89b7", @generic="344f261f6530edd48d62da1179f0e4359eba36915ddb745d8fc78d34b78d5e1d97993a570127bb74d26b9cbd2641345e76d89c716a613007c385cc59eab4966d443cb85d3b4fb1595cd5c7fa4d9fe50cc4a55f1c5aaf838fbd44865dcfb015d382ba58e9df25a154989700a709453cfdc9241a81cb5fc2720f215f41bca7faeb77d9a9191b3328b3f20139b66cb7dcf3ee6dc6e3", @generic="ff766dae70a99cd9dda86e80a204a4b0206c780563664ab4bb155fb195fe29", @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0xb95, 0x0, 0x0, 0x1, [@generic="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"]}]}, 0xdfc}], 0x2}, 0x0) [ 665.019588][T25447] device bridge575 entered promiscuous mode 15:42:26 executing program 3: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, &(0x7f0000000080)={'gre0\x00', 0x0}) 15:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 665.086728][T25450] bond525: (slave vlan363): making interface the new active one [ 665.103341][T25450] bond525: (slave vlan363): Enslaving as an active interface with an up link [ 665.112451][T25456] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x12000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) [ 665.260381][T25458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 665.284022][T25458] bond164 (uninitialized): Released all slaves 15:42:26 executing program 3: r0 = socket(0x18, 0x0, 0x1) recvmsg$can_bcm(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 15:42:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000f000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 665.339227][T25460] device bridge321 entered promiscuous mode [ 665.440817][T25463] bond319: (slave vlan245): making interface the new active one [ 665.467932][T25463] bond319: (slave vlan245): Enslaving as an active interface with an up link [ 665.478076][T25462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='P', 0x1}], 0xf}, 0x0) 15:42:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600006c000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 665.496352][T25462] bond183 (uninitialized): Released all slaves [ 665.576467][T25478] device bridge576 entered promiscuous mode [ 665.606500][T25479] bond526: (slave vlan364): making interface the new active one 15:42:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_tcp_buf(r0, 0x29, 0x2, 0x0, 0x7) [ 665.626766][T25479] bond526: (slave vlan364): Enslaving as an active interface with an up link [ 665.639049][T25482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f0000000180)={'wlan0\x00'}) 15:42:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x18000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000010000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 665.679699][T25482] bond164 (uninitialized): Released all slaves [ 665.706510][T25491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:27 executing program 3: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, &(0x7f0000000080)={'gre0\x00', 0x0}) 15:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x13, r1, 0x1abd501bb85a86a3, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) [ 665.771075][T25491] bond183 (uninitialized): Released all slaves 15:42:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000074000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0x49}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) [ 665.890577][T25504] device bridge577 entered promiscuous mode 15:42:27 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) [ 666.000165][T25497] device bridge322 entered promiscuous mode 15:42:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x5202, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:27 executing program 1: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8921, &(0x7f0000000080)={'gre0\x00', 0x0}) [ 666.107868][T25502] bond320: (slave vlan246): making interface the new active one [ 666.122062][T25502] bond320: (slave vlan246): Enslaving as an active interface with an up link [ 666.134122][T25505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 666.148216][T25505] bond164 (uninitialized): Released all slaves 15:42:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000011000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private0}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x3c) 15:42:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x20000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 666.231095][T25507] bond527: (slave vlan365): making interface the new active one [ 666.248003][T25507] bond527: (slave vlan365): Enslaving as an active interface with an up link 15:42:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600007a000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 666.310877][T25526] device bridge323 entered promiscuous mode [ 666.321715][T25511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 666.344975][T25511] bond183 (uninitialized): Released all slaves 15:42:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, 0x0) 15:42:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) [ 666.415456][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 666.465044][T25525] bond164 (uninitialized): Released all slaves 15:42:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000012000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x15, 0x8, 0xfff}, 0x40) 15:42:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x13, r1, 0x1abd501bb85a84a3, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) [ 666.577038][T25529] bond321: (slave vlan247): making interface the new active one [ 666.594038][T25529] bond321: (slave vlan247): Enslaving as an active interface with an up link 15:42:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x5865, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000083000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 666.721204][T25535] device bridge578 entered promiscuous mode [ 666.731873][T25536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 666.749922][T25536] bond183 (uninitialized): Released all slaves [ 666.799799][T25539] bond528: (slave vlan366): making interface the new active one [ 666.832143][T25539] bond528: (slave vlan366): Enslaving as an active interface with an up link 15:42:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x21000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 666.845318][T25544] bond164 (uninitialized): Released all slaves 15:42:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000018000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 666.945179][T25553] device bridge324 entered promiscuous mode [ 667.003651][T25554] bond322: (slave vlan248): making interface the new active one [ 667.016436][T25554] bond322: (slave vlan248): Enslaving as an active interface with an up link [ 667.027356][T25556] bond183 (uninitialized): Released all slaves [ 667.058416][T25560] bond164 (uninitialized): Released all slaves 15:42:28 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) 15:42:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0x3c}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 15:42:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000030000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 667.099146][T25562] validate_nla: 6 callbacks suppressed [ 667.099162][T25562] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 15:42:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000021000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:28 executing program 1: sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:42:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0x2a}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) [ 667.214579][T25564] device bridge579 entered promiscuous mode 15:42:28 executing program 1: socket$phonet(0x23, 0x2, 0x1) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, &(0x7f00000000c0)={0x101}, &(0x7f0000000140), 0x0) 15:42:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x890b, 0x0) [ 667.426406][T25566] bond529: (slave vlan367): making interface the new active one [ 667.488286][T25566] bond529: (slave vlan367): Enslaving as an active interface with an up link [ 667.499702][T25573] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x25000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:29 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000040)) 15:42:29 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x4b, 0x0, 0x7) 15:42:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000050000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 667.563879][T25575] bond183 (uninitialized): Released all slaves [ 667.647293][T25578] device bridge325 entered promiscuous mode [ 667.694818][T25582] bond164 (uninitialized): Released all slaves [ 667.748673][T25583] bond323: (slave vlan249): making interface the new active one [ 667.762335][T25583] bond323: (slave vlan249): Enslaving as an active interface with an up link [ 667.774325][T25599] bond183 (uninitialized): Released all slaves 15:42:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6558, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:29 executing program 1: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000080)={'gre0\x00', 0x0}) 15:42:29 executing program 3: r0 = socket(0x2, 0x3, 0xa) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 15:42:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000025000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x5c22b2fc28181aa7, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) [ 667.797733][T25597] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000cf050000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:29 executing program 1: socket$phonet(0x23, 0x2, 0x1) clock_gettime(0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) 15:42:29 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2d, 0x0, 0x0, @empty}}, 0x24) [ 667.988844][T25601] device bridge580 entered promiscuous mode [ 668.044421][T25602] bond530: (slave vlan368): making interface the new active one [ 668.060141][T25602] bond530: (slave vlan368): Enslaving as an active interface with an up link [ 668.081672][T25609] bond164 (uninitialized): Released all slaves 15:42:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x2f000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 15:42:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600002f000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 668.096121][T25612] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600003a000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 668.210477][T25629] bond164 (uninitialized): Released all slaves [ 668.238782][T25615] device bridge326 entered promiscuous mode [ 668.310461][T25620] bond324: (slave vlan250): making interface the new active one [ 668.326387][T25620] bond324: (slave vlan250): Enslaving as an active interface with an up link [ 668.339456][T25616] bond183 (uninitialized): Released all slaves [ 668.358644][T25628] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6800, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:30 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x4e, 0x0, 0x7) 15:42:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 15:42:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000060000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 668.407533][T25632] device bridge581 entered promiscuous mode [ 668.443245][T25635] bond164 (uninitialized): Released all slaves 15:42:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001b80)={&(0x7f00000006c0)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000000400000000000000000000000000ffffac1414aa", @ANYRES32=0x0, @ANYBLOB="0000000028000000000000002900000037000000040100000000000005020020040101c2040000000000000014000000000000002900000008000000000000000000000088000000000000002900000036"], 0xf0}, 0x0) 15:42:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000080)) 15:42:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000041000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x4, 0x0, 0x7) [ 668.601361][T25636] bond531: (slave vlan369): making interface the new active one [ 668.681226][T25636] bond531: (slave vlan369): Enslaving as an active interface with an up link [ 668.710315][T25647] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3a000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:30 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 15:42:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 15:42:30 executing program 3: r0 = epoll_create(0x7) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x7fffffff) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x1f, 0x0, 0x0) [ 668.806700][T25650] device bridge327 entered promiscuous mode [ 668.819336][T25646] bond183 (uninitialized): Released all slaves [ 668.860324][T25653] bond325: (slave vlan251): making interface the new active one [ 668.887077][T25653] bond325: (slave vlan251): Enslaving as an active interface with an up link [ 668.901947][T25657] bond164 (uninitialized): Released all slaves 15:42:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6c00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000070000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000048000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 668.934337][T25664] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@dontfrag={{0x14}}], 0x18}, 0x0) [ 669.017313][T25667] device bridge582 entered promiscuous mode 15:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0x4d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 15:42:30 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x42, 0x0, 0x7) [ 669.165587][T25671] bond532: (slave vlan370): making interface the new active one [ 669.179176][T25671] bond532: (slave vlan370): Enslaving as an active interface with an up link [ 669.189415][T25675] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 669.231654][T25673] bond183 (uninitialized): Released all slaves 15:42:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000090000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x9, 0x2}, @val={0xc}}}}, 0x28}}, 0x0) [ 669.281787][T25677] device bridge328 entered promiscuous mode [ 669.349534][T25681] bond326: (slave vlan252): making interface the new active one [ 669.365324][T25681] bond326: (slave vlan252): Enslaving as an active interface with an up link [ 669.379774][T25679] bond164 (uninitialized): Released all slaves 15:42:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600004c000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6e0c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 669.409532][T25688] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 669.488511][T25691] device bridge583 entered promiscuous mode [ 669.524427][T25696] bond533: (slave vlan371): making interface the new active one [ 669.541369][T25696] bond533: (slave vlan371): Enslaving as an active interface with an up link [ 669.555190][T25694] bond183 (uninitialized): Released all slaves [ 669.572345][T25697] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 669.594176][T25697] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 669.615176][T25700] bond164 (uninitialized): Released all slaves [ 669.639534][T25702] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 15:42:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x40000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000060000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:31 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x24) [ 669.769280][T25704] device bridge329 entered promiscuous mode [ 669.836639][T25706] bond327: (slave vlan253): making interface the new active one 15:42:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x2c, r1, 0xd192422d554ef22f, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}}, 0x0) [ 669.881599][T25706] bond327: (slave vlan253): Enslaving as an active interface with an up link 15:42:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6f0c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 670.007673][T25712] __nla_validate_parse: 17 callbacks suppressed [ 670.007692][T25712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 670.035590][T25712] bond183 (uninitialized): Released all slaves 15:42:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000064000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000b0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 670.056699][T25713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 670.070135][T25713] bond164 (uninitialized): Released all slaves [ 670.097987][T25716] device bridge584 entered promiscuous mode [ 670.158621][T25717] bond534: (slave vlan372): making interface the new active one [ 670.173927][T25717] bond534: (slave vlan372): Enslaving as an active interface with an up link 15:42:31 executing program 1: pipe(&(0x7f0000000480)) pipe(&(0x7f0000000340)) pselect6(0x40, &(0x7f0000000000)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:42:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003d00)=[{{&(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 15:42:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x41000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:31 executing program 3: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f0000000080)={'gre0\x00', 0x0}) [ 670.302490][T25727] device bridge330 entered promiscuous mode 15:42:31 executing program 1: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='e']}) [ 670.381178][T25731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0xb}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 15:42:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x7400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 670.435133][T25731] bond183 (uninitialized): Released all slaves [ 670.468319][T25732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 670.524628][T25732] bond164 (uninitialized): Released all slaves 15:42:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000068000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x5}, @val={0xc}}}}, 0x28}}, 0x0) [ 670.612599][T25739] device bridge585 entered promiscuous mode 15:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0x9}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) [ 670.686117][T25741] bond535: (slave vlan373): making interface the new active one [ 670.699175][T25741] bond535: (slave vlan373): Enslaving as an active interface with an up link 15:42:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x48000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891d, &(0x7f0000000180)={'wlan0\x00'}) [ 670.809399][T25754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0x4c}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) [ 670.866626][T25754] bond183 (uninitialized): Released all slaves 15:42:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000d0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 670.929601][T25756] device bridge331 entered promiscuous mode [ 671.018022][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 671.050215][T25758] bond164 (uninitialized): Released all slaves 15:42:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600006c000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1b, &(0x7f00000002c0)=[{&(0x7f0000000200)='P', 0x1}], 0x1}, 0x0) [ 671.084752][T25759] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 671.152109][T25759] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 671.179986][T25760] bond329: (slave vlan254): making interface the new active one [ 671.227759][T25760] bond329: (slave vlan254): Enslaving as an active interface with an up link 15:42:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x7a00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:32 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) 15:42:32 executing program 1: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) [ 671.315527][T25770] device bridge586 entered promiscuous mode [ 671.394135][T25774] bond536: (slave vlan374): making interface the new active one [ 671.408568][T25774] bond536: (slave vlan374): Enslaving as an active interface with an up link [ 671.421818][T25773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 671.468220][T25773] bond183 (uninitialized): Released all slaves [ 671.493899][T25781] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:33 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x71) 15:42:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x890b, &(0x7f0000000180)={'wlan0\x00'}) 15:42:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000e0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4a000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 671.534464][T25781] bond164 (uninitialized): Released all slaves 15:42:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000074000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:33 executing program 3: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="65727370616e30008ab518000000ff061e87f402e3"]}) [ 671.656680][T25787] device bridge332 entered promiscuous mode 15:42:33 executing program 1: recvmsg$kcm(0xffffffffffffffff, 0x0, 0xc0000002) [ 671.702406][T25791] bond330: (slave vlan255): making interface the new active one [ 671.717223][T25791] bond330: (slave vlan255): Enslaving as an active interface with an up link [ 671.727871][T25799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x8100, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:33 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x8, 0x0, 0x7) [ 671.752031][T25799] bond183 (uninitialized): Released all slaves 15:42:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000f0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:33 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) [ 671.866326][T25803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 671.901852][T25803] bond164 (uninitialized): Released all slaves 15:42:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600007a000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:33 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) [ 671.941858][T25804] device bridge587 entered promiscuous mode 15:42:33 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x35, 0x0, 0x7) 15:42:33 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 672.076023][T25807] bond537: (slave vlan375): making interface the new active one [ 672.145530][T25807] bond537: (slave vlan375): Enslaving as an active interface with an up link [ 672.164681][T25817] bond183 (uninitialized): Released all slaves 15:42:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4a010000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='P', 0x1}], 0x1}, 0x0) 15:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x18}}, 0x0) [ 672.191395][T25815] validate_nla: 7 callbacks suppressed [ 672.191411][T25815] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000110000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 672.384369][T25819] device bridge333 entered promiscuous mode [ 672.399054][T25823] bond164 (uninitialized): Released all slaves 15:42:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x8300, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:34 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x24) write(r0, 0x0, 0x0) 15:42:34 executing program 1: clock_gettime(0x7, &(0x7f00000012c0)) 15:42:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000083000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 672.444875][T25824] bond331: (slave vlan256): making interface the new active one [ 672.460819][T25824] bond331: (slave vlan256): Enslaving as an active interface with an up link [ 672.479485][T25837] bond183 (uninitialized): Released all slaves 15:42:34 executing program 3: epoll_create(0x400) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 15:42:34 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0xf, {0x2, 0x0, @dev}}, 0x24) 15:42:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000120000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 672.578831][T25840] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:34 executing program 1: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, &(0x7f0000000080)={'gre0\x00', 0x0}) [ 672.751084][T25841] device bridge588 entered promiscuous mode [ 672.789505][T25843] bond538: (slave vlan376): making interface the new active one 15:42:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4c000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private0}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x3c) 15:42:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000cb000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 672.802175][T25843] bond538: (slave vlan376): Enslaving as an active interface with an up link [ 672.814035][T25850] bond164 (uninitialized): Released all slaves [ 672.836202][T25852] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 672.882390][T25858] bond183 (uninitialized): Released all slaves 15:42:34 executing program 1: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x890b, &(0x7f0000000180)={'wlan0\x00'}) [ 672.929567][T25861] device bridge334 entered promiscuous mode [ 673.031290][T25863] bond332: (slave vlan257): making interface the new active one [ 673.048710][T25863] bond332: (slave vlan257): Enslaving as an active interface with an up link [ 673.062204][T25869] bond164 (uninitialized): Released all slaves 15:42:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x8847, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000a5170000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000030000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 673.078983][T25872] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000006b0001"], 0x34}}, 0x0) [ 673.156561][T25873] device bridge589 entered promiscuous mode 15:42:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x60000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x2c, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) [ 673.226940][T25876] bond539: (slave vlan377): making interface the new active one [ 673.243563][T25876] bond539: (slave vlan377): Enslaving as an active interface with an up link [ 673.259049][T25881] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:34 executing program 1: r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) connect$caif(r0, &(0x7f00000000c0)=@dgm, 0x18) [ 673.392349][T25882] bond183 (uninitialized): Released all slaves 15:42:35 executing program 1: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000080)={'gre0\x00', 0x0}) [ 673.446816][T25884] bond164 (uninitialized): Released all slaves 15:42:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000a6170000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 673.530181][T25885] device bridge335 entered promiscuous mode [ 673.598806][T25893] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 673.678459][T25895] device bridge590 entered promiscuous mode [ 673.707497][T25899] bond540: (slave vlan378): making interface the new active one 15:42:35 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2040, 0x0) 15:42:35 executing program 1: r0 = socket(0x2, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, &(0x7f0000000080)={'gre0\x00', 0x0}) 15:42:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000050000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x8848, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 673.726620][T25899] bond540: (slave vlan378): Enslaving as an active interface with an up link 15:42:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x65580000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 673.818278][T25903] bond183 (uninitialized): Released all slaves [ 673.848237][T25909] bond164 (uninitialized): Released all slaves 15:42:35 executing program 3: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4c4926157137fd3c, 0xffffffffffffffff, 0x0) 15:42:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000fd050000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 673.865470][T25910] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000180000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {0xa}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 15:42:35 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x80000000, 0x0) [ 673.948722][T25913] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x11, 0x0, 0x0, 0x0) 15:42:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x201}, 0x14}}, 0x0) 15:42:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)={0x10}, 0x10}], 0x1, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20}, 0x0) [ 674.167947][T25917] device bridge591 entered promiscuous mode 15:42:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') read$msr(r0, 0x0, 0x0) [ 674.209193][T25918] device bridge336 entered promiscuous mode [ 674.242239][T25921] bond164 (uninitialized): Released all slaves 15:42:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000060000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 674.340556][T25923] bond541: (slave vlan379): making interface the new active one [ 674.378703][T25923] bond541: (slave vlan379): Enslaving as an active interface with an up link [ 674.432373][T25924] bond334: (slave vlan258): making interface the new active one [ 674.456087][T25924] bond334: (slave vlan258): Enslaving as an active interface with an up link [ 674.476449][T25930] bond183 (uninitialized): Released all slaves 15:42:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x9b0b, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000020100200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}], 0x0, &(0x7f00000000c0)=ANY=[]) 15:42:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x68000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000d0200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}], 0x0, &(0x7f00000000c0)=ANY=[]) 15:42:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000200000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 674.521496][T25943] bond164 (uninitialized): Released all slaves [ 674.555721][T25949] loop3: detected capacity change from 0 to 4096 15:42:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000070000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 674.585011][T25947] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 674.639027][T25949] EXT4-fs (loop3): bad geometry: first data block 270532608 is beyond end of filesystem (512) [ 674.672540][T25959] loop1: detected capacity change from 0 to 4096 [ 674.717448][T25959] EXT4-fs (loop1): bad geometry: first data block 218103808 is beyond end of filesystem (512) 15:42:36 executing program 1: socket$packet(0x11, 0x0, 0x300) r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ac, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext, 0x40c11, 0x3c6e, 0x101, 0x4, 0xdc4, 0x7f, 0x0, 0x0, 0x5, 0x0, 0x9}, r2, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x1) fstatfs(r0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486aa4581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 674.766268][T25953] device bridge592 entered promiscuous mode [ 674.789406][T25951] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f020000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 674.863883][T25956] bond183 (uninitialized): Released all slaves 15:42:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6c000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 674.933885][T25957] bond542: (slave vlan380): making interface the new active one [ 674.950645][T25957] bond542: (slave vlan380): Enslaving as an active interface with an up link 15:42:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000210000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 675.034963][T25969] loop3: detected capacity change from 0 to 4096 [ 675.686509][T25982] loop1: detected capacity change from 0 to 264192 [ 675.737631][T25969] EXT4-fs: failed to create workqueue [ 675.758281][T25986] device bridge593 entered promiscuous mode [ 675.782616][T25969] EXT4-fs (loop3): mount failed 15:42:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6e0c0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f004c00000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 675.888661][T25960] device bridge337 entered promiscuous mode [ 675.966802][T25962] bond335: (slave vlan259): making interface the new active one [ 675.980447][T25962] bond335: (slave vlan259): Enslaving as an active interface with an up link [ 676.018681][T25991] loop3: detected capacity change from 0 to 4096 [ 676.028128][T25961] __nla_validate_parse: 15 callbacks suppressed [ 676.028145][T25961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:37 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000001100)=""/218) 15:42:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6f0c0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xea01, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000090000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 676.071507][T25974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000250000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:37 executing program 1: renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0) [ 676.169419][T25991] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended 15:42:37 executing program 3: semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000002500)) 15:42:37 executing program 1: getpriority(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) fork() [ 676.238616][T25991] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 676.307260][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 676.370360][T26002] bond164 (uninitialized): Released all slaves 15:42:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:38 executing program 3: semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, 0x0) 15:42:38 executing program 1: pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) preadv(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0) [ 676.485064][T26006] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 676.524343][T26006] bond183 (uninitialized): Released all slaves 15:42:38 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r0, 0x0) socket(0x0, 0x0, 0x0) madvise(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x6) 15:42:38 executing program 1: pipe2(&(0x7f0000000140), 0x1400004) [ 676.595256][T26007] device bridge594 entered promiscuous mode [ 676.618244][T26009] device bridge338 entered promiscuous mode [ 676.707950][T26011] bond544: (slave vlan381): making interface the new active one [ 676.758808][T26011] bond544: (slave vlan381): Enslaving as an active interface with an up link [ 676.785903][T26026] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x74000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000002f0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf601, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000001a00), 0x0) 15:42:38 executing program 3: pipe2(0x0, 0x1a) [ 676.821142][T26026] bond164 (uninitialized): Released all slaves 15:42:38 executing program 1: mknod$loop(0x0, 0x1000, 0x1) 15:42:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000b0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 676.874983][T26038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 676.901922][T26038] bond183 (uninitialized): Released all slaves 15:42:38 executing program 3: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 15:42:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000003a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:38 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:42:38 executing program 1: socket$unix(0x1, 0x0, 0x0) mlock(&(0x7f0000dd7000/0x2000)=nil, 0x2000) 15:42:38 executing program 1: getuid() setgid(0x0) [ 677.130527][T26045] device bridge339 entered promiscuous mode [ 677.209891][T26051] device bridge595 entered promiscuous mode [ 677.221869][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 677.246369][T26049] bond164 (uninitialized): Released all slaves [ 677.319630][T26050] bond337: (slave vlan260): making interface the new active one [ 677.333450][T26050] bond337: (slave vlan260): Enslaving as an active interface with an up link [ 677.380698][T26055] bond545: (slave vlan382): making interface the new active one [ 677.395985][T26055] bond545: (slave vlan382): Enslaving as an active interface with an up link [ 677.408118][T26059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x7a000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:39 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 15:42:39 executing program 1: symlinkat(&(0x7f0000001140)='./file0\x00', 0xffffffffffffffff, 0x0) 15:42:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfe0f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 677.432201][T26059] bond183 (uninitialized): Released all slaves 15:42:39 executing program 3: fcntl$lock(0xffffffffffffffff, 0x9, 0x0) 15:42:39 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0xa0400, 0x0) 15:42:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000400000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 677.492474][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:39 executing program 3: open$dir(&(0x7f0000000000)='.\x00', 0x20, 0x0) 15:42:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000d0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 677.539389][T26072] bond164 (uninitialized): Released all slaves [ 677.566841][T26074] validate_nla: 6 callbacks suppressed [ 677.566857][T26074] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:39 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000011c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) [ 677.653947][T26076] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:39 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) [ 677.777041][T26082] device bridge596 entered promiscuous mode [ 677.793885][T26086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 677.814260][T26086] bond183 (uninitialized): Released all slaves [ 677.854126][T26081] device bridge340 entered promiscuous mode [ 677.916545][T26089] bond546: (slave vlan383): making interface the new active one [ 677.931329][T26089] bond546: (slave vlan383): Enslaving as an active interface with an up link 15:42:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x81000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000410000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:39 executing program 1: fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)) 15:42:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfeff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 677.958682][T26074] bond338: (slave vlan261): making interface the new active one [ 677.971644][T26074] bond338: (slave vlan261): Enslaving as an active interface with an up link [ 677.991902][T26094] bond164 (uninitialized): Released all slaves [ 677.999381][ T3709] usb 4-1: new high-speed USB device number 12 using dummy_hcd 15:42:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000e0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:39 executing program 1: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x0, 0x0) mlock(&(0x7f0000dd7000/0x2000)=nil, 0x2000) [ 678.081167][T26102] bond183 (uninitialized): Released all slaves 15:42:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000088470000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 678.128826][T26109] bond164 (uninitialized): Released all slaves [ 678.159377][T26106] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000f0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:39 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)) [ 678.214183][ T3709] usb 4-1: device descriptor read/64, error 18 [ 678.230799][T26107] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x8940, 0x0) [ 678.287130][T26112] device bridge341 entered promiscuous mode [ 678.307045][T26113] device bridge597 entered promiscuous mode [ 678.381514][T26116] bond339: (slave vlan262): making interface the new active one [ 678.395899][T26116] bond339: (slave vlan262): Enslaving as an active interface with an up link [ 678.424771][T26119] bond547: (slave vlan384): making interface the new active one [ 678.439175][T26119] bond547: (slave vlan384): Enslaving as an active interface with an up link [ 678.457533][T26118] bond183 (uninitialized): Released all slaves [ 678.483861][ T3709] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 678.501651][T26121] bond164 (uninitialized): Released all slaves [ 678.673316][ T3709] usb 4-1: device descriptor read/64, error 18 [ 678.794020][ T3709] usb usb4-port1: attempt power cycle [ 679.203302][ T3709] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 679.293921][ T3709] usb 4-1: Invalid ep0 maxpacket: 0 [ 679.443714][ T3709] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 679.533477][ T3709] usb 4-1: Invalid ep0 maxpacket: 0 [ 679.538824][ T3709] usb usb4-port1: unable to enumerate USB device 15:42:42 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) 15:42:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xff0f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x83000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000480000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26}, 0x20) 15:42:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000110000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x8913, 0x0) [ 680.756285][T26134] bond183 (uninitialized): Released all slaves 15:42:42 executing program 1: perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 680.811160][T26136] bond164 (uninitialized): Released all slaves 15:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x40) 15:42:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000088480000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000120000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 680.864269][T26137] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 680.912475][T26135] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:42 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 681.008722][T26143] device bridge342 entered promiscuous mode [ 681.059173][T26145] device bridge598 entered promiscuous mode 15:42:42 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) [ 681.105298][T26149] bond340: (slave vlan263): making interface the new active one [ 681.118299][T26149] bond340: (slave vlan263): Enslaving as an active interface with an up link 15:42:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xff7f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 681.186719][T26150] bond548: (slave vlan385): making interface the new active one [ 681.201559][T26150] bond548: (slave vlan385): Enslaving as an active interface with an up link [ 681.215984][T26158] __nla_validate_parse: 7 callbacks suppressed [ 681.216001][T26158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x88470000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000004100)={0x0, 0x0, 0x0}, 0x2100) 15:42:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000004c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 681.255720][T26158] bond183 (uninitialized): Released all slaves [ 681.272913][T26157] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 681.298971][T26157] bond164 (uninitialized): Released all slaves 15:42:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 681.326592][T26165] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000076170000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:43 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="2a0540f66e50"}, 0x9f, 0x0}, 0x0) [ 681.406785][T26171] device bridge343 entered promiscuous mode [ 681.418585][T26170] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000065580000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 681.466947][T26174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 681.495337][T26174] bond183 (uninitialized): Released all slaves 15:42:43 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 681.571007][T26175] bond341: (slave vlan264): making interface the new active one [ 681.589289][T26175] bond341: (slave vlan264): Enslaving as an active interface with an up link [ 681.612039][T26177] device bridge599 entered promiscuous mode 15:42:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfffe, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 681.625114][T26180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 681.660172][T26180] bond164 (uninitialized): Released all slaves 15:42:43 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, 0x0}, 0x0) 15:42:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000077170000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 681.761521][T26182] bond549: (slave vlan386): making interface the new active one 15:42:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x8905, 0x0) [ 681.807705][T26182] bond549: (slave vlan386): Enslaving as an active interface with an up link [ 681.821588][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x88480000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 681.876481][T26186] bond183 (uninitialized): Released all slaves [ 681.921488][T26192] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 681.985842][T26194] device bridge344 entered promiscuous mode [ 682.008398][T26198] bond342: (slave vlan265): making interface the new active one [ 682.021637][T26198] bond342: (slave vlan265): Enslaving as an active interface with an up link [ 682.033661][T26197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 682.050644][T26197] bond164 (uninitialized): Released all slaves [ 682.061722][T26204] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:43 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='&+:*:/\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/203, 0xcb}, {&(0x7f0000001340)=""/200, 0xc8}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x7, &(0x7f0000002500)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x41) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000025c0)={r1}) sendmsg$kcm(r2, &(0x7f0000002880)={&(0x7f0000002600)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)="b348f1e48d821e84dd52b214187f4f042edddfd09e5edd4291120a5bd8dc6297ae09cc347c661d553b2d9373a085f00b4412ad530ba871af6d59f3028190687dc2309f86d332a7dcf49090e715c79fb5c0058be7754721ce024417f6fa4c77957dfd514deb2419fef9eddbc9124b60d4c769c2330dd647f6b519c34fbc80b7e6ca053dbcf08f3f05997b8fafacf7fedb9363b07980db1b249694a4dec19026296b60c696bc50c3294a4e00287a779615", 0xb0}, {&(0x7f0000002740)="d63eefb09a51db68acccbc2f0b0c2fb53ad98414d258fc358d7d81458928a8c22c36784d57affdcc8b139fa5394aa8610e3d786bda57146f5ec0bce7d316b009fd23499ade904bc04577b288c5b25a8bba9b551fde436a9a2635664304a79da1c01c7153fe8a59cd8ceb54aa9c7f49e905db5e6fe81d158d2f54433ac4a5353d53922df4d1fd685533", 0x89}, {&(0x7f0000002800)='\rk', 0x2}], 0x3}, 0x8000) recvmsg$unix(r2, &(0x7f0000003f40)={&(0x7f0000003d00), 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003d80)=""/42, 0x2a}, {&(0x7f0000003dc0)=""/75, 0x4b}], 0x2, &(0x7f0000003e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40000101) sendmsg$sock(0xffffffffffffffff, &(0x7f00000041c0)={&(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x0, @empty, 0xd21}}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)="b1f30c2a36f5a20dae279ae7a06f3dcb146effefdf0200cf41c8aee34b13b7b3f982a4547a02f7f1e6aa062762275b66c9cce8554c12bbfecf660bc418328ee27004b6f3014fbd1a", 0x48}], 0x1, &(0x7f00000040c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x40000000}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14}}], 0xf0}, 0x844) recvmsg$unix(r3, &(0x7f0000005a00)={0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000004200)=""/197, 0xc5}, {&(0x7f0000004300)=""/77, 0x4d}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/17, 0x11}, {&(0x7f00000053c0)=""/234, 0xea}, {&(0x7f00000054c0)=""/174, 0xae}, {&(0x7f0000005580)=""/167, 0xa7}, {&(0x7f0000005640)=""/203, 0xcb}, {&(0x7f0000005740)=""/245, 0xf5}], 0x9, &(0x7f0000005900)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x10000) recvmsg$unix(r5, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005a80)=""/219, 0xdb}, {&(0x7f0000005b80)=""/81, 0x51}, {&(0x7f0000005c00)=""/244, 0xf4}], 0x3, &(0x7f0000005d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}, 0x102) recvmsg$kcm(r3, &(0x7f000000ac80)={&(0x7f000000aa40)=@can={0x1d, 0x0}, 0x80, &(0x7f000000ac40)=[{&(0x7f000000aac0)=""/252, 0xfc}, {&(0x7f000000abc0)=""/69, 0x45}], 0x2}, 0x2000) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f000000acc0)=r7) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x2402, 0x0, 0x3, 0x608, 0x1, 0x9, '\x00', r7, 0xffffffffffffffff, 0x4, 0x2}, 0x40) recvmsg(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000028c0)=""/167, 0xa7}, {&(0x7f0000002980)=""/97, 0x61}], 0x2, &(0x7f0000002a00)=""/87, 0x57}, 0x12000) 15:42:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:42:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000600000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3ffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000180000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 682.115319][T26205] device bridge600 entered promiscuous mode 15:42:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x88a8ffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 682.206005][T26207] bond550: (slave vlan387): making interface the new active one [ 682.219770][T26207] bond550: (slave vlan387): Enslaving as an active interface with an up link [ 682.231146][T26215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "13"}]}}, &(0x7f0000000200)=""/172, 0x2a, 0xac, 0x1}, 0x20) 15:42:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000640000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 682.280022][T26215] bond183 (uninitialized): Released all slaves [ 682.302160][T26214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:43 executing program 3: socketpair(0x25, 0x1, 0x2, &(0x7f0000005900)) 15:42:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000200000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000040)=@x25, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="31ec51d2d6365160da11d9ec02953739fd49e6fd36ee38aa243b141f85827f7a959a2dc5c6a9e8df51e9583eb658f41f52ed8b034aeb16174514343774b6b151a6425babc8dc21132500cf1319bedfee166a153fa839d1cfd5b01cb814c7f1f1b26162bfd5fa5cdc42a48939d40b988b6c78c6d591a07fd451b5349953471dc00cea8d433d6b4e06a345f6f1992ec4d75591c1a653d83a7081e5e086f151c2d07707856be829ebab8414508a7961ede1aa17c86513b2beccc2c13cb0c57dd52370c2b3fc0487a40c1237cc26fd157cf0a0c9d1d5a6376cd5f836f482de8ef63d94deab4271e0352100e85a243870", 0xee}], 0x1, &(0x7f0000000200)=[{0x60, 0x0, 0x0, "1148795ea2b240bccb0ed5c2992981a343b6110ed6f5f9fc2612dbc5c31cf6b3e8077e7609b1a897575686147cfcc3bc21f3d0c2479989e6690f2f20e19e839b97db8f56fed38d35dec046dd4b6991e8"}, {0xd0, 0x0, 0x0, "99128fb2e75354bcd145d78f00c1aa4edb0b5f76168d18033f46846f367b196e2111128a9ad400a008296aa59fe3bf45efccfe80338b103fb3cda88fe0e11b2f4d0cac25517c22d0962ebedb2744c56a7a156e796867be78586ba9d9f327096ba9d95ee80e3b1fe796c085e6aff6a28e082e38c61ffd81cf53fc62b294fdf7b749ca0835f72f4364b84e7c4c396fa788c9642fdc09fc4a52c450ddfc4deb53c783dc97368d1a3ee03d7847b45ab5139cf504d89ac889fa89da082165"}, {0x87, 0x0, 0x0, "24e67d8e421326b591aa000c0beaab019aeb7f9fea50bf235b0d271f3f7cdc3a3ff9d7e64dda747a43120af6b29997ffc9e25eacc2147d240fac98af219fe24886b04f5584c053763006800fc5a11ffd79f8e5655d117f3b3fe909d0261ffe6c6aec97853bc82b9a6b5cac155c76b1eb45b53c61de5c513566874b77c65c549f354082e1c14dc0cf3199634c545e224cf881b2e6d2a2183578cbdcd44474c543001de1a57ee58cb375e46faff0888e0f719ccb5ad82eccb7af79967176326e04241449eefce0"}, {0xb0, 0x0, 0x0, "c54a98d46d9dfb401f8f4fcf1806f4a8ce6615db575e3accfedf4b42aae84ce601a27a280c3130d9845ea801dc226c950dc1a62f1e7b1b8969a2949d9665cca4bf5bdaff6dd10a64496f56427deb1fcd028246a4d75bafa56791cd3002835711634da7fb50980b1ff27550c61a02aae078288510ed7ee08bf9d245c231c5e3985a9487454f80e76552f6c99c05798a277bef01970df469d5c154650594e241f2"}, {0xa0, 0x0, 0x0, "3d4a98f70e8d7a9cb40fee143a117b43d3b409af08f4159fc1adfdfe807c6943291633a8b2df1d3d5841e7934c6711832b52ead18dc88247a151dcf9fffbd487f6fa49c4882e179a0771f9bced12a77b7716a40142adb7f2bdd9cedefb88225af530c2d9300336f30874fcb16365ba34fec9387fc46d003a0feece7e67a675d73d3351e507337dc22761d8"}, {0xb8, 0x0, 0x0, "3be9092358c41b73d2d333abc995c6a8315c0ed72739dd79932ead9e334c7a357191526043f1c2ae7728442803be1cc2374edc945b5506aba714f74dea8ea4fd33ba8149eaaf8647b94ec1c27322ff8c087fd723c959763678105202d586b17a2413fb8febe7cd18c4e3e974a581701d81ec1412810b829d754cd582f0e330f6d86fd94976246c384abd14f3f553ebf88ea465f4456e5075b183e952efb753a62bd703"}, {0x50, 0x0, 0x0, "f8b41accdd1907946a57819c5270fbafcee354fce5cd4af1549af2f33e72f9a078ee3ad37e278fad2d2286a6498ee5262884e8dadb1615e7db319709423d"}], 0x460}, 0x4000000) [ 682.358357][T26214] bond164 (uninitialized): Released all slaves 15:42:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x40049409, 0x0) 15:42:44 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 15:42:44 executing program 3: socketpair(0x29, 0x5, 0x0, &(0x7f0000001440)) 15:42:44 executing program 1: perf_event_open$cgroup(&(0x7f00000018c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 682.532475][T26217] device bridge345 entered promiscuous mode [ 682.599523][T26220] validate_nla: 1 callbacks suppressed [ 682.599541][T26220] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 682.699513][T26223] bond343: (slave vlan266): making interface the new active one [ 682.728066][T26223] bond343: (slave vlan266): Enslaving as an active interface with an up link 15:42:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x40) [ 682.749805][T26224] device bridge601 entered promiscuous mode [ 682.818688][T26228] bond551: (slave vlan388): making interface the new active one [ 682.831803][T26228] bond551: (slave vlan388): Enslaving as an active interface with an up link [ 682.844646][T26233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20}, 0x0) 15:42:44 executing program 3: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) [ 682.875482][T26233] bond164 (uninitialized): Released all slaves [ 682.914893][T26235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 682.940333][T26235] bond183 (uninitialized): Released all slaves [ 682.965572][T26250] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000058650000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x9b0b0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}], 0x20}, 0x0) 15:42:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000210000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) 15:42:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000004180)=@raw=[@ldst], &(0x7f00000041c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 15:42:44 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) [ 683.068737][T26268] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) [ 683.170765][T26251] device bridge346 entered promiscuous mode [ 683.210833][T26257] bond344: (slave vlan267): making interface the new active one [ 683.227071][T26257] bond344: (slave vlan267): Enslaving as an active interface with an up link [ 683.247879][T26264] bond164 (uninitialized): Released all slaves [ 683.284342][T26267] bond183 (uninitialized): Released all slaves 15:42:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x4020940d, &(0x7f0000000700)) 15:42:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000250000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000001c0)) [ 683.337869][T26273] device bridge602 entered promiscuous mode 15:42:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000680000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x9effffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:45 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x0) r0 = syz_io_uring_setup(0x4b99, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001300)=[{0x0}], 0x2100) 15:42:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 683.506969][T26268] bond552: (slave vlan389): making interface the new active one [ 683.525731][T26268] bond552: (slave vlan389): Enslaving as an active interface with an up link [ 683.545933][T26284] bond164 (uninitialized): Released all slaves [ 683.581273][T26286] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000002f0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:45 executing program 3: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x0, 0x0) 15:42:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000002840)={0x0, 0x0}) [ 683.886780][T26289] bond183 (uninitialized): Released all slaves 15:42:45 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) [ 683.978383][T26290] device bridge347 entered promiscuous mode 15:42:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000006c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:45 executing program 3: syz_mount_image$adfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[{&(0x7f0000000080)="d8", 0x1, 0x100000000}, {&(0x7f0000000480)="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", 0xb81, 0xfffffffffffffffe}], 0x0, 0x0) [ 684.311392][T26292] bond345: (slave vlan268): making interface the new active one [ 684.332181][T26292] bond345: (slave vlan268): Enslaving as an active interface with an up link [ 684.348322][T26298] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x5450, 0x0) [ 684.392152][T26316] loop3: detected capacity change from 0 to 264192 15:42:46 executing program 3: socket(0x2, 0x0, 0x80000000) [ 684.443797][T26303] bond164 (uninitialized): Released all slaves [ 684.565559][T26305] device bridge603 entered promiscuous mode [ 684.606007][T26302] bond553: (slave vlan390): making interface the new active one 15:42:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xa2000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:46 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[{0x28, 0x0, 0x0, "d38d7a710c84d9dd8fb9c80b0d060f6d79"}], 0x28}, 0x0) 15:42:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000003a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:46 executing program 1: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x300, 0x0) [ 684.676250][T26302] bond553: (slave vlan390): Enslaving as an active interface with an up link [ 684.692551][T26317] bond183 (uninitialized): Released all slaves [ 684.707979][T26320] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000740000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7}, 0x40) 15:42:46 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) [ 684.893669][T26324] device bridge348 entered promiscuous mode 15:42:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x1080000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:46 executing program 3: socket$inet6(0xa, 0x2, 0x8) 15:42:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)) [ 684.937283][T26326] bond346: (slave vlan269): making interface the new active one [ 684.949372][T26326] bond346: (slave vlan269): Enslaving as an active interface with an up link [ 684.967188][T26334] bond164 (uninitialized): Released all slaves 15:42:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000023c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 685.002269][T26336] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000400000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 685.121437][T26340] device bridge604 entered promiscuous mode [ 685.154139][T26341] bond183 (uninitialized): Released all slaves 15:42:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xac86cf03, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x5421, 0x0) 15:42:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000007a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:46 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="1c", 0x1}], 0x300}, 0x0) [ 685.255745][T26344] bond554: (slave vlan391): making interface the new active one [ 685.271367][T26344] bond554: (slave vlan391): Enslaving as an active interface with an up link [ 685.287565][T26353] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc}, 0x40) 15:42:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], &(0x7f0000002100)=""/4103, 0x78, 0x1007, 0x1}, 0x20) 15:42:47 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000002880)={0x0, 0x0, 0x0, &(0x7f0000002680), {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 685.455253][T26355] bond164 (uninitialized): Released all slaves [ 685.507078][T26356] device bridge349 entered promiscuous mode [ 685.565441][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.571831][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.640219][T26361] bond347: (slave vlan270): making interface the new active one [ 685.679146][T26361] bond347: (slave vlan270): Enslaving as an active interface with an up link 15:42:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000c000000060000000000000b"], &(0x7f00000002c0)=""/151, 0x88, 0x97, 0x1}, 0x20) 15:42:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000410000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:47 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000180)=""/126, 0x7e}}, 0x120) 15:42:47 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='I', 0x1}, {&(0x7f0000000580)="c7", 0x1}], 0x2, &(0x7f0000001b40)=[{0x28, 0x0, 0x0, "d38d7a710c84d9dd8fb9c80b0d060f6d79"}], 0x28}, 0x0) [ 685.691587][T26367] bond183 (uninitialized): Released all slaves [ 685.724109][T26371] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 685.857703][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 685.870100][T26375] device bridge605 entered promiscuous mode [ 685.880074][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 685.892457][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 685.910592][T26380] bond555: (slave vlan392): making interface the new active one [ 685.911645][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 685.928882][T26380] bond555: (slave vlan392): Enslaving as an active interface with an up link [ 685.940428][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 685.949634][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 15:42:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xae000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000810000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:47 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f0000001740)) [ 685.960893][T26386] bond164 (uninitialized): Released all slaves [ 685.971099][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 685.984782][T26393] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000088470000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 686.015041][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.063910][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.076575][T26394] device bridge350 entered promiscuous mode [ 686.090243][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 15:42:47 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x8042) [ 686.109713][T26395] bond348: (slave vlan271): making interface the new active one 15:42:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:47 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='I', 0x1}], 0x1}, 0x0) [ 686.137298][T26395] bond348: (slave vlan271): Enslaving as an active interface with an up link [ 686.141798][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.171446][T26398] bond183 (uninitialized): Released all slaves 15:42:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000830000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 686.266701][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.290386][T26405] __nla_validate_parse: 12 callbacks suppressed [ 686.290402][T26405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 686.296262][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 15:42:47 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x0) r0 = syz_io_uring_setup(0x4b99, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001300)=[{0x0}], 0x2100) [ 686.316645][T26405] bond164 (uninitialized): Released all slaves 15:42:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000480000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 686.421086][T26406] device bridge606 entered promiscuous mode [ 686.473128][T26409] bond556: (slave vlan393): making interface the new active one [ 686.476904][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.487598][T26409] bond556: (slave vlan393): Enslaving as an active interface with an up link [ 686.513872][T26416] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 686.536144][T26416] bond183 (uninitialized): Released all slaves [ 686.587767][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.596795][T26418] device bridge351 entered promiscuous mode [ 686.638399][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.648866][T26422] bond349: (slave vlan272): making interface the new active one [ 686.663830][T26422] bond349: (slave vlan272): Enslaving as an active interface with an up link [ 686.677280][T26427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 686.689013][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.697892][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.707678][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.709525][T26427] bond164 (uninitialized): Released all slaves [ 686.718162][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.748406][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.774991][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.783975][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.791392][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.799707][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.809633][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.817965][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.827238][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.837038][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.845536][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.854093][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.862539][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.870911][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.879130][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.887574][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.896056][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.904719][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.912119][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.920269][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.928547][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.936859][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.945250][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.953731][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.961137][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.969796][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.978158][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.986799][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 686.994932][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.002333][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.010500][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.018637][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.026991][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.035375][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.043855][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.051251][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.059288][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.070277][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.078685][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.086852][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.095287][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.103541][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.110942][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.119327][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.127626][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.135926][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.144750][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.152598][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.161038][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.169842][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.178029][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.186516][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.194915][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.202305][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.210416][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.218578][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.227143][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.235566][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.244030][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.251441][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.259609][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.267746][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.276916][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.285295][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.293676][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.301075][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.309795][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.317878][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.326255][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.334836][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.342232][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.350332][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.358537][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.366975][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.376129][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.384735][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.392140][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.400428][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.409090][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.417346][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.425809][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.434494][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.441952][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.450087][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.458575][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.467157][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.476343][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.484631][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.492033][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.500233][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.508445][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.516867][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.524970][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.532345][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.540702][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.549709][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.557664][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.566239][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.574808][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.583722][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.591127][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.599460][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.607636][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.616048][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.624901][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.632302][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 687.640439][ T921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 15:42:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, 0xfffffffffffffff8) 15:42:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xb2020000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000047880000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000026c0)={0xd, 0x2, 0x4, 0x5}, 0x40) 15:42:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000088480000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 687.661666][ T921] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 15:42:49 executing program 1: clone3(&(0x7f0000000200)={0xc000000, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f00000000c0)=""/106, 0x6a, 0x0, 0x0}, 0x58) [ 687.742188][T26432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:49 executing program 3: add_key(&(0x7f00000001c0)='pkcs7_test\x00', 0x0, &(0x7f0000000240)="42a2", 0x2, 0xfffffffffffffffc) [ 687.800295][T26432] bond183 (uninitialized): Released all slaves 15:42:49 executing program 3: select(0x40, &(0x7f00000001c0)={0x1000}, 0x0, 0x0, 0x0) [ 687.846189][T26439] validate_nla: 2 callbacks suppressed [ 687.846206][T26439] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000048880000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:49 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 15:42:49 executing program 3: r0 = socket(0x2, 0x3, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) [ 687.980529][T26435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 688.013797][T26435] bond164 (uninitialized): Released all slaves 15:42:49 executing program 3: clone3(&(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair(0x1d, 0x1, 0x9, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 688.039029][T26437] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 688.121035][T26443] device bridge352 entered promiscuous mode [ 688.159428][T26445] device bridge607 entered promiscuous mode [ 688.205430][T26450] bond557: (slave vlan394): making interface the new active one [ 688.220083][T26450] bond557: (slave vlan394): Enslaving as an active interface with an up link 15:42:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xc3ffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:49 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x200) 15:42:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000004c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 688.248315][T26454] bond350: (slave vlan273): making interface the new active one [ 688.268857][T26454] bond350: (slave vlan273): Enslaving as an active interface with an up link [ 688.279843][T26456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x5000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:49 executing program 3: socket$caif_seqpacket(0x25, 0x5, 0xfffffffe) 15:42:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x5451, 0x0) [ 688.355459][T26456] bond183 (uninitialized): Released all slaves 15:42:50 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='-', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 15:42:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000340)=@raw=[@call], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:42:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000017a50000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:50 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0x8, {'syz0\x00', 'syz1\x00', 'syz1\x00'}}, 0x118) [ 688.477360][T26477] device bridge608 entered promiscuous mode [ 688.513951][T26468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000640)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)) syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TEE, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 15:42:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000065580000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 688.562150][T26468] bond164 (uninitialized): Released all slaves [ 688.589271][T26473] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 688.677686][T26479] bond558: (slave vlan395): making interface the new active one [ 688.692027][T26479] bond558: (slave vlan395): Enslaving as an active interface with an up link [ 688.714466][T26482] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xd6020000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:50 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fdatasync(r0) [ 688.759975][T26497] binder: 26495:26497 ioctl c018620c 200000c0 returned -22 15:42:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000640)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)) syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TEE, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) [ 688.848203][T26487] device bridge353 entered promiscuous mode [ 688.858425][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 688.873956][T26489] bond183 (uninitialized): Released all slaves [ 688.940317][T26492] bond351: (slave vlan274): making interface the new active one [ 688.958922][T26492] bond351: (slave vlan274): Enslaving as an active interface with an up link [ 688.959008][T26505] binder: 26502:26505 ioctl c018620c 200000c0 returned -22 15:42:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) 15:42:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000017a60000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:50 executing program 1: socket(0x29, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000030c0), 0xffffffffffffffff) clone3(&(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000002840)=[0xffffffffffffffff], 0x1}, 0x58) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000030c0), 0xffffffffffffffff) [ 688.989854][T26494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 689.019755][T26494] bond164 (uninitialized): Released all slaves 15:42:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000003c0)) 15:42:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000600000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 689.058468][T26501] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r1}) [ 689.166254][T26504] device bridge609 entered promiscuous mode 15:42:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x40086602, 0x0) [ 689.216291][T26506] bond559: (slave vlan396): making interface the new active one [ 689.236685][T26506] bond559: (slave vlan396): Enslaving as an active interface with an up link [ 689.272469][T26511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:50 executing program 1: syz_open_dev$dri(&(0x7f0000000140), 0xffffffffffffd60b, 0x0) 15:42:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xefffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:50 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 689.315645][T26511] bond183 (uninitialized): Released all slaves 15:42:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000005cf0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 689.364005][T26518] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 689.427073][T26530] loop3: detected capacity change from 0 to 87 [ 689.535666][T26525] device bridge354 entered promiscuous mode [ 689.572124][T26522] bond164 (uninitialized): Released all slaves [ 689.578883][ T26] audit: type=1804 audit(1639928571.158:29): pid=26530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1173/file1/bus" dev="loop3" ino=1048592 res=1 errno=0 [ 689.671432][T26527] bond352: (slave vlan275): making interface the new active one [ 689.688611][T26527] bond352: (slave vlan275): Enslaving as an active interface with an up link [ 689.701723][T26530] syz-executor.3: attempt to access beyond end of device [ 689.701723][T26530] loop3: rw=34817, want=88, limit=87 15:42:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x7000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:51 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) 15:42:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000640000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:51 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 689.721890][T26535] bond183 (uninitialized): Released all slaves [ 689.746550][T26536] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600007fff0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x5421, &(0x7f0000000700)) [ 689.859269][T26538] device bridge610 entered promiscuous mode 15:42:51 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='4\x00', 0x2) [ 689.948133][T26555] loop3: detected capacity change from 0 to 87 [ 689.987817][T26539] bond560: (slave vlan397): making interface the new active one [ 690.030473][T26539] bond560: (slave vlan397): Enslaving as an active interface with an up link [ 690.056068][T26546] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 690.068566][ T26] audit: type=1804 audit(1639928571.648:30): pid=26555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1174/file1/bus" dev="loop3" ino=1048593 res=1 errno=0 15:42:51 executing program 1: syz_mount_image$adfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000002580)=[{&(0x7f0000000100)="f49433f70fb75b015a88a3dd6471350f7c26e56f41b37d80c27b9af367fb73df493aef155dc11443d7c9446542690c496f262835e8480f494c659c21f2b2", 0x3e, 0x1000}, {&(0x7f0000000480), 0x0, 0xfffffffffffffffe}, {&(0x7f0000000240)}, {0x0}], 0x2000004, &(0x7f00000003c0)={[{}, {'*\x05%'}], [{@smackfsdef}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) 15:42:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf0ffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000058650000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 690.201173][T26547] bond164 (uninitialized): Released all slaves [ 690.229669][T26563] loop1: detected capacity change from 0 to 16383 [ 690.281088][T26549] device bridge355 entered promiscuous mode [ 690.285697][T26563] ADFS-fs (loop1): unrecognised mount option "*%" or missing value [ 690.306717][T26554] bond353: (slave vlan276): making interface the new active one [ 690.321052][T26554] bond353: (slave vlan276): Enslaving as an active interface with an up link 15:42:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x5452, &(0x7f0000000700)) [ 690.335432][T26555] syz-executor.3: attempt to access beyond end of device [ 690.335432][T26555] loop3: rw=34817, want=88, limit=87 [ 690.355272][T26553] bond183 (uninitialized): Released all slaves [ 690.377456][T26562] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000400300ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:52 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 690.464932][T26564] device bridge611 entered promiscuous mode [ 690.511806][T26566] bond164 (uninitialized): Released all slaves 15:42:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000680000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:52 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) [ 690.659282][T26567] bond561: (slave vlan398): making interface the new active one [ 690.677333][T26577] loop3: detected capacity change from 0 to 87 15:42:52 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000), 0x3e}, 0x0) [ 690.748983][T26567] bond561: (slave vlan398): Enslaving as an active interface with an up link [ 690.749722][ T26] audit: type=1804 audit(1639928572.328:31): pid=26584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1175/file1/bus" dev="sda1" ino=1207 res=1 errno=0 [ 690.772910][T26573] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf2030000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:52 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:42:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000002100)=""/4103, 0x78, 0x1007, 0x1}, 0x20) [ 690.900747][T26575] device bridge356 entered promiscuous mode 15:42:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8fd50030"}, 0x0, 0x0, @planes=0x0, 0xa3a}) [ 690.990560][T26595] loop3: detected capacity change from 0 to 87 [ 691.066461][ T26] audit: type=1804 audit(1639928572.648:32): pid=26595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1176/file1/bus" dev="loop3" ino=1048594 res=1 errno=0 [ 691.139200][T26581] bond354: (slave vlan277): making interface the new active one [ 691.175629][T26595] syz-executor.3: attempt to access beyond end of device [ 691.175629][T26595] loop3: rw=34817, want=88, limit=87 15:42:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000500)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ab89fbc1"}, 0x0, 0x0, @fd}) [ 691.179730][T26581] bond354: (slave vlan277): Enslaving as an active interface with an up link 15:42:52 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 15:42:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x9000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 691.232022][T26582] bond164 (uninitialized): Released all slaves [ 691.293793][T26583] bond183 (uninitialized): Released all slaves 15:42:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000034000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000006c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:52 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000080), 0x4) [ 691.437891][T26608] loop3: detected capacity change from 0 to 87 [ 691.451945][T26598] device bridge612 entered promiscuous mode 15:42:53 executing program 1: clone3(&(0x7f0000000300)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 691.499582][T26600] bond562: (slave vlan399): making interface the new active one [ 691.515737][T26600] bond562: (slave vlan399): Enslaving as an active interface with an up link [ 691.527234][T26610] __nla_validate_parse: 7 callbacks suppressed [ 691.527253][T26610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x401c5820, 0x0) [ 691.611920][T26610] bond164 (uninitialized): Released all slaves 15:42:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf4000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000740000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:53 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000001280)) 15:42:53 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 15:42:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000ffffe000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 691.729571][T26614] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 691.749088][T26614] bond183 (uninitialized): Released all slaves [ 691.841077][T26617] device bridge357 entered promiscuous mode [ 691.859091][T26636] loop3: detected capacity change from 0 to 87 15:42:53 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x4000010) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) [ 691.998286][T26621] bond355: (slave vlan278): making interface the new active one [ 692.089268][T26621] bond355: (slave vlan278): Enslaving as an active interface with an up link [ 692.117600][T26627] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xa000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:53 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 15:42:53 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) [ 692.134927][T26627] bond164 (uninitialized): Released all slaves 15:42:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000017760000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 692.211039][T26646] loop3: detected capacity change from 0 to 87 15:42:53 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='3\x00', 0x2) 15:42:53 executing program 1: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) clone3(&(0x7f0000002880)={0x0, 0x0, 0x0, &(0x7f0000002680), {}, 0x0, 0x0, &(0x7f0000002780)=""/183, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(&(0x7f00000030c0), 0xffffffffffffffff) [ 692.357035][T26632] device bridge613 entered promiscuous mode [ 692.369154][T26634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 692.395397][T26634] bond183 (uninitialized): Released all slaves [ 692.489176][T26637] bond563: (slave vlan400): making interface the new active one [ 692.511451][T26637] bond563: (slave vlan400): Enslaving as an active interface with an up link 15:42:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfe0f0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:54 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:42:54 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x3ff, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 15:42:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000001ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 692.540607][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 692.569532][T26649] bond164 (uninitialized): Released all slaves 15:42:54 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/232, 0xe8, 0x0) 15:42:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000017770000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 692.643140][T26669] loop3: detected capacity change from 0 to 87 [ 692.745823][ T26] audit: type=1804 audit(1639928574.328:33): pid=26676 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1180/file1/bus" dev="sda1" ino=1217 res=1 errno=0 [ 692.785169][T26654] device bridge358 entered promiscuous mode [ 692.815720][T26658] bond356: (slave vlan279): making interface the new active one [ 692.829152][T26658] bond356: (slave vlan279): Enslaving as an active interface with an up link 15:42:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xb000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:54 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 692.893643][T26666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 692.925291][T26666] bond183 (uninitialized): Released all slaves 15:42:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000002ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 692.956582][T26670] device bridge614 entered promiscuous mode [ 693.043995][T26686] loop3: detected capacity change from 0 to 87 [ 693.088846][T26674] bond564: (slave vlan401): making interface the new active one [ 693.106440][ T26] audit: type=1804 audit(1639928574.688:34): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1181/file1/bus" dev="loop3" ino=1048596 res=1 errno=0 15:42:54 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 693.157001][T26674] bond564: (slave vlan401): Enslaving as an active interface with an up link [ 693.167523][T26675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 693.180201][T26675] bond164 (uninitialized): Released all slaves [ 693.197486][T26679] validate_nla: 5 callbacks suppressed 15:42:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000007a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfeff0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 693.197501][T26679] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 693.282593][T26681] device bridge359 entered promiscuous mode 15:42:54 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 693.342205][T26695] loop3: detected capacity change from 0 to 87 [ 693.366797][ T26] audit: type=1804 audit(1639928574.948:35): pid=26695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1182/file1/bus" dev="loop3" ino=1048597 res=1 errno=0 [ 693.447135][T26684] bond357: (slave vlan280): making interface the new active one 15:42:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xc000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 693.502727][T26684] bond357: (slave vlan280): Enslaving as an active interface with an up link [ 693.511605][T26685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 693.512158][T26698] loop3: detected capacity change from 0 to 87 [ 693.541191][T26685] bond183 (uninitialized): Released all slaves 15:42:55 executing program 1: syz_open_procfs(0x0, &(0x7f0000001000)='net/unix\x00') getresuid(&(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)) [ 693.596441][T26690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000003ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 693.639078][ T26] audit: type=1804 audit(1639928575.218:36): pid=26698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1183/file1/bus" dev="loop3" ino=1048598 res=1 errno=0 15:42:55 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:42:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x62e1, @any, 0x1}, 0xe) [ 693.701043][T26690] bond164 (uninitialized): Released all slaves [ 693.729403][T26692] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:55 executing program 1: setreuid(0xffffffffffffffff, 0xee01) setreuid(0xee01, 0x0) 15:42:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000810000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 693.846553][T26711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 693.899673][T26711] bond183 (uninitialized): Released all slaves [ 693.900346][T26715] loop3: detected capacity change from 0 to 87 15:42:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000004ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:55 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, @short}, 0x14, &(0x7f0000000200)={&(0x7f0000000180)='\n', 0x1}}, 0x40) [ 693.960471][T26694] device bridge615 entered promiscuous mode [ 694.024187][ T26] audit: type=1804 audit(1639928575.608:37): pid=26721 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1184/file1/bus" dev="sda1" ino=1197 res=1 errno=0 15:42:55 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 694.122578][T26696] bond565: (slave vlan402): making interface the new active one [ 694.151412][T26696] bond565: (slave vlan402): Enslaving as an active interface with an up link [ 694.166102][T26705] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfeffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:55 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f0000000040), 0x40) [ 694.214653][T26726] loop3: detected capacity change from 0 to 87 [ 694.312353][ T26] audit: type=1804 audit(1639928575.888:38): pid=26726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1185/file1/bus" dev="loop3" ino=1048599 res=1 errno=0 [ 694.369779][T26710] device bridge360 entered promiscuous mode [ 694.390061][T26716] bond164 (uninitialized): Released all slaves 15:42:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xd000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) 15:42:56 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:42:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000830000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 694.417635][T26724] bond183 (uninitialized): Released all slaves 15:42:56 executing program 1: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 15:42:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000005ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 694.515073][T26731] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 694.525952][T26741] loop3: detected capacity change from 0 to 87 15:42:56 executing program 1: r0 = socket(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x81, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x90}}], 0x1, 0x0) [ 694.680018][ T26] audit: type=1804 audit(1639928576.258:39): pid=26741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1186/file1/bus" dev="sda1" ino=1206 res=1 errno=0 [ 694.750844][T26733] device bridge616 entered promiscuous mode [ 694.780202][T26735] bond566: (slave vlan403): making interface the new active one 15:42:56 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000001200)=[{0x0, 0x0, 0x7e27}, {&(0x7f0000000180)="b0152b2ae4bcf8596d9c3667e12bf7ab375f3edf99e49c0a225da00cab1f2e720414624336983f1102073eed3d2f4c4a466a51458c047325685d5c875e9620ababd30b1f790d3ccb5599efa0d129af8c539c921e4dc5affff1f2b693638f70a6baf448eea49d7749588b3f7f8e7578de45fcebc6277b8db876f61a8925a64fa40f2ba83b047affae99e6155fb6ea2719817b6e1003b19d04f34e11b7c30428113a19ea91d36d2ad0f5a6ace8f232c74cdbf6351775e05df0ff0be9d8d7fdb64cb15f4f9982233a899bfb9b82f7ab5d68138c40b7ad7a33fd05409624d25cd6521670164ae365119ac99caeb17e6bad6c17b18094559ccea5d5e26c0e07cdb95bb0e949e1e5302235822e8fd2f759b374e8c98d9048b7a8b90431bccb3efd0d75698a879841c8565ac23c3e9f695ed0601dd7f2cbc45daa21c1af144462948ad936dc6bd53d4a8733a642b64e5ef070fee331b5f0edb57239cbb8050e4d9a622c25e08520490f2e5af1b965f7c352df5e25cde73606aff4fef488e21c4bbe6316cca9e81ac623c375e6e5f75a8e28234760efaa5d3584934b5e54bea0020b8316183f6fe213c31db947c7634d67c6d941061189f4cedb75422f849a505142197a", 0x1c0, 0x8}]) [ 694.795526][T26735] bond566: (slave vlan403): Enslaving as an active interface with an up link [ 694.805998][T26743] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 694.859918][T26740] bond164 (uninitialized): Released all slaves 15:42:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xff0f0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000047880000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000006ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 694.939590][T26749] device bridge361 entered promiscuous mode [ 694.960310][T26750] bond183 (uninitialized): Released all slaves [ 695.017097][T26761] loop1: detected capacity change from 0 to 126 [ 695.074695][T26751] bond359: (slave vlan281): making interface the new active one [ 695.107863][T26751] bond359: (slave vlan281): Enslaving as an active interface with an up link [ 695.130939][T26758] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xe000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000280)) 15:42:56 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x3, &(0x7f00000000c0)={0x0}, 0x20) 15:42:56 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:42:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) [ 695.339188][T26760] device bridge617 entered promiscuous mode [ 695.410587][T26763] bond567: (slave vlan404): making interface the new active one [ 695.427123][T26763] bond567: (slave vlan404): Enslaving as an active interface with an up link 15:42:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xff7f0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 695.488679][T26764] bond183 (uninitialized): Released all slaves 15:42:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000007ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 695.647627][T26781] bond183 (uninitialized): Released all slaves 15:42:57 executing program 1: bpf$OBJ_GET_PROG(0x6, 0x0, 0x0) 15:42:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000008ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 695.705621][T26766] bond164 (uninitialized): Released all slaves [ 695.741796][T26770] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000048880000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 695.839595][T26789] loop3: detected capacity change from 0 to 87 15:42:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x81, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) [ 695.904066][T26774] device bridge362 entered promiscuous mode 15:42:57 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) [ 695.966757][ T26] audit: type=1804 audit(1639928577.548:40): pid=26789 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1187/file1/bus" dev="loop3" ino=1048600 res=1 errno=0 [ 696.046886][T26777] bond360: (slave vlan282): making interface the new active one [ 696.058257][T26789] syz-executor.3: attempt to access beyond end of device [ 696.058257][T26789] loop3: rw=2049, want=90, limit=87 [ 696.061680][T26777] bond360: (slave vlan282): Enslaving as an active interface with an up link [ 696.094810][T26783] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 696.111955][T26789] Buffer I/O error on dev loop3, logical block 44, lost async page write 15:42:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 15:42:57 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 696.179675][T26785] device bridge618 entered promiscuous mode [ 696.221962][T26790] bond568: (slave vlan405): making interface the new active one [ 696.238142][T26790] bond568: (slave vlan405): Enslaving as an active interface with an up link [ 696.254462][T26792] bond164 (uninitialized): Released all slaves 15:42:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000cb0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 696.282606][T26793] bond183 (uninitialized): Released all slaves [ 696.293277][T26806] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:42:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000009ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffff0300, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:58 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={0x0, 0xe}}, 0x0) 15:42:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000aff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 696.390718][T26809] device bridge363 entered promiscuous mode [ 696.411212][T26813] bond183 (uninitialized): Released all slaves [ 696.446353][T26812] loop3: detected capacity change from 0 to 87 [ 696.482499][T26806] bond361: (slave vlan283): making interface the new active one [ 696.497606][T26806] bond361: (slave vlan283): Enslaving as an active interface with an up link [ 696.514779][T26816] bond164 (uninitialized): Released all slaves [ 696.552473][ T26] audit: type=1804 audit(1639928578.128:41): pid=26821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1188/file1/bus" dev="sda1" ino=1210 res=1 errno=0 15:42:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) 15:42:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x10000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000005fd0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 696.599593][T26822] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:42:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x1}, 0x14}}, 0x0) [ 696.687849][T26824] __nla_validate_parse: 11 callbacks suppressed [ 696.687866][T26824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.721155][T26824] bond183 (uninitialized): Released all slaves 15:42:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x13, 0x0, &(0x7f0000000280)) [ 696.765244][T26826] device bridge619 entered promiscuous mode 15:42:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000bff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 697.046385][T26822] bond569: (slave vlan406): making interface the new active one [ 697.089850][T26822] bond569: (slave vlan406): Enslaving as an active interface with an up link [ 697.102506][T26833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 697.115726][T26833] bond164 (uninitialized): Released all slaves [ 697.141605][T26834] device bridge364 entered promiscuous mode [ 697.157555][T26841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 697.185366][T26841] bond183 (uninitialized): Released all slaves 15:42:58 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) 15:42:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x11000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffffa888, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:42:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000cff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600007fff0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:58 executing program 1: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 15:42:58 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={0x0}, 0x7}, 0x0) 15:42:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)=""/143}, 0x20) [ 697.381512][T26850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 697.385012][T26860] loop3: detected capacity change from 0 to 87 15:42:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x24}}, 0x0) [ 697.452852][T26850] bond164 (uninitialized): Released all slaves 15:42:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000400300ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:59 executing program 1: bpf$MAP_CREATE(0xd, &(0x7f0000000040), 0x40) 15:42:59 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) [ 697.541245][T26854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 697.560310][T26854] bond183 (uninitialized): Released all slaves [ 697.584398][T26858] device bridge365 entered promiscuous mode [ 697.604167][T26856] device bridge620 entered promiscuous mode 15:42:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000dff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x12000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 697.637609][T26861] bond363: (slave vlan284): making interface the new active one [ 697.650397][T26861] bond363: (slave vlan284): Enslaving as an active interface with an up link [ 697.702536][T26848] bond570: (slave vlan407): making interface the new active one [ 697.725796][T26848] bond570: (slave vlan407): Enslaving as an active interface with an up link [ 697.737533][T26872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffffff7f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 697.749109][T26872] bond164 (uninitialized): Released all slaves 15:42:59 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) [ 697.799337][T26876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:42:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000034000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 697.852077][T26878] loop3: detected capacity change from 0 to 87 [ 697.881654][T26876] bond183 (uninitialized): Released all slaves 15:42:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000eff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:59 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000001c0), 0x4) [ 698.015918][T26894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 698.034718][T26894] bond183 (uninitialized): Released all slaves 15:42:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000fff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:42:59 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) 15:42:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x6, 0x0, &(0x7f0000000280)) [ 698.148092][T26886] device bridge366 entered promiscuous mode [ 698.158118][T26887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000ffffe000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 698.205485][T26887] bond164 (uninitialized): Released all slaves 15:42:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0xfe, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra, @ra, @generic={0x0, 0x11, "5259ce5ee213a3c807d9c3b32c691079d1"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x797, "a97009a5e1a6e900f4c65d9e80b2f3e30899ff285bbc1e66bb51e945378e81010ec53c21f27cb54e4115c40648ddb9e69e877c0c28a109c9cc37f6eb756bb9c62489b8eccf799deb27c6977f1025fef426ac6cdc73f33e54d176fa92268d838581a3b7a85b30d37c36a2164fe86d043f6809990f9abb777dffefe96efd9a77db96c764abe66f68132a126f992a677aa8a85558cbb67a947275c58bdf0bbacd3dd6b01e03fa6bdf7f9929f17d4fe42a4a8172b121d6b071fd5cd50fa8347ed82e494a17f774817e28e34138d626cc46bd4b97d6d372832206e40fa2d33caad5ba1658145fd12ff85f102d698592e3eb9136d91c4551057390f66c5350691dc419901d337e29aa4aae33aecc7cf92bd2e09ceca205413faead2348c8042c160f734badd9a7d88469ff69e29627a0a21d18f8604dd7984c32a80b1de3758a30f68dcbebd8c17aa62f3cfe1f0883263a27ba6ee18aa1120376b959f68856b5cc76b819c1dec1d14e6773fe2f6ff283732c3aacc27401ff558889a8928191c136696d7fdd851ce684d7acc0548572c97baddfafaccc2505c6743ed3494fa8f0454e1a9d669f4043a0fd8a59a7cfa0281557d975ca0e12af1723dacf0fd60dfda275d0442bf85fc52df8e77467b070de05cafc2eab26491085ccfbd203c4f9525119fc44f458228e21e490ed42852bf1386e853d169506c5d19b4601ea02b75083a78b7124ef4ca31a7232b144a686b13c394634e302fa66444bdb2d5bd36e4c9efdca7c41d41b09e4a04699570787a32840c65f29d896705b074cb360cee62c23e326eff0788ae8eba50106ee31873e920aba40f855e93a4b08192d4407df730a71d02b77876c48fc046b7fb7950808a8b07e5119ea3a7eefb423c5e875a68105753b00e9e3677eb5a3c99f6d99c96f7a1c07f4fceaaebdf04ea3e3b640fbdd8242d16868989b9fa2b19c056bc85fcdef3a74c60943123381f5cf01533af52eab9ad87d2d736a428293597ce65fbe7b02e2dedade3b921a3dabf8d75ed5ad0b55e161c492560cb97898f60d429dee61ccfac2519dbf0e9d22945a55782291e5bf7644355c198f71a450346ff368519b7bce28fd2246c6fc1517cf07c1ecda04896b83914cdb777ce46c2e1c6531fa3a925b48615215479f2bea84553b2b433178e3561e7388aac568ba187a1ce561ca17b419000b35c9905b7b9c6d5a3e9ba502ab9ad874767e9385fa3cc7f9c0010a46ea0dbdce7cc9acf7a928b448bbc21f181bfc2b2bc0c2bee8ef1e065c0f16499e1e6e9b4ec07cb3b05dafe682e324fa6607e8f3ccbe6554ec2c4cc3ec396635043cb1b3f30aab9f165b0b938dc17d2c43a75436a5cb14609bf5f3ff7046be695be6479af12e72bfca0c3cecfe7720f5e46f62bc60fa2116f2e96b4c5cd19e29b935910d90b85cd32db76c3f5cea8e34afe69728f1dd03af9baded0225194aa63d99eb0f446ec9a7947e2044460066f3114c1354f5810bf4f5fd8c36b731cbe0cf85992fb896ebfc48e03f32e15f844c548ea03dba75a36883bbd8c7da661d7b9ffd216db4794e7b61afbc027cd436e471a2263eef58d9e4028d2de013e0f0d7df49df7eda6eddc3de6127979b670c9f0810664f92e986ad4d3d4280bbcf5eeb60de7a2504c2311dc635a27ed5433c392cc40d5e14d9a96759b2649d170921b6042147e048b6f9b15d065a90cacbad71a6d567293a6052a7a481dbc22896ca26dcc2f96d20df490415bfbbdb7517c7c3df96e6307e58ad286294abaa86c8e79b12eb635ea60eb7116495cd228d57ae206c8b9df9a62c57fe85cabcd808bcb77d6e24aca16c041085a46aae403c1a48f54115161982aeb14c3beefb06a3057c68d6ef26f18f889c499feed4eb0c653d21c1314a2c85c54f64953eed81d0cfc0504616e03dfdc813c6fdde1151e96c4cddf1e4337e8744eaf2cb951faf6bce70b1b399a04984b655eefcd295eecceee5794362da2c5951eac1300d7e8dc995a29ffb5072b964d989b198d2927dabfe01d7ceb7fdeeaeae889ad8deafbf63360d54ee46c41993dd6904e3f61fbedcb2af23619efabb57c7497eab99ce5351cbd6f35bb39335a5030c4951cc35237deab6e342d8ed252ee39d31f333c518eb8b6165e14d3134f0fb0c5e85127a2e8daac24ea2fadf301d0b63a43eb158b95cf38cb35d1d3e910351cc6e5a905d4a9a86e8fb25c25b516c8165ab7b98691f87fa84a3db88b00848f56d7b5878dbf97ec4fa60d738ab86ebb09f8e330b3a30bcaa8ef656533edae5e1987d1b027e4a6c5e047037de3fd21b0077ae74eae0366b34138976ddf377ec50eb7f71ecd966b0d1c281fdc6ed95ca90aa4aeb88094d2097cfb4ffdd9193c2454e33a1703f5fed4de1f62e9c8e2c2f08420d6d70996de4c97aa1d4f024b167fc29e94994e12c93991b7ff71584b4726dc26b9210d6339ecd8a8e6d411cd42a348a27e0d33169bb5d6bde04c203251f2cb15986934df0f2dcd516c2bdfef2e75f01646796b29a5b28c58d2aefab460d99636610e9b09238ae60c66feadb28e616bcc0aa9941238509653389c44679f156f970ef365385e065acc4bd1f307c30b6857a6a3673de374ebe633ac2b82e61f51dd00f042261c1665f0c4c3b975194a3c20424002ec8886bcbfb82f44ce4063de01d47d8da860623dc7295e37fabd62b851c19232b1d50b329549e8df776259d9c266e6df37d6b2c39987023b77c1e67d94a39c0"}]}, 0x800) [ 698.267523][T26905] loop3: detected capacity change from 0 to 87 [ 698.306741][T26890] bond364: (slave vlan285): making interface the new active one 15:42:59 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 698.409744][T26890] bond364: (slave vlan285): Enslaving as an active interface with an up link [ 698.453198][T26892] device bridge621 entered promiscuous mode 15:43:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x18000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 698.528199][T26895] bond571: (slave vlan408): making interface the new active one [ 698.539109][T26912] loop3: detected capacity change from 0 to 87 [ 698.565110][T26895] bond571: (slave vlan408): Enslaving as an active interface with an up link [ 698.594077][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 698.608624][ T26] audit: type=1804 audit(1639928580.188:42): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1192/bus" dev="sda1" ino=1209 res=1 errno=0 [ 698.617992][T26901] bond183 (uninitialized): Released all slaves 15:43:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffffff9e, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0xb, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}}, 0x0) 15:43:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000010ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 698.661203][T26916] device bridge367 entered promiscuous mode 15:43:00 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 698.715701][T26908] bond164 (uninitialized): Released all slaves 15:43:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000001ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 698.765584][T26920] validate_nla: 5 callbacks suppressed [ 698.765601][T26920] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 698.766456][T26914] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000280)) 15:43:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) [ 698.889427][T26929] loop3: detected capacity change from 0 to 87 [ 698.926138][T26930] bond164 (uninitialized): Released all slaves 15:43:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000002ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 698.968140][T26916] bond365: (slave vlan286): making interface the new active one [ 699.006304][T26916] bond365: (slave vlan286): Enslaving as an active interface with an up link 15:43:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x20000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 699.019826][ T26] audit: type=1804 audit(1639928580.598:43): pid=26929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1193/bus" dev="sda1" ino=1191 res=1 errno=0 15:43:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000011ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 699.076516][T26922] bond183 (uninitialized): Released all slaves [ 699.101146][T26924] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 699.180328][T26927] device bridge622 entered promiscuous mode [ 699.224652][T26934] bond572: (slave vlan409): making interface the new active one [ 699.239572][T26934] bond572: (slave vlan409): Enslaving as an active interface with an up link [ 699.257542][T26938] bond164 (uninitialized): Released all slaves 15:43:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffffffc3, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000003ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 699.274958][T26939] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:00 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x3, 0x0, 0x0) [ 699.363429][T26943] device bridge368 entered promiscuous mode 15:43:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = semget(0x3, 0x3, 0x279) r1 = semget(0x1, 0x0, 0x0) semctl$GETVAL(r1, 0x3, 0xc, 0x0) semctl$GETZCNT(r1, 0x1, 0x3, 0x0) r2 = semget(0x1, 0x0, 0x0) semctl$GETVAL(r2, 0x3, 0xc, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x2, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000240)=""/16, &(0x7f0000000280)=0x10) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000140)=""/204) 15:43:01 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000001500)="24ad1e4748b34ae632ad50b7d2169b1dddcfdaff9d38b3d8e5e5bbcfc3234e7a307b754e2add307b3930db7bb3b6eec40d03d4d03c9e5f17a7e28d6eff8ef5bf44861eba8a0473c088d3fcd39693056e46019e79616a4b13f418874f5175096d3a34585c14006a167e5b91487ab28bc401ac5ffa33afc9a08c11471f5de2611b4bb0617a6213e21a748c77f2f50193a9a852b6b578d018b6c1629855315eb1777fe4b7b464d9f9db8a6c293282f2653f9946a0fb0d7d123c8e163db569c05e555f0d507af515d56be0df5a9ed4ad3d7ad7e59e0f00cad4e80e86ccf5daf444a11d9f5d215c2e108f2e01221742e085a9c51e55a939267c37e67f4173ed721f695d571a3b8f2c2237f51ff7a8974e299400740b6889b16d1f70a7c29e502b342d4562f12abe6e73af24aa90b51b323e4f193661ccf4b41dce25522b9c4187da006917104267468a53e08755ced4ebd3a78c0a81d25354d1c6b6870fc944cbab0cf78b24ab025bd5796c16d29495372c4d174a250c36d0920fdda443f2bd7118254d2adba66b103cf6bba74fd7cbbfa5f2fe2695f1785653f1c04e9211f96936960dfe027c53b1aa198b8898cbbb7786ea60cf1a592d93bed330943718c4b5cc5c537e7cbad44ceca92d38557745d98ccf41b0087a5ba58ed726a76a10fa31ecd1e4b11155a49d27e52da5675cdec35c37e4cdca1169f02b5da193423c44149298544abfdd34264b427a18e024e48e3affdfdd9641eeff03785ddb3e743aabbfd1aad0b45afd2e6b62ef9547595963e0e4bea4b763d089e84133dca93e0cfdfd210e1e741beaa360bce33adf21f079789a43bac13744007abb1267a82163ffa2f754aa51c9869e3a0474063fe1e0dfe889dbd18ac1e4b634bb5f28e595b7e3b15dc98d9850e9664bcc3fb920f7a8ab36262922fa1745ca27e3d849164e65c17fe9781ce11ff6eb17dcc4bd2128a5ffd77d97ac7763e79fc49e3113d7e940c4e4c11fb82c2f5a98a93c2ec2ddb2cb507ace09b278af699eec78ba7458b359a7f5d87fa22a6b8e3ebf02649e995f118dda95249a678a26bc54e948c5fb99bb903bdb1c9b812fea62cbb5cacac5c42fa9542bdef545cc5a4663d958b7cd49e542e4990d2f588c57c46ae457b77a1321782697b748dfb425d1167ae8bc8a224e9d04fe841bc61491e119164255f3ec1f91a6c24064c7ad4167da473b25aecc9410e2d5f15df65163663870da090f3f708d93a26c6013db7bf3bdabab36a5900c150c2eeccdfc483057665965efdd00c7f633cb932b598c040735701e6b56617e83ab9f3d3964625ecf1d086b2e17ea3939680cf3faef3574c8b2cd64d38765f3510bce08bb587abfbc1831b503a76d216d12fc0b44c56200eda887e172b49a24e476c8f8e459e4c0a694a8200a4c2472fe99f3ff1594a3c2e12f8051f6b093c84824e8942716ba3cd0d6e072e091b610417a9bab37f5afc2a936fb4902e3897afc06a8a95baf1a1947ef9012ad2f13237112254916aab331e59c918cc1c775440e490b48c99d84524cb7441f501969e5aad5e9cb4f2d2f04bd3fbba985913701b129fb0dff41fbd48da9545f1c49925ace10c2b3889fe45067df954c187d4aeb305e3d7320bb100ae755ad41f390fef3ecfacbd2a330cdd2199899350f2ee9fec51842ea0846443065c418abfe8d46daf71def5aff71a963d88a306f134f7beadb30bdb645c476d3afcc26d4a3b46745dcdbe7a0937d3c30f37877599a995f51d2cadb89a495afc84bb9e74102695d465a0a9feaf2fc9eaee8896cf13658b1e5f2e81210e0358a8ed9bdf33d721e5692a0c5bc950b8afd59016f08f34acad17bf5039a54d76650476ce665bd26b5aedaf5ca0f5a220b18b806bfaa056a6188ba194a92c8748139f1f1e800302521d9031fa36ea5af53c341a736ff0a1be9d4f92186f1844c7e1792cf720a856f49c1e055dd08f052cc9c423766010c2d652fd53f671df20c15f6a9bb4c364cc62c9fc212c7168653d5e0e220613e6acb16de9cf8ea7fe698b8c2afec2fdbee28fc4d7ba58758a6b1b687ab0bacff3d59ca2156bdcd0f4c5150d50f9b49653a7f53c0087d7e9d1dca213f69915b785d7933c17d520ac8b49ddcae93964cdd66379b6055849e5e06e3319ab7febcd7539763e8e0f2fa48d94f555b6eccf0f49a092192eb4efedc0c0015a95241a721c6c4d812a89e6fcd78ed8549ba7132240c9ab7eb3e8df10fdf1939663deff4c7d771c1d99350bdc2f4b406cbbe4caedfb4518ed387540c49a75c17431a207139f6e0b9ea2127083895bc698f941787a8e09bd1fa1674bc31287afc40c0c8cbbb0d69f9c4bde7fd87639f6de6e331c879af3c4189a0e764b1339cbf46dc454cd8f8143b70ad0c1d0fdf24d7282c9965818e8334fc8871e1b5ce13c8bc7fefa7d960805ffdffa4a19458e7ad8a1455600c1b87ec25f0667f8097ec35a13cef30957eb8c93ff067bbf2bed9da2b27bf3e9c6ced7827ad771ddd6be46bafc72c3081ed95219a256dc688664d2761ff7b1668d6e1de3edffde154474af8b834f9fd5f08ea840b6e1b0bb422d076e9581f677bc57b2c1eef83850f61f529b63d32e98cbea5fa08be09697bb374c902b2f6d735c941ce07339df0a8b5f153b5b348b9a0160d0374c570661d2adce7a61cd814aeac15374b8ae6e39d4320bac39003207af2aa6d4cef1a0e10098fca43ada62d88e2c218d3b987f658a96eb825eca3dbcee410c4fba2eb792d25b5d5b138c4467dfe19ed3e90517bc3be32e818cf62996f9c78582e1d0e6266024c2b5a8cf1fa2d48aa414053ddac91e72583efc27b566d3981b6c2645884718cace3df5d88257d5caa578c51b77d424693b9bd4b88fea96883cb141f98f6047624a61a9bf7081eaae9e39c40adc66c3a1cd4d36cac7a54c2a00235fbac0c2ea5981f08537d5e37de5caa8c89edb9297e4310e07ab398c4f5f83ca970f94b3aad3da4bd4d89104fc35a064f8d5d68705ee40e81006fce2bcd2d29aff92de6c9f70a4cc182a43d54a9379feec2c34c721d408539e7c4fadb738428dfeaf9b45c8ac96a7435c3272c15aa96acdae129ed2a42f50732a16e05faa39bab24774aea0db03977729b828f2072e44b50af3520893cf8f0d1a9fd3d5db7030e669889117f28c27d30570b790b6d726fa2d9408be0fe8dec2357ad0796416fff2751641031540b67208bf506a97a0a57a9c909b80e4cf3bf25aa611d91981b04986fc65c671dbce656b1098d2c9d7f5485014ec4183ee0250a42d0689f09e7e241e1421f54e7a7e928cdb896dcaec6f29c7a2da31adb3a5cf78413ddefa89b9bf345e07702596e379fb94f05b16d1fea218ed7b71e18ec6bea7d0bfde5e5f52cbd53e5cebd85460efc17d7a40cac6b08acda822e14efc380ba7f03463e2d420e0ace786f43932ade594e40c0569fa2176270091552b480a7a71e4fe6d10fb254b5435cdc61f445a8fd0ad73846c9aace49141f00db6066edc02b3b989d24e6aabbb6cc5ffd70e215c9e658aa5394038ef54a35cc3139ec538050d1fd2478ba6289b0ea491baa423a9251df90c9af1528861eaa0e7eea7af80afc59d9176d76ac4323f72f6de3fd2b836b275f377fd6ab551332858f50368c49ef20a60585cb9d62e868511143996c1704701913e04a3abfee732a44d8d66a647f3af21793702b4a20ebba50fdbb97e51c026f874634ed527188260bbc16bac09d62b7887d813f8218934ddbc5338862f29cb5e7c88235d984c01feb9158b3bb776b99450fe167b5b80927c634f717fd19b7e2a2e9baccfcc4f7f7b25373a491f11336b892491311adaab753f671cd31b76e1341d75f40b21db3bac170754517cc35a5666f78a4fc2fde160b2822e891fd7fe4d03d12a96e0828eaa082aacad9c4c1cc2e7b73ed88aaa6bf969cae2116a87de7a7ba249443b29e148c10b275dc0156d933645a39a0d108b7beb861ec938d8c794bfcb9c65b7844806b65d4cfd581a884163a8e3d44de25b2ad52cd67e354692b1478f46d77a37448509e30bcc3c50b075b82df728c24fea47e503ff7f55986e36d21ea1af554d8f90643bce041463a9407a34bcc5d19cdef44c7a26d6bca2b8f5408d10740d1ddab8cbceb3dcb335b3bbfceaac4171ca41407937b8080740e48480c027de2e25c23030191ee9c11f6a78a3e84ae11dc3bfa51218a135ee1f7c5a3d87c6aa2e965c9cf40615c4a3cb553f836041d9497ec713f087f715def704151d278247f7e5ef306cea8dd689543be12134b1d77e7786b7eca6104191a84186cd193d65d92c0f87416435640668e4ff75a0fdad89f8f0009d1b9b07fb33a9ca2de33a44ebfd1e41824a62217cf26299d32a7757c28d841f14e7a9db52e2bfb1919c9848779ab56ec99a54db8b4528da3cedb7d1e61ec8ff392d8c30da355d5b670ab669036327d8ff9484af44e329d51e3ce2e3dec8345dd046f404b69a57213de4fa0e0909e5d3f7a54ec5d8c70301420a634efa922eeef252802413b4c6f1b09096ab28a46e9eddefde000bb6625dbb9374d9dcd9dac21be99760b9e817eeebe2cd71f990247b668dc4ab1c09980432517ff823536408e03c8c44ee6f29d1c7b6cdda154b7d80398bc3ae9c989b65133392edd88a52527fde5a6f72077e6a7cddf47e26fdf2bbff26ff2f52c503cabb5e5a583084913eee6e4750daf79d027569bc1f88c5950707e17d07cb559a00c1b832fd42dd6dc0c3b0d371f97b4f666b0dc157da51279c49c19546277fa5a778d06512e2e3942f29bbbbcf5359cfa47c8631e2fbd7678a0a507b4c4637d893911aa4b3799eef036f1e5dcd881c77e9a0aaa2aa6826defabb2d344c2f4eebbada21c937f05424caf0ce23740c6b884a9088e1dd764f1728c1fe2ecc74d42a8f1fb7b958fb12fc5392dd6f23a869ed347c6d32da176c7a3f0de9edbbc46328822398a89f0ed89460f59d54814dc4fee89142c58d05fe1c2fc794093f7aa21b16cc63f83f94569bf6b7e193daef711d1c253b01b1039aca926b9ec82b7edc701242b7bf0241d69304c4a05cdd4edf2f4152820878ee9d1195450422fb2c30372072b732f59e4fd9959f0f074c0edf7ab72853f02ad3220dcabb51875cd6355c609b2ce53fcf611914325a0326fe68f662c0b6364e3ee26ad5936f1fb238485935556a33bbebebd7f4959558768fe0020686db5f80b097d0715dc13fdabfeaa65b1417f27527fc35f3e26508973eef007d47626a30d2b5c2ee5555a9aec93535c538586ac7fc3f3e40565e3ef901d22f8189d620bccc12fbebe8277ca416c23efb716f4111925bca5a8601fea4462b8466771da6b198e4ac8c1634533d5850d640e2f491c01f34ed1e8257c82cf44193dba7531f20d3f2e579d685e19f8151dec8bf9a04ee9aee6cd67bf2ff820386cb5bf51029a8a26651f982995b78d6e6d35192c27a3bdc52a5f1c1c149115a4611fed7308158410bd0032152ad93d49a348deacb31c8a535748da915b0f954449fc93e9fab0c2db21d083b318965ebf233a1b12b0e76c2d0215933dabffab9c55ace9f0189bc7180f2efe612ad23cc29f0d3beb9d8926e2e58a42221432945ff511158d56fdcc65f887fb577ab2006d496795dbc754d2466d4fc9a11250d0888d9a24b7a3b569f53c938a0d1aa7530da65c0ac3e99aa5bbb265afa35e504b08ebbefa62409b93861467577ba5e1de321d65e984055a715cdbfad5a39a86f98d0ab76d9c4c2080f365daf1ca1243d011ec0b39360bc0a33d0468", 0x1000}]) [ 699.509872][T26945] bond366: (slave vlan287): making interface the new active one [ 699.625272][T26945] bond366: (slave vlan287): Enslaving as an active interface with an up link [ 699.675580][T26946] bond183 (uninitialized): Released all slaves [ 699.698222][T26951] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:01 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:01 executing program 1: semctl$GETZCNT(0x0, 0x0, 0x10, 0x0) 15:43:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000012ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x21000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 699.777447][T26952] bond164 (uninitialized): Released all slaves [ 699.802087][T26955] device bridge623 entered promiscuous mode [ 699.837896][T26958] bond573: (slave vlan410): making interface the new active one [ 699.855697][T26958] bond573: (slave vlan410): Enslaving as an active interface with an up link [ 699.871985][T26967] bond183 (uninitialized): Released all slaves 15:43:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000004ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 15:43:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffffffef, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 699.989745][T26971] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 700.028398][T26973] bond164 (uninitialized): Released all slaves 15:43:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000005ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000018ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 700.065792][T26979] loop3: detected capacity change from 0 to 87 [ 700.128149][T26974] device bridge369 entered promiscuous mode [ 700.178216][T26982] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 700.206906][T26971] bond367: (slave vlan288): making interface the new active one [ 700.215936][T26982] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 700.234256][T26971] bond367: (slave vlan288): Enslaving as an active interface with an up link [ 700.238404][ T26] audit: type=1804 audit(1639928581.818:44): pid=26979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1194/bus" dev="sda1" ino=1198 res=1 errno=0 [ 700.246431][T26981] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 700.284575][T26982] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 700.296861][T26982] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 15:43:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x25000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 700.358014][T26984] bond164 (uninitialized): Released all slaves 15:43:02 executing program 1: r0 = socket(0x1d, 0x2, 0x2) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 15:43:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000006ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 700.431283][T26985] device bridge624 entered promiscuous mode [ 700.547678][T26987] bond574: (slave vlan411): making interface the new active one [ 700.564979][T26987] bond574: (slave vlan411): Enslaving as an active interface with an up link [ 700.604926][T26988] bond183 (uninitialized): Released all slaves [ 700.629855][T26992] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 700.692291][T26994] bond164 (uninitialized): Released all slaves [ 700.720233][T26997] device bridge370 entered promiscuous mode [ 700.802287][T26998] bond368: (slave vlan289): making interface the new active one [ 700.821683][T26998] bond368: (slave vlan289): Enslaving as an active interface with an up link 15:43:02 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x20004001) 15:43:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfffffff0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000020ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000007ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x2f000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) [ 700.936859][T27004] bond164 (uninitialized): Released all slaves 15:43:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000008ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 700.977363][T27006] bond183 (uninitialized): Released all slaves 15:43:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000021ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 701.042262][T27009] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:02 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x10}}, 0x14, &(0x7f0000000140)={0x0}}, 0x0) [ 701.111232][ T26] audit: type=1804 audit(1639928582.688:45): pid=27024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1195/bus" dev="sda1" ino=1200 res=1 errno=0 15:43:02 executing program 1: semop(0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2aaaaaaaaaaaac1b) [ 701.185606][T27012] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000150a01070000"], 0x50}, 0x1, 0x0, 0x0, 0x20008081}, 0x10048004) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 701.322175][T27015] device bridge371 entered promiscuous mode [ 701.360286][T27016] device bridge625 entered promiscuous mode [ 701.425034][T27019] bond164 (uninitialized): Released all slaves [ 701.547717][T27022] bond575: (slave vlan412): making interface the new active one [ 701.579127][T27022] bond575: (slave vlan412): Enslaving as an active interface with an up link [ 701.632472][T27020] bond369: (slave vlan290): making interface the new active one [ 701.657676][T27020] bond369: (slave vlan290): Enslaving as an active interface with an up link [ 701.685157][T27028] bond183 (uninitialized): Released all slaves 15:43:03 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000009ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth1_to_team\x00', @ifru_ivalue}) 15:43:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfffffffe, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3a000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000025ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 701.956679][T27038] __nla_validate_parse: 16 callbacks suppressed [ 701.956697][T27038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 701.991223][T27038] bond164 (uninitialized): Released all slaves 15:43:03 executing program 1: clock_adjtime(0x0, &(0x7f00000004c0)={0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}) [ 702.020548][T27045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000aff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 702.076375][ T26] audit: type=1804 audit(1639928583.658:46): pid=27050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1196/bus" dev="sda1" ino=1197 res=1 errno=0 [ 702.102471][T27045] bond183 (uninitialized): Released all slaves 15:43:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000002fff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:03 executing program 1: clock_adjtime(0x0, &(0x7f00000004c0)={0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}) [ 702.246822][T27047] device bridge626 entered promiscuous mode [ 702.267119][T27048] device bridge372 entered promiscuous mode 15:43:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 702.337925][T27051] bond576: (slave vlan413): making interface the new active one [ 702.352853][T27051] bond576: (slave vlan413): Enslaving as an active interface with an up link 15:43:04 executing program 1: clock_adjtime(0x0, &(0x7f00000004c0)={0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}) [ 702.417940][T27053] bond370: (slave vlan291): making interface the new active one [ 702.434098][T27053] bond370: (slave vlan291): Enslaving as an active interface with an up link [ 702.444133][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 702.462089][T27058] bond164 (uninitialized): Released all slaves [ 702.483892][T27061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 702.540444][T27061] bond183 (uninitialized): Released all slaves [ 702.676592][T27070] device bridge627 entered promiscuous mode [ 702.709807][T27072] bond577: (slave vlan414): making interface the new active one [ 702.727893][T27072] bond577: (slave vlan414): Enslaving as an active interface with an up link 15:43:04 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000bff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:04 executing program 1: clock_adjtime(0x0, &(0x7f00000004c0)={0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}) 15:43:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000003aff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 702.926992][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 702.966067][T27078] bond164 (uninitialized): Released all slaves 15:43:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 15:43:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000cff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 703.006403][ T26] audit: type=1804 audit(1639928584.578:47): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1197/bus" dev="sda1" ino=1216 res=1 errno=0 15:43:04 executing program 1: r0 = socket(0x1d, 0x2, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 15:43:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000040ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 703.118531][T27077] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 703.154667][T27077] bond183 (uninitialized): Released all slaves 15:43:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0x3) [ 703.215508][T27088] device bridge628 entered promiscuous mode [ 703.248470][T27080] device bridge373 entered promiscuous mode 15:43:04 executing program 1: syz_open_dev$dri(&(0x7f0000000640), 0x2, 0x40001) [ 703.360059][T27092] bond578: (slave vlan415): making interface the new active one [ 703.427452][T27092] bond578: (slave vlan415): Enslaving as an active interface with an up link [ 703.475656][T27094] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 703.492093][T27094] bond164 (uninitialized): Released all slaves [ 703.559558][T27087] bond371: (slave vlan292): making interface the new active one [ 703.579849][T27087] bond371: (slave vlan292): Enslaving as an active interface with an up link [ 703.590609][T27098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 703.603859][T27098] bond183 (uninitialized): Released all slaves 15:43:05 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x0, @l2tp={0x2, 0x0, @multicast1}, @xdp, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, @remote}}) 15:43:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000dff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x40000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000041ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 703.839437][T27115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000048ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 703.880228][T27115] bond183 (uninitialized): Released all slaves [ 703.896473][T27114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 703.918917][T27121] loop3: detected capacity change from 0 to 87 [ 703.927981][T27114] bond164 (uninitialized): Released all slaves 15:43:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000eff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 703.967204][T27112] validate_nla: 5 callbacks suppressed [ 703.967222][T27112] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:05 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/libiscsi', 0x418002, 0x0) [ 704.031013][ T26] audit: type=1804 audit(1639928585.608:48): pid=27121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1198/file1/bus" dev="loop3" ino=1048601 res=1 errno=0 15:43:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000580)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0xc) [ 704.077465][T27116] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000240)=""/16, &(0x7f0000000280)=0x10) [ 704.167131][T27119] device bridge374 entered promiscuous mode 15:43:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x40020000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:05 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 704.215842][T27121] syz-executor.3: attempt to access beyond end of device [ 704.215842][T27121] loop3: rw=34817, want=88, limit=87 15:43:05 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000080)) 15:43:05 executing program 1: syz_mount_image$gfs2meta(&(0x7f0000001340), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x110a1, &(0x7f0000001600)) [ 704.279911][T27120] device bridge629 entered promiscuous mode 15:43:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 704.350535][T27124] bond183 (uninitialized): Released all slaves [ 704.414818][T27129] bond164 (uninitialized): Released all slaves 15:43:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000004cff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f0000000280)) [ 704.497623][T27138] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000000fff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'vlan0\x00', @ifru_flags}) [ 704.549828][T27154] loop3: detected capacity change from 0 to 87 [ 704.614356][ T26] audit: type=1804 audit(1639928586.188:49): pid=27154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1199/file1/bus" dev="sda1" ino=1192 res=1 errno=0 [ 704.699036][T27141] device bridge375 entered promiscuous mode 15:43:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x41000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 704.751917][T27144] bond373: (slave vlan293): making interface the new active one [ 704.767777][T27144] bond373: (slave vlan293): Enslaving as an active interface with an up link [ 704.777851][T27149] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000060ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 704.871498][T27151] bond183 (uninitialized): Released all slaves [ 704.942004][T27152] device bridge630 entered promiscuous mode [ 705.024084][T27157] bond580: (slave vlan416): making interface the new active one [ 705.039430][T27157] bond580: (slave vlan416): Enslaving as an active interface with an up link [ 705.057629][T27160] bond164 (uninitialized): Released all slaves 15:43:06 executing program 1: r0 = socket(0x1d, 0x2, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 15:43:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000010ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 705.078076][T27164] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 705.227282][T27166] device bridge376 entered promiscuous mode [ 705.272187][T27167] bond374: (slave vlan294): making interface the new active one [ 705.298733][T27167] bond374: (slave vlan294): Enslaving as an active interface with an up link 15:43:06 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x5, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:06 executing program 1: r0 = socket(0x2, 0x3, 0x4) bind$inet(r0, 0x0, 0x0) 15:43:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x48000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 705.355249][T27169] bond183 (uninitialized): Released all slaves 15:43:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000011ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x4}, 0x40) [ 705.413886][T27175] bond164 (uninitialized): Released all slaves [ 705.434049][T27181] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000064ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:07 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xf, 0x0, 0x0) 15:43:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x7, 0x0, &(0x7f0000000280)) 15:43:07 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 705.634134][T27201] loop3: detected capacity change from 0 to 87 [ 705.654324][T27185] device bridge631 entered promiscuous mode 15:43:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 705.698845][ T26] audit: type=1804 audit(1639928587.278:50): pid=27201 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1200/file1/bus" dev="sda1" ino=1217 res=1 errno=0 [ 705.727890][T27186] bond164 (uninitialized): Released all slaves 15:43:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000012ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 705.764194][T27189] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 706.000324][T27191] bond581: (slave vlan417): making interface the new active one [ 706.021972][T27191] bond581: (slave vlan417): Enslaving as an active interface with an up link [ 706.068518][T27195] device bridge377 entered promiscuous mode [ 706.108287][T27196] bond183 (uninitialized): Released all slaves [ 706.177882][T27200] bond375: (slave vlan295): making interface the new active one [ 706.195600][T27200] bond375: (slave vlan295): Enslaving as an active interface with an up link [ 706.212185][T27210] bond164 (uninitialized): Released all slaves 15:43:08 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 15:43:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x6, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000005865ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4a000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000018ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000068ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 706.574430][T27217] bond183 (uninitialized): Released all slaves [ 706.594315][T27220] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 706.660060][T27229] loop3: detected capacity change from 0 to 87 [ 706.714114][ T26] audit: type=1804 audit(1639928588.298:51): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1201/file1/bus" dev="sda1" ino=1217 res=1 errno=0 15:43:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 706.776311][T27219] bond164 (uninitialized): Released all slaves [ 706.801515][T27223] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000020ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 706.921110][T27227] device bridge632 entered promiscuous mode [ 706.979856][T27226] device bridge378 entered promiscuous mode [ 707.035856][T27231] __nla_validate_parse: 11 callbacks suppressed [ 707.035879][T27231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 707.066329][T27231] bond183 (uninitialized): Released all slaves 15:43:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000006cff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 707.217593][T27232] bond582: (slave vlan418): making interface the new active one [ 707.276144][T27232] bond582: (slave vlan418): Enslaving as an active interface with an up link 15:43:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x7, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 707.370951][T27233] bond376: (slave vlan296): making interface the new active one [ 707.448055][T27233] bond376: (slave vlan296): Enslaving as an active interface with an up link [ 707.479715][T27240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 707.519729][T27240] bond164 (uninitialized): Released all slaves 15:43:09 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x4c000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:09 executing program 1: r0 = semget(0x1, 0x0, 0x0) semctl$GETZCNT(r0, 0x0, 0xd, 0x0) 15:43:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000021ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 707.562150][T27245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000074ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:09 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000200)) [ 707.648406][T27245] bond183 (uninitialized): Released all slaves [ 707.675325][T27248] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 707.774142][T27249] device bridge633 entered promiscuous mode 15:43:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000240)=""/16, &(0x7f0000000280)=0x10) 15:43:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x8, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 707.820354][T27267] loop3: detected capacity change from 0 to 87 [ 707.831839][T27251] bond583: (slave vlan419): making interface the new active one [ 707.849435][T27251] bond583: (slave vlan419): Enslaving as an active interface with an up link [ 707.905971][ T26] audit: type=1804 audit(1639928589.488:52): pid=27267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1202/bus" dev="sda1" ino=1193 res=1 errno=0 15:43:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/143, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20000, 0x4) [ 708.036776][T27258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000025ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 708.094347][T27258] bond164 (uninitialized): Released all slaves [ 708.118953][T27260] device bridge379 entered promiscuous mode 15:43:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x8004, 0x4) [ 708.186052][T27262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 708.211699][T27262] bond183 (uninitialized): Released all slaves 15:43:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 708.276950][T27265] bond377: (slave vlan297): making interface the new active one [ 708.365759][T27265] bond377: (slave vlan297): Enslaving as an active interface with an up link [ 708.446532][T27273] device bridge634 entered promiscuous mode [ 708.498773][T27276] bond584: (slave vlan420): making interface the new active one [ 708.514273][T27276] bond584: (slave vlan420): Enslaving as an active interface with an up link [ 708.524473][T27279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.540371][T27279] bond164 (uninitialized): Released all slaves 15:43:10 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000007aff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 15:43:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x52020000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x9, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000002fff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 708.701464][T27293] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.730739][T27293] bond164 (uninitialized): Released all slaves [ 708.758734][T27299] loop3: detected capacity change from 0 to 87 15:43:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000003aff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 708.880600][ T26] audit: type=1804 audit(1639928590.458:53): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1203/bus" dev="sda1" ino=1191 res=1 errno=0 15:43:10 executing program 1: r0 = socket(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001500)={'ip6tnl0\x00', &(0x7f0000001480)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @dev}}) [ 708.986094][T27294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 709.008544][T27294] bond183 (uninitialized): Released all slaves 15:43:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000081ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 709.079059][T27301] device bridge635 entered promiscuous mode [ 709.132268][T27300] device bridge380 entered promiscuous mode [ 709.219822][T27306] bond378: (slave vlan298): making interface the new active one [ 709.247932][T27306] bond378: (slave vlan298): Enslaving as an active interface with an up link 15:43:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x60000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 709.329656][T27305] bond585: (slave vlan421): making interface the new active one [ 709.367820][T27305] bond585: (slave vlan421): Enslaving as an active interface with an up link [ 709.401712][T27308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 709.442441][T27308] bond164 (uninitialized): Released all slaves [ 709.470576][T27316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 709.500653][T27316] bond183 (uninitialized): Released all slaves [ 709.528056][T27318] validate_nla: 4 callbacks suppressed [ 709.528154][T27318] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:11 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xa, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:11 executing program 1: clock_adjtime(0x0, &(0x7f00000004c0)={0xff, 0x0, 0x0, 0x0, 0x0, 0x5}) 15:43:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000040ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000083ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:11 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/143, 0x30a000, 0x1000}, 0x20) [ 709.655096][T27331] loop3: detected capacity change from 0 to 87 [ 709.668386][T27320] device bridge381 entered promiscuous mode [ 709.732498][ T26] audit: type=1804 audit(1639928591.308:54): pid=27331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1204/bus" dev="sda1" ino=1216 res=1 errno=0 15:43:11 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 709.778459][T27322] bond379: (slave vlan299): making interface the new active one [ 709.800362][T27322] bond379: (slave vlan299): Enslaving as an active interface with an up link [ 709.819429][T27330] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x65580000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_ivalue}) [ 709.938635][T27327] bond183 (uninitialized): Released all slaves 15:43:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000004788ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 709.982048][T27332] bond164 (uninitialized): Released all slaves 15:43:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000041ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 710.040651][T27334] device bridge636 entered promiscuous mode 15:43:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 710.091143][T27337] bond586: (slave vlan422): making interface the new active one [ 710.120270][T27337] bond586: (slave vlan422): Enslaving as an active interface with an up link [ 710.131473][T27343] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 710.230769][T27347] device bridge382 entered promiscuous mode [ 710.260950][T27349] bond183 (uninitialized): Released all slaves [ 710.306780][T27351] bond164 (uninitialized): Released all slaves [ 710.395831][T27352] bond380: (slave vlan300): making interface the new active one [ 710.418596][T27352] bond380: (slave vlan300): Enslaving as an active interface with an up link [ 710.434793][T27355] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:12 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0xb, 0x801}, 0x14}}, 0x0) 15:43:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000004888ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000048ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x68000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 710.536049][T27357] device bridge637 entered promiscuous mode 15:43:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0) [ 710.594846][T27370] FAT-fs (loop3): bogus number of reserved sectors [ 710.602588][T27370] FAT-fs (loop3): Can't find a valid FAT filesystem [ 710.619703][ T26] audit: type=1804 audit(1639928592.198:55): pid=27370 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1205/file1/bus" dev="sda1" ino=1191 res=1 errno=0 [ 710.644491][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.681501][T27359] bond587: (slave vlan423): making interface the new active one [ 710.744737][T27359] bond587: (slave vlan423): Enslaving as an active interface with an up link 15:43:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xc, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 710.807376][T27366] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000004cff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 710.867463][T27367] bond164 (uninitialized): Released all slaves [ 710.908438][T27368] bond183 (uninitialized): Released all slaves [ 710.940826][T27371] device bridge383 entered promiscuous mode 15:43:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000ffffa888ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6c000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) [ 710.981624][T27372] bond381: (slave vlan301): making interface the new active one [ 710.995343][T27372] bond381: (slave vlan301): Enslaving as an active interface with an up link [ 711.013991][T27379] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 711.169388][T27381] bond164 (uninitialized): Released all slaves 15:43:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000060ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 711.216454][T27382] device bridge638 entered promiscuous mode [ 711.271592][T27384] bond588: (slave vlan424): making interface the new active one [ 711.302617][T27384] bond588: (slave vlan424): Enslaving as an active interface with an up link [ 711.321365][T27386] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004fc0)) 15:43:13 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 711.421753][T27390] device bridge384 entered promiscuous mode [ 711.524731][T27400] FAT-fs (loop3): bogus number of reserved sectors [ 711.535332][T27400] FAT-fs (loop3): Can't find a valid FAT filesystem [ 711.556311][ T26] audit: type=1804 audit(1639928593.138:56): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1206/file1/bus" dev="sda1" ino=1213 res=1 errno=0 [ 711.581170][ C0] vkms_vblank_simulate: vblank timer overrun 15:43:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/block/loop0', 0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) dup(0xffffffffffffffff) mlock2(&(0x7f0000033000/0x2000)=nil, 0x2000, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00d00, 0x4, 0x0, 0x0, 0x2000000000002) mbind(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0xe5, 0x0, 0x2) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) [ 711.637197][T27393] bond382: (slave vlan302): making interface the new active one [ 711.704519][T27393] bond382: (slave vlan302): Enslaving as an active interface with an up link [ 711.728609][T27392] bond183 (uninitialized): Released all slaves 15:43:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6e0c0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000064ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000ffffff9eff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 711.774387][T27395] bond164 (uninitialized): Released all slaves [ 711.814331][T27398] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 711.835190][T27408] mmap: syz-executor.1 (27408) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 712.031090][T27402] device bridge639 entered promiscuous mode 15:43:14 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 712.402577][T27403] bond589: (slave vlan425): making interface the new active one [ 712.538740][T27403] bond589: (slave vlan425): Enslaving as an active interface with an up link [ 712.622171][T27419] FAT-fs (loop3): bogus number of reserved sectors 15:43:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 712.684830][T27419] FAT-fs (loop3): Can't find a valid FAT filesystem [ 712.734761][ T26] audit: type=1804 audit(1639928594.308:57): pid=27420 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1207/file1/bus" dev="sda1" ino=1213 res=1 errno=0 [ 712.760579][T27410] __nla_validate_parse: 9 callbacks suppressed [ 712.760598][T27410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000005865ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 712.788345][T27413] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 712.925846][T27415] device bridge385 entered promiscuous mode [ 712.970308][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000017a5ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:15 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 713.664104][ T26] audit: type=1804 audit(1639928595.218:58): pid=27433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1208/file1/bus" dev="sda1" ino=1213 res=1 errno=0 15:43:16 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 714.631528][ T26] audit: type=1804 audit(1639928596.208:59): pid=27435 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1209/file1/bus" dev="sda1" ino=1213 res=1 errno=0 15:43:17 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 715.600574][ T26] audit: type=1804 audit(1639928597.178:60): pid=27437 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1210/file1/bus" dev="sda1" ino=1213 res=1 errno=0 15:43:18 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 716.544190][T27439] loop3: detected capacity change from 0 to 87 [ 716.593974][T27439] FAT-fs (loop3): bogus number of reserved sectors [ 716.617837][T27439] FAT-fs (loop3): Can't find a valid FAT filesystem [ 716.652188][ T26] audit: type=1804 audit(1639928598.228:61): pid=27440 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1211/file1/bus" dev="sda1" ino=1213 res=1 errno=0 15:43:18 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002700), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5334, &(0x7f0000002740)) [ 716.742595][T27425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 716.813743][T27426] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 716.919988][T27428] device bridge640 entered promiscuous mode 15:43:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x6f0c0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000068ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:18 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 15:43:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xf, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 716.961780][T27429] bond590: (slave vlan426): making interface the new active one [ 716.976952][T27429] bond590: (slave vlan426): Enslaving as an active interface with an up link [ 716.991399][T27431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000017a6ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 717.051953][T27450] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 717.095116][T27450] device bridge641 entered promiscuous mode [ 717.109265][T27449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 717.128503][T27449] bond164 (uninitialized): Released all slaves 15:43:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000006cff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 717.242585][T27450] bond591: (slave vlan427): making interface the new active one [ 717.260284][T27450] bond591: (slave vlan427): Enslaving as an active interface with an up link [ 717.281724][T27462] device bridge386 entered promiscuous mode 15:43:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x10, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 717.301243][T27454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.336715][T27454] bond183 (uninitialized): Released all slaves 15:43:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000005cfff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 717.369175][T27457] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:19 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 717.420253][T27461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 717.464308][T27461] bond164 (uninitialized): Released all slaves [ 717.498573][T27462] bond383: (slave vlan303): making interface the new active one 15:43:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000074ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x74000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 717.510851][T27462] bond383: (slave vlan303): Enslaving as an active interface with an up link [ 717.520855][T27465] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 717.587658][T27477] loop3: detected capacity change from 0 to 87 [ 717.602068][T27477] FAT-fs (loop3): bogus number of reserved sectors [ 717.607245][T27467] device bridge642 entered promiscuous mode [ 717.623700][T27477] FAT-fs (loop3): Can't find a valid FAT filesystem [ 717.625325][T27470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.635545][ T26] audit: type=1804 audit(1639928599.208:62): pid=27477 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1212/file1/bus" dev="sda1" ino=1209 res=1 errno=0 [ 717.675359][T27470] bond183 (uninitialized): Released all slaves 15:43:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000ffffffefff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 717.762194][T27472] bond592: (slave vlan428): making interface the new active one [ 717.795556][T27472] bond592: (slave vlan428): Enslaving as an active interface with an up link 15:43:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x11, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 717.823766][T27478] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 717.958214][T27480] device bridge387 entered promiscuous mode [ 717.981654][T27491] device bridge643 entered promiscuous mode [ 718.009157][T27482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 718.027288][T27482] bond164 (uninitialized): Released all slaves 15:43:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000001776ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 718.100555][T27483] bond384: (slave vlan304): making interface the new active one [ 718.119697][T27483] bond384: (slave vlan304): Enslaving as an active interface with an up link [ 718.132471][T27485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x7a000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000fffffff0ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 718.156122][T27485] bond183 (uninitialized): Released all slaves [ 718.191942][T27490] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 718.338619][T27491] bond593: (slave vlan429): making interface the new active one [ 718.369152][T27491] bond593: (slave vlan429): Enslaving as an active interface with an up link 15:43:20 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000001777ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 718.383975][T27494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 718.401127][T27494] bond164 (uninitialized): Released all slaves [ 718.422038][T27498] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x12, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 718.526815][T27512] loop3: detected capacity change from 0 to 87 [ 718.545340][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 718.558294][T27512] FAT-fs (loop3): bogus number of reserved sectors [ 718.571284][T27512] FAT-fs (loop3): Can't find a valid FAT filesystem [ 718.575188][T27502] bond183 (uninitialized): Released all slaves [ 718.589589][ T26] audit: type=1804 audit(1639928600.168:63): pid=27512 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1213/file1/bus" dev="sda1" ino=1195 res=1 errno=0 [ 718.659097][T27503] device bridge388 entered promiscuous mode 15:43:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000007fffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 718.702516][T27505] bond385: (slave vlan305): making interface the new active one [ 718.789344][T27505] bond385: (slave vlan305): Enslaving as an active interface with an up link [ 718.801801][T27508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x81000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600000000007aff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 718.829844][T27508] bond164 (uninitialized): Released all slaves [ 718.854877][T27511] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 718.960327][T27514] device bridge644 entered promiscuous mode [ 719.005840][T27517] bond594: (slave vlan430): making interface the new active one [ 719.019636][T27517] bond594: (slave vlan430): Enslaving as an active interface with an up link [ 719.029673][T27519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 719.051220][T27519] bond183 (uninitialized): Released all slaves 15:43:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x18, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 719.080536][T27523] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000088a8ffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 719.214675][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 719.231523][T27525] bond164 (uninitialized): Released all slaves 15:43:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000081ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 719.257151][T27526] device bridge389 entered promiscuous mode [ 719.285027][T27527] bond386: (slave vlan306): making interface the new active one [ 719.302343][T27527] bond386: (slave vlan306): Enslaving as an active interface with an up link 15:43:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x83000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:20 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 719.337041][T27533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 719.370736][T27533] bond183 (uninitialized): Released all slaves [ 719.411681][T27535] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000e0ffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 719.506611][T27548] loop3: detected capacity change from 0 to 87 [ 719.509174][T27537] device bridge645 entered promiscuous mode [ 719.550736][T27538] bond595: (slave vlan431): making interface the new active one [ 719.571846][T27538] bond595: (slave vlan431): Enslaving as an active interface with an up link [ 719.585278][T27540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 719.600320][T27540] bond164 (uninitialized): Released all slaves [ 719.613920][T27548] FAT-fs (loop3): bogus number of reserved sectors [ 719.637727][T27548] FAT-fs (loop3): Can't find a valid FAT filesystem 15:43:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x21, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000083ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 719.667868][ T26] audit: type=1804 audit(1639928601.248:64): pid=27548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1214/file1/bus" dev="sda1" ino=1216 res=1 errno=0 [ 719.766770][T27549] device bridge390 entered promiscuous mode [ 719.790134][T27551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 719.814099][T27551] bond183 (uninitialized): Released all slaves 15:43:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600007fffffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x864bccdb, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 719.889026][T27553] bond387: (slave vlan307): making interface the new active one [ 719.910578][T27553] bond387: (slave vlan307): Enslaving as an active interface with an up link [ 719.997959][T27559] bond164 (uninitialized): Released all slaves 15:43:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000004788ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 720.060240][T27563] device bridge646 entered promiscuous mode 15:43:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 720.196060][T27564] bond596: (slave vlan432): making interface the new active one [ 720.210833][T27564] bond596: (slave vlan432): Enslaving as an active interface with an up link [ 720.231890][T27567] bond183 (uninitialized): Released all slaves 15:43:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600009effffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:21 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 720.328090][T27571] device bridge391 entered promiscuous mode [ 720.437825][T27586] loop3: detected capacity change from 0 to 87 [ 720.454397][T27586] FAT-fs (loop3): bogus number of reserved sectors [ 720.461292][T27586] FAT-fs (loop3): Can't find a valid FAT filesystem [ 720.478723][ T26] audit: type=1804 audit(1639928602.058:65): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1215/file1/bus" dev="sda1" ino=1216 res=1 errno=0 [ 720.512217][T27572] bond388: (slave vlan308): making interface the new active one [ 720.526575][T27572] bond388: (slave vlan308): Enslaving as an active interface with an up link 15:43:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x88470000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000004888ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 720.544594][T27576] bond164 (uninitialized): Released all slaves [ 720.714806][T27583] device bridge647 entered promiscuous mode [ 720.738609][T27582] bond183 (uninitialized): Released all slaves 15:43:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000efffffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 720.790831][T27584] bond597: (slave vlan433): making interface the new active one [ 720.809054][T27584] bond597: (slave vlan433): Enslaving as an active interface with an up link 15:43:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 720.855190][T27592] bond164 (uninitialized): Released all slaves 15:43:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x2f, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000ffffa888ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 720.975859][T27596] device bridge392 entered promiscuous mode [ 721.027610][T27598] bond389: (slave vlan309): making interface the new active one [ 721.047286][T27598] bond389: (slave vlan309): Enslaving as an active interface with an up link 15:43:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 721.090445][T27600] bond183 (uninitialized): Released all slaves 15:43:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000f0ffffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:22 executing program 1: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 721.208447][T27606] device bridge648 entered promiscuous mode [ 721.247053][T27608] bond164 (uninitialized): Released all slaves 15:43:22 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x88480000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000ffffff9eff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 721.350455][T27625] loop3: detected capacity change from 0 to 87 [ 721.376333][T27625] FAT-fs (loop3): bogus number of reserved sectors 15:43:23 executing program 1: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 721.409541][T27625] FAT-fs (loop3): Can't find a valid FAT filesystem [ 721.421914][ T26] audit: type=1804 audit(1639928602.998:66): pid=27625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1216/file1/bus" dev="sda1" ino=1213 res=1 errno=0 [ 721.473349][T27609] bond598: (slave vlan434): making interface the new active one 15:43:23 executing program 1: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 721.547944][T27609] bond598: (slave vlan434): Enslaving as an active interface with an up link [ 721.596805][T27618] bond183 (uninitialized): Released all slaves 15:43:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000020000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3a, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:23 executing program 1: r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:23 executing program 1: r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 721.784975][T27626] device bridge393 entered promiscuous mode 15:43:23 executing program 1: r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 721.854980][T27630] bond390: (slave vlan310): making interface the new active one [ 721.893093][T27630] bond390: (slave vlan310): Enslaving as an active interface with an up link 15:43:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x88a8ffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 721.952796][T27633] bond164 (uninitialized): Released all slaves [ 721.989983][T27645] validate_nla: 7 callbacks suppressed 15:43:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000000cbff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 721.990000][T27645] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 722.125293][T27646] bond183 (uninitialized): Released all slaves [ 722.148754][T27648] device bridge649 entered promiscuous mode 15:43:23 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000030000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 722.217516][T27650] bond599: (slave vlan435): making interface the new active one [ 722.241484][T27650] bond599: (slave vlan435): Enslaving as an active interface with an up link 15:43:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000ffffffefff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 722.263996][T27653] bond164 (uninitialized): Released all slaves [ 722.284033][T27656] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x41, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 722.356706][T27669] loop3: detected capacity change from 0 to 87 [ 722.381933][T27669] FAT-fs (loop3): bogus number of reserved sectors [ 722.417207][T27658] device bridge394 entered promiscuous mode [ 722.431589][T27669] FAT-fs (loop3): Can't find a valid FAT filesystem [ 722.464017][ T26] audit: type=1804 audit(1639928604.048:67): pid=27673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1217/file1/bus" dev="sda1" ino=1213 res=1 errno=0 [ 722.477251][T27659] bond391: (slave vlan311): making interface the new active one 15:43:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 722.566552][T27659] bond391: (slave vlan311): Enslaving as an active interface with an up link 15:43:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x8c1c1c93, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 722.635181][T27666] bond183 (uninitialized): Released all slaves [ 722.657671][T27668] bond164 (uninitialized): Released all slaves 15:43:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000040000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000fffffff0ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 722.747136][T27671] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 722.858145][T27672] device bridge650 entered promiscuous mode [ 722.900689][T27674] bond600: (slave vlan436): making interface the new active one [ 722.930323][T27674] bond600: (slave vlan436): Enslaving as an active interface with an up link 15:43:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 722.965695][T27680] bond183 (uninitialized): Released all slaves [ 723.002951][T27683] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x48, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000050000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:24 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 723.160379][T27684] device bridge395 entered promiscuous mode [ 723.171618][T27686] __nla_validate_parse: 14 callbacks suppressed [ 723.171636][T27686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 723.201789][T27686] bond164 (uninitialized): Released all slaves 15:43:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000005fdff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 723.311627][T27700] loop3: detected capacity change from 0 to 87 [ 723.327490][T27687] bond392: (slave vlan312): making interface the new active one [ 723.365037][T27700] FAT-fs (loop3): bogus number of reserved sectors [ 723.374148][T27700] FAT-fs (loop3): Can't find a valid FAT filesystem [ 723.381472][T27687] bond392: (slave vlan312): Enslaving as an active interface with an up link 15:43:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 723.421142][T27693] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 723.448708][ T26] audit: type=1804 audit(1639928605.028:68): pid=27703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1218/file1/bus" dev="sda1" ino=1213 res=1 errno=0 15:43:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x931c1c8c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000060000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 723.570345][T27695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 723.602031][T27695] bond183 (uninitialized): Released all slaves [ 723.681100][T27696] device bridge651 entered promiscuous mode [ 723.805447][T27698] bond601: (slave vlan437): making interface the new active one [ 723.848920][T27698] bond601: (slave vlan437): Enslaving as an active interface with an up link [ 723.866281][T27702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 723.880638][T27702] bond164 (uninitialized): Released all slaves 15:43:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000007fffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 723.898471][T27708] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x4a, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 723.986039][T27710] device bridge396 entered promiscuous mode [ 724.076476][T27712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.107227][T27712] bond183 (uninitialized): Released all slaves 15:43:25 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 724.178122][T27725] loop3: detected capacity change from 0 to 87 [ 724.191371][T27725] FAT-fs (loop3): bogus number of reserved sectors 15:43:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000070000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 724.220056][T27713] bond393: (slave vlan313): making interface the new active one [ 724.244712][T27725] FAT-fs (loop3): Can't find a valid FAT filesystem [ 724.266321][T27713] bond393: (slave vlan313): Enslaving as an active interface with an up link [ 724.281937][ T26] audit: type=1804 audit(1639928605.858:69): pid=27725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1219/file1/bus" dev="sda1" ino=1209 res=1 errno=0 [ 724.316407][T27717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x9b0b0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000088a8ffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 724.358122][T27717] bond164 (uninitialized): Released all slaves [ 724.379419][T27721] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 724.557267][T27723] device bridge652 entered promiscuous mode [ 724.629611][T27726] bond602: (slave vlan438): making interface the new active one [ 724.662415][T27726] bond602: (slave vlan438): Enslaving as an active interface with an up link 15:43:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x4c, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 724.685490][T27728] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.714457][T27728] bond183 (uninitialized): Released all slaves 15:43:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000080000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 724.737706][T27736] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:26 executing program 1: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:26 executing program 1: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 724.898789][T27735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 724.949741][T27735] bond164 (uninitialized): Released all slaves [ 724.979275][T27737] device bridge397 entered promiscuous mode 15:43:26 executing program 1: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000e0ffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15:43:26 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 725.088644][T27738] bond394: (slave vlan314): making interface the new active one 15:43:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 725.189097][T27738] bond394: (slave vlan314): Enslaving as an active interface with an up link [ 725.202471][T27759] loop3: detected capacity change from 0 to 87 [ 725.263910][T27759] FAT-fs (loop3): bogus number of reserved sectors [ 725.270619][T27742] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 725.293356][T27759] FAT-fs (loop3): Can't find a valid FAT filesystem 15:43:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15:43:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x9effffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 725.336725][T27745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 725.351215][ T26] audit: type=1804 audit(1639928606.928:70): pid=27759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1220/file1/bus" dev="sda1" ino=1201 res=1 errno=0 15:43:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000090000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 725.434819][T27745] bond183 (uninitialized): Released all slaves [ 725.493988][T27747] device bridge653 entered promiscuous mode [ 725.531769][T27748] bond603: (slave vlan439): making interface the new active one [ 725.551130][T27748] bond603: (slave vlan439): Enslaving as an active interface with an up link [ 725.588875][T27757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x60, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 15:43:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600007fffffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 725.601935][T27757] bond164 (uninitialized): Released all slaves [ 725.617276][T27766] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) [ 725.704544][T27768] device bridge398 entered promiscuous mode [ 725.718408][T27770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 725.751464][T27770] bond183 (uninitialized): Released all slaves 15:43:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) [ 725.871722][T27771] bond395: (slave vlan315): making interface the new active one [ 725.906976][T27771] bond395: (slave vlan315): Enslaving as an active interface with an up link 15:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 725.978511][T27778] bond164 (uninitialized): Released all slaves 15:43:27 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xc3ffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000854600009effffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 726.153177][T27797] loop3: detected capacity change from 0 to 87 [ 726.166117][T27797] FAT-fs (loop3): bogus number of reserved sectors [ 726.178776][T27783] device bridge654 entered promiscuous mode 15:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 726.204083][T27797] FAT-fs (loop3): Can't find a valid FAT filesystem [ 726.214641][ T26] audit: type=1804 audit(1639928607.798:71): pid=27797 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1221/file1/bus" dev="sda1" ino=1216 res=1 errno=0 [ 726.306029][T27785] bond604: (slave vlan440): making interface the new active one 15:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 726.398444][T27785] bond604: (slave vlan440): Enslaving as an active interface with an up link [ 726.416713][T27786] bond183 (uninitialized): Released all slaves 15:43:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x68, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000b0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 726.556133][T27798] device bridge399 entered promiscuous mode [ 726.605040][T27799] bond396: (slave vlan316): making interface the new active one [ 726.619232][T27799] bond396: (slave vlan316): Enslaving as an active interface with an up link 15:43:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xdbcc4b86, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 726.664232][T27800] bond164 (uninitialized): Released all slaves [ 726.698590][T27810] bond183 (uninitialized): Released all slaves 15:43:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000efffffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 726.869688][T27817] device bridge655 entered promiscuous mode 15:43:28 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 15:43:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 726.961588][T27822] bond605: (slave vlan441): making interface the new active one [ 726.986900][T27822] bond605: (slave vlan441): Enslaving as an active interface with an up link 15:43:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x6c, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 727.077536][T27834] loop3: detected capacity change from 0 to 87 [ 727.096879][T27824] device bridge400 entered promiscuous mode [ 727.129556][T27834] FAT-fs (loop3): bogus number of reserved sectors [ 727.169730][T27834] FAT-fs (loop3): Can't find a valid FAT filesystem [ 727.182922][ T26] audit: type=1804 audit(1639928608.768:72): pid=27837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1222/file1/bus" dev="sda1" ino=1217 res=1 errno=0 [ 727.220114][T27826] bond397: (slave vlan317): making interface the new active one [ 727.245001][T27826] bond397: (slave vlan317): Enslaving as an active interface with an up link [ 727.274630][T27827] bond164 (uninitialized): Released all slaves 15:43:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000f0ffffffff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 727.312073][T27832] bond183 (uninitialized): Released all slaves [ 727.351274][T27836] validate_nla: 4 callbacks suppressed 15:43:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 727.351291][T27836] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xea010000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000d0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 727.564572][T27838] device bridge656 entered promiscuous mode 15:43:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x74, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 727.611592][T27840] bond606: (slave vlan442): making interface the new active one [ 727.626582][T27840] bond606: (slave vlan442): Enslaving as an active interface with an up link [ 727.641275][T27844] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 727.760876][T27850] device bridge401 entered promiscuous mode [ 727.836173][T27848] bond164 (uninitialized): Released all slaves [ 727.854625][T27852] bond183 (uninitialized): Released all slaves 15:43:29 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000020000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000e0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 727.992956][T27866] loop3: detected capacity change from 0 to 87 [ 728.002132][T27853] bond398: (slave vlan318): making interface the new active one [ 728.066381][T27866] FAT-fs (loop3): invalid media value (0x00) [ 728.079708][T27853] bond398: (slave vlan318): Enslaving as an active interface with an up link [ 728.096685][T27866] FAT-fs (loop3): Can't find a valid FAT filesystem 15:43:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 728.114360][T27856] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 728.132397][ T26] audit: type=1804 audit(1639928609.708:73): pid=27869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1223/file1/bus" dev="sda1" ino=1217 res=1 errno=0 15:43:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xefffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 728.202155][T27859] device bridge657 entered promiscuous mode [ 728.308307][T27862] bond607: (slave vlan443): making interface the new active one [ 728.327788][T27862] bond607: (slave vlan443): Enslaving as an active interface with an up link [ 728.338784][T27864] __nla_validate_parse: 8 callbacks suppressed [ 728.338799][T27864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x7a, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 728.372417][T27864] bond164 (uninitialized): Released all slaves [ 728.395122][T27868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000030000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 728.439636][T27868] bond183 (uninitialized): Released all slaves [ 728.461759][T27874] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000f0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 728.581062][T27876] device bridge402 entered promiscuous mode [ 728.609922][T27879] bond399: (slave vlan319): making interface the new active one [ 728.626407][T27879] bond399: (slave vlan319): Enslaving as an active interface with an up link [ 728.646306][T27882] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf0ffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 728.700821][T27885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 728.726176][T27885] bond164 (uninitialized): Released all slaves 15:43:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 728.751347][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000040000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:30 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000100000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 728.853937][T27887] bond183 (uninitialized): Released all slaves [ 728.869955][T27901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 728.896474][T27901] bond164 (uninitialized): Released all slaves [ 728.926361][T27888] device bridge658 entered promiscuous mode 15:43:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000050000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 729.006306][T27906] loop3: detected capacity change from 0 to 87 [ 729.037246][T27906] FAT-fs (loop3): invalid media value (0x00) [ 729.045655][T27889] bond608: (slave vlan444): making interface the new active one [ 729.057055][T27906] FAT-fs (loop3): Can't find a valid FAT filesystem [ 729.092392][T27889] bond608: (slave vlan444): Enslaving as an active interface with an up link [ 729.112115][ T26] audit: type=1804 audit(1639928610.688:74): pid=27909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1224/file1/bus" dev="sda1" ino=1217 res=1 errno=0 [ 729.169201][T27894] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x83, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 729.270052][T27912] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 729.341621][T27895] device bridge403 entered promiscuous mode [ 729.415503][T27899] bond400: (slave vlan320): making interface the new active one [ 729.439065][T27899] bond400: (slave vlan320): Enslaving as an active interface with an up link 15:43:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 729.459943][T27905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xf6010000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 729.520872][T27905] bond183 (uninitialized): Released all slaves 15:43:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000110000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 729.574565][T27908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 729.602376][T27908] bond164 (uninitialized): Released all slaves 15:43:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000060000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 729.672329][T27912] device bridge659 entered promiscuous mode [ 729.769868][T27914] bond609: (slave vlan445): making interface the new active one [ 729.793238][T27914] bond609: (slave vlan445): Enslaving as an active interface with an up link 15:43:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 729.836738][T27920] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:31 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xa2, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 729.948273][T27931] loop3: detected capacity change from 0 to 87 [ 729.961617][T27931] FAT-fs (loop3): invalid media value (0x00) [ 729.971191][T27931] FAT-fs (loop3): Can't find a valid FAT filesystem [ 729.977591][T27922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 730.004246][T27922] bond183 (uninitialized): Released all slaves 15:43:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000120000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 730.053921][ T26] audit: type=1804 audit(1639928611.638:75): pid=27931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1225/file1/bus" dev="sda1" ino=1217 res=1 errno=0 [ 730.084282][T27923] device bridge404 entered promiscuous mode [ 730.261943][T27924] bond401: (slave vlan321): making interface the new active one [ 730.299741][T27924] bond401: (slave vlan321): Enslaving as an active interface with an up link [ 730.321298][T27926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 730.342050][T27926] bond164 (uninitialized): Released all slaves 15:43:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfe0f0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 730.376851][T27934] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000070000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 730.549103][T27935] device bridge660 entered promiscuous mode [ 730.612548][T27936] bond610: (slave vlan446): making interface the new active one [ 730.632140][T27936] bond610: (slave vlan446): Enslaving as an active interface with an up link [ 730.653018][T27938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xae, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000180000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 730.695511][T27938] bond183 (uninitialized): Released all slaves [ 730.721711][T27942] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 15:43:32 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 730.877701][T27947] device bridge405 entered promiscuous mode [ 730.893559][T27946] bond164 (uninitialized): Released all slaves 15:43:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000080000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 730.944556][T27948] bond402: (slave vlan322): making interface the new active one [ 730.960873][T27948] bond402: (slave vlan322): Enslaving as an active interface with an up link [ 730.974100][T27960] loop3: detected capacity change from 0 to 87 [ 731.012583][T27960] FAT-fs (loop3): invalid media value (0x00) [ 731.027746][T27960] FAT-fs (loop3): Can't find a valid FAT filesystem [ 731.035846][T27951] bond183 (uninitialized): Released all slaves 15:43:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfeff0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 731.064285][ T26] audit: type=1804 audit(1639928612.638:76): pid=27965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1226/file1/bus" dev="sda1" ino=1217 res=1 errno=0 15:43:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000210000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 731.235852][T27958] device bridge661 entered promiscuous mode [ 731.406686][T27961] bond611: (slave vlan447): making interface the new active one [ 731.431911][T27961] bond611: (slave vlan447): Enslaving as an active interface with an up link 15:43:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0xf4, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 731.458530][T27964] bond164 (uninitialized): Released all slaves 15:43:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000090000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 731.561589][T27971] bond183 (uninitialized): Released all slaves 15:43:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000250000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 731.618274][T27972] device bridge406 entered promiscuous mode [ 731.720998][T27973] bond403: (slave vlan323): making interface the new active one [ 731.747332][T27973] bond403: (slave vlan323): Enslaving as an active interface with an up link 15:43:33 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 15:43:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xfeffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 731.900840][T27983] bond164 (uninitialized): Released all slaves 15:43:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 731.960358][T27984] device bridge662 entered promiscuous mode [ 731.964495][T27995] loop3: detected capacity change from 0 to 87 [ 731.985434][T27987] bond183 (uninitialized): Released all slaves [ 732.036730][T27995] FAT-fs (loop3): invalid media value (0x00) [ 732.045026][T27995] FAT-fs (loop3): Can't find a valid FAT filesystem 15:43:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000002f0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 732.074656][ T26] audit: type=1804 audit(1639928613.658:77): pid=27995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1227/file1/bus" dev="sda1" ino=1217 res=1 errno=0 [ 732.138810][T27988] bond612: (slave vlan448): making interface the new active one [ 732.154949][T27988] bond612: (slave vlan448): Enslaving as an active interface with an up link 15:43:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x108, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 732.282457][T27997] device bridge407 entered promiscuous mode [ 732.320989][T28000] bond164 (uninitialized): Released all slaves 15:43:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000b0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 732.368052][T28001] bond404: (slave vlan324): making interface the new active one [ 732.381195][T28001] bond404: (slave vlan324): Enslaving as an active interface with an up link 15:43:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xff0f0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 732.416373][T28005] bond183 (uninitialized): Released all slaves [ 732.447960][T28008] validate_nla: 4 callbacks suppressed [ 732.447975][T28008] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000003a0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 732.561913][T28010] device bridge663 entered promiscuous mode [ 732.617567][T28013] bond613: (slave vlan449): making interface the new active one [ 732.645454][T28013] bond613: (slave vlan449): Enslaving as an active interface with an up link 15:43:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 732.669203][T28015] bond164 (uninitialized): Released all slaves 15:43:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x14a, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 732.732814][T28018] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 732.765564][T28020] bond183 (uninitialized): Released all slaves 15:43:34 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000410000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 732.818161][T28021] device bridge408 entered promiscuous mode [ 732.921378][T28036] loop3: detected capacity change from 0 to 87 [ 732.936606][T28022] bond405: (slave vlan325): making interface the new active one [ 732.949884][T28036] FAT-fs (loop3): invalid media value (0x00) [ 732.957263][T28036] FAT-fs (loop3): Can't find a valid FAT filesystem [ 732.969776][T28022] bond405: (slave vlan325): Enslaving as an active interface with an up link 15:43:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 733.005623][ T26] audit: type=1804 audit(1639928614.588:78): pid=28036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1228/file1/bus" dev="sda1" ino=1217 res=1 errno=0 [ 733.033954][T28029] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:43:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xff7f0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 733.172200][T28032] device bridge664 entered promiscuous mode [ 733.190659][T28031] bond183 (uninitialized): Released all slaves 15:43:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000480000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 733.219030][T28034] bond164 (uninitialized): Released all slaves 15:43:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000d0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 733.267108][T28037] bond614: (slave vlan450): making interface the new active one [ 733.283331][T28037] bond614: (slave vlan450): Enslaving as an active interface with an up link [ 733.300632][T28042] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:43:34 executing program 1: syz_mount_image$ext4(&(0x7f0000002480)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000002540)=[{&(0x7f0000002500)="f6", 0x1, 0x80000000}], 0x0, &(0x7f0000002580)={[{@jqfmt_vfsv0}]}) [ 733.365288][T28046] device bridge409 entered promiscuous mode [ 733.377024][T28047] __nla_validate_parse: 12 callbacks suppressed [ 733.377042][T28047] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x2b2, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 733.421974][T28047] bond183 (uninitialized): Released all slaves 15:43:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffff0300, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 15:43:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000004c0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 733.473849][T28055] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 733.506666][T28057] loop1: detected capacity change from 0 to 264192 [ 733.527940][T28052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:35 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000004c0)={r0}) [ 733.585892][T28052] bond164 (uninitialized): Released all slaves [ 733.647117][T28055] device bridge665 entered promiscuous mode [ 733.680884][T28063] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 733.720931][T28064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.754793][T28064] bond183 (uninitialized): Released all slaves 15:43:35 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:43:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000e0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:43:35 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) listen(r1, 0x1f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r2, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) 15:43:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000600000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 733.815361][T28059] bond615: (slave vlan451): making interface the new active one [ 733.830395][T28059] bond615: (slave vlan451): Enslaving as an active interface with an up link 15:43:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x2d6, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 733.900577][T28077] loop3: detected capacity change from 0 to 87 [ 733.914985][T28077] FAT-fs (loop3): bogus number of FAT sectors [ 733.921177][T28077] FAT-fs (loop3): Can't find a valid FAT filesystem [ 733.934313][ T26] audit: type=1804 audit(1639928615.518:79): pid=28077 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir014072717/syzkaller.YxbRic/1229/file1/bus" dev="sda1" ino=1213 res=1 errno=0 [ 733.936593][T28065] device bridge410 entered promiscuous mode [ 734.028628][T28066] bond407: (slave vlan326): making interface the new active one [ 734.046004][T28066] bond407: (slave vlan326): Enslaving as an active interface with an up link [ 734.060485][T28075] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 734.093162][T28075] bond183 (uninitialized): Released all slaves [ 839.052638][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 839.059268][ C1] rcu: 1-...!: (1 GPs behind) idle=b29/1/0x4000000000000000 softirq=72661/72663 fqs=1 [ 839.070494][ C1] (t=10500 jiffies g=113269 q=1344) [ 839.075789][ C1] rcu: rcu_preempt kthread starved for 10497 jiffies! g113269 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 839.087072][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 839.097039][ C1] rcu: RCU grace-period kthread stack dump: [ 839.102918][ C1] task:rcu_preempt state:R running task stack:26576 pid: 14 ppid: 2 flags:0x00004000 [ 839.113700][ C1] Call Trace: [ 839.116977][ C1] [ 839.119911][ C1] __schedule+0xb72/0x1460 [ 839.124349][ C1] ? release_firmware_map_entry+0x182/0x182 [ 839.130241][ C1] ? mod_timer_pending+0x20/0x20 [ 839.135241][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 839.140607][ C1] schedule+0x12b/0x1f0 [ 839.144755][ C1] schedule_timeout+0x1b9/0x300 [ 839.149594][ C1] ? console_conditional_schedule+0x40/0x40 [ 839.155476][ C1] ? update_process_times+0x200/0x200 [ 839.160841][ C1] ? prepare_to_swait_event+0x322/0x340 [ 839.166466][ C1] rcu_gp_fqs_loop+0x1fd/0x770 [ 839.171217][ C1] ? rcu_gp_init+0x1160/0x1160 [ 839.176065][ C1] ? finish_swait+0xc2/0x1d0 [ 839.180650][ C1] rcu_gp_kthread+0xa5/0x350 [ 839.185231][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 839.190326][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 839.196211][ C1] ? __kthread_parkme+0x166/0x1c0 [ 839.201282][ C1] kthread+0x468/0x490 [ 839.205338][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 839.210433][ C1] ? kthread_blkcg+0xd0/0xd0 [ 839.215010][ C1] ret_from_fork+0x1f/0x30 [ 839.219490][ C1] [ 839.222494][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 839.228800][ C1] Sending NMI from CPU 1 to CPUs 0: [ 839.234011][ C0] NMI backtrace for cpu 0 [ 839.234020][ C0] CPU: 0 PID: 974 Comm: kworker/u4:4 Not tainted 5.16.0-rc5-syzkaller #0 [ 839.234035][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.234044][ C0] Workqueue: events_unbound toggle_allocation_gate [ 839.234061][ C0] RIP: 0010:smp_call_function_many_cond+0xbb2/0xda0 [ 839.234149][ C0] Code: 83 e6 01 31 ff e8 7e b8 0b 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0e e8 59 b4 0b 00 eb 4c 0f 1f 80 00 00 00 00 f3 90 <42> 0f b6 04 3b 84 c0 75 11 41 f7 45 00 01 00 00 00 74 2b e8 36 b4 [ 839.234160][ C0] RSP: 0018:ffffc900047bf820 EFLAGS: 00000293 [ 839.234172][ C0] RAX: ffffffff8178e95a RBX: 1ffff11017367ef9 RCX: ffff88801c7bba00 [ 839.234182][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 839.234191][ C0] RBP: ffffc900047bf960 R08: ffffffff8178e922 R09: ffffffff844a7400 [ 839.234202][ C0] R10: 0000000000000009 R11: ffff88801c7bba00 R12: 0000000000000001 [ 839.234211][ C0] R13: ffff8880b9b3f7c8 R14: ffff8880b9a3a640 R15: dffffc0000000000 [ 839.234221][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 839.234233][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.234243][ C0] CR2: 00007facf5932270 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 839.234255][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 839.234263][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 839.234272][ C0] Call Trace: [ 839.234277][ C0] [ 839.234285][ C0] ? text_poke_sync+0x20/0x20 [ 839.234321][ C0] ? smp_call_function_many+0x30/0x30 [ 839.234336][ C0] ? atomic_dec_and_mutex_lock+0xb0/0xb0 [ 839.234349][ C0] ? insn_decode+0x335/0x4c0 [ 839.234402][ C0] ? text_poke_sync+0x20/0x20 [ 839.234416][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 839.234431][ C0] ? __kmalloc_node_track_caller+0x10a/0x400 [ 839.234445][ C0] text_poke_bp_batch+0x310/0x940 [ 839.234463][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 839.234478][ C0] ? text_poke_loc_init+0x440/0x440 [ 839.234494][ C0] ? arch_jump_label_transform_queue+0x7c/0xd0 [ 839.234509][ C0] ? __jump_label_update+0x32c/0x350 [ 839.234524][ C0] text_poke_finish+0x16/0x30 [ 839.234537][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 839.234550][ C0] static_key_enable_cpuslocked+0x12d/0x250 [ 839.234563][ C0] static_key_enable+0x16/0x20 [ 839.234575][ C0] toggle_allocation_gate+0xbf/0x460 [ 839.234588][ C0] ? kfence_protect+0x270/0x270 [ 839.234602][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 839.234617][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 839.234630][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 839.234646][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 839.234661][ C0] process_one_work+0x853/0x1140 [ 839.234700][ C0] ? worker_detach_from_pool+0x260/0x260 [ 839.234716][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 839.234729][ C0] ? kthread_data+0x4d/0xc0 [ 839.234741][ C0] ? wq_worker_running+0x8b/0x140 [ 839.234755][ C0] worker_thread+0xac1/0x1320 [ 839.234776][ C0] ? __kthread_parkme+0x166/0x1c0 [ 839.234790][ C0] kthread+0x468/0x490 [ 839.234802][ C0] ? rcu_lock_release+0x20/0x20 [ 839.234814][ C0] ? kthread_blkcg+0xd0/0xd0 [ 839.234827][ C0] ret_from_fork+0x1f/0x30 [ 839.234847][ C0] [ 839.235009][ C1] NMI backtrace for cpu 1 [ 839.558432][ C1] CPU: 1 PID: 28082 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 [ 839.567182][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.577223][ C1] Call Trace: [ 839.580491][ C1] [ 839.583335][ C1] dump_stack_lvl+0x1dc/0x2d8 [ 839.588012][ C1] ? show_regs_print_info+0x12/0x12 [ 839.593229][ C1] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 839.598952][ C1] nmi_cpu_backtrace+0x45f/0x490 [ 839.603885][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 839.610031][ C1] ? nmi_trigger_cpumask_backtrace+0x17b/0x280 [ 839.616180][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 839.621629][ C1] ? _raw_spin_lock+0x40/0x40 [ 839.626301][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 839.632437][ C1] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 839.638409][ C1] rcu_dump_cpu_stacks+0x22d/0x390 [ 839.643537][ C1] rcu_sched_clock_irq+0x1e33/0x2bc0 [ 839.648842][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 839.654465][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 839.660438][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 839.665283][ C1] ? __raise_softirq_irqoff+0xb0/0xb0 [ 839.670641][ C1] ? memcpy+0x3c/0x60 [ 839.674615][ C1] ? hrtimer_run_queues+0x162/0x450 [ 839.679810][ C1] update_process_times+0x197/0x200 [ 839.685000][ C1] tick_sched_timer+0x27d/0x420 [ 839.689851][ C1] __hrtimer_run_queues+0x4cb/0xa60 [ 839.695046][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 839.700590][ C1] ? hrtimer_interrupt+0x1040/0x1040 [ 839.705868][ C1] ? ktime_get_update_offsets_now+0x449/0x460 [ 839.711927][ C1] hrtimer_interrupt+0x3b3/0x1040 [ 839.716970][ C1] __sysvec_apic_timer_interrupt+0xf9/0x270 [ 839.722853][ C1] sysvec_apic_timer_interrupt+0x3e/0xb0 [ 839.728473][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 839.734451][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 839.740249][ C1] Code: d1 52 fd ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 1e e9 50 f7 48 89 df e8 26 9a 52 f7 e8 01 f4 75 f7 fb bf 01 00 00 00 86 f2 44 f7 65 8b 05 b7 29 ed 75 85 c0 74 02 5b c3 e8 3c 11 eb [ 839.759843][ C1] RSP: 0018:ffffc90000dc0cb0 EFLAGS: 00000282 [ 839.765901][ C1] RAX: 1e29da80b0c24d00 RBX: ffff8880b9b280c0 RCX: ffffffff81668511 [ 839.773859][ C1] RDX: dffffc0000000000 RSI: 0000000000000101 RDI: 0000000000000001 [ 839.781817][ C1] RBP: ffffc90000dc0e10 R08: dffffc0000000000 R09: fffffbfff1ff39e2 [ 839.789779][ C1] R10: fffffbfff1ff39e2 R11: 0000000000000000 R12: ffffffff883f4f70 [ 839.797739][ C1] R13: dffffc0000000000 R14: ffff8880b9b28100 R15: ffff88806ff4d810 [ 839.805702][ C1] ? garp_init_applicant+0x460/0x460 [ 839.810987][ C1] ? mark_lock+0x191/0x1e00 [ 839.815488][ C1] __run_timers+0x70a/0x910 [ 839.819992][ C1] ? trace_timer_cancel+0x220/0x220 [ 839.825192][ C1] run_timer_softirq+0x63/0xf0 [ 839.829945][ C1] __do_softirq+0x392/0x7a3 [ 839.834443][ C1] ? __irq_exit_rcu+0xec/0x170 [ 839.839200][ C1] ? __entry_text_end+0x1fecc5/0x1fecc5 [ 839.844741][ C1] __irq_exit_rcu+0xec/0x170 [ 839.849321][ C1] ? irq_exit_rcu+0x20/0x20 [ 839.853818][ C1] irq_exit_rcu+0x5/0x20 [ 839.858046][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 839.863677][ C1] [ 839.866605][ C1] [ 839.869524][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 839.875500][ C1] RIP: 0010:__crypto_alg_lookup+0x7b/0x4e0 [ 839.881366][ C1] Code: 44 89 64 24 04 66 2e 0f 1f 84 00 00 00 00 00 49 8d 6e 20 48 89 e8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 84 03 00 00 8b 5d 00 <89> de 83 e6 60 31 ff e8 a9 9a a1 fd 89 d8 83 e0 60 74 12 e8 8d 96 [ 839.900958][ C1] RSP: 0018:ffffc900156afc08 EFLAGS: 00000246 [ 839.907016][ C1] RAX: 0000000000000000 RBX: 0000000000000402 RCX: 0000000000040000 [ 839.915002][ C1] RDX: ffffc90005b4a000 RSI: 0000000000000cd4 RDI: 0000000000000cd5 [ 839.922962][ C1] RBP: ffffffff8d0f4ea0 R08: ffffffff83e30721 R09: ffffed100f489214 [ 839.930921][ C1] R10: ffffed100f489214 R11: 0000000000000000 R12: 000000000000040e [ 839.938885][ C1] R13: dffffc0000000000 R14: ffffffff8d0f4e80 R15: 000000000000240f [ 839.946851][ C1] ? __crypto_alg_lookup+0xb1/0x4e0 [ 839.952050][ C1] ? __crypto_alg_lookup+0xe9/0x4e0 [ 839.957242][ C1] crypto_alg_lookup+0x53/0x1d0 [ 839.962093][ C1] crypto_alg_mod_lookup+0x4f/0x6e0 [ 839.967294][ C1] crypto_alloc_tfm_node+0x139/0x370 [ 839.972574][ C1] sctp_inet_listen+0x588/0xa30 [ 839.977494][ C1] ? sctp_sock_migrate+0x4040/0x4040 [ 839.982786][ C1] ? bpf_lsm_socket_listen+0x5/0x10 [ 839.987978][ C1] __sys_listen+0x1b0/0x230 [ 839.992479][ C1] __x64_sys_listen+0x56/0x60 [ 839.997152][ C1] do_syscall_64+0x44/0xd0 [ 840.001560][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 840.007442][ C1] RIP: 0033:0x7fd395929e99 [ 840.011857][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 840.031451][ C1] RSP: 002b:00007fd39427e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 840.039851][ C1] RAX: ffffffffffffffda RBX: 00007fd395a3d030 RCX: 00007fd395929e99 [ 840.047809][ C1] RDX: 0000000000000000 RSI: 000000000000001f RDI: 0000000000000004 [ 840.055765][ C1] RBP: 00007fd395983ff1 R08: 0000000000000000 R09: 0000000000000000 [ 840.063724][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.071680][ C1] R13: 00007fffa4b57d2f R14: 00007fd39427e300 R15: 0000000000022000 [ 840.079653][ C1] [ 840.129454][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 840.135798][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 840.143520][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 840.149807][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 840.173694][ T2972] udevd[2972]: worker [3789] /devices/virtual/block/loop3 is taking a long time [ 840.795560][T28073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 840.834371][T28081] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 841.156253][T28083] device bridge666 entered promiscuous mode 15:45:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000000f0000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:45:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000640000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) 15:45:26 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:45:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0xffffa888, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 845.463607][ T1246] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 15:45:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20745}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x401, 0x0, 0x300, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 846.202181][ T1246] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.507476][ T1246] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.781850][ T1246] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0