r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:01:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000300)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private, @remote}}}], 0x20}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x80, 0x8000, 0x0, 0x7fff, {{0x13, 0x4, 0x1, 0x31, 0x4c, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @multicast2, {[@noop, @timestamp_addr={0x44, 0xc, 0x78, 0x1, 0xe, [{@empty, 0x8}]}, @rr={0x7, 0x17, 0x5, [@dev={0xac, 0x14, 0x14, 0x40}, @multicast1, @rand_addr=0x64010102, @broadcast, @multicast1]}, @rr={0x7, 0x13, 0x95, [@dev={0xac, 0x14, 0x14, 0x3d}, @empty, @private=0xa010102, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_delroute={0x3c, 0x19, 0x10, 0x70bd2b, 0x25dfdbff, {0x1c, 0x20, 0x10, 0x30, 0xfc, 0x4, 0xfe, 0x8, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x4, 0x2, r5}}, @RTA_MULTIPATH={0xc, 0x9, {0x95a, 0x9, 0x31, r6}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x75}]}, 0x3c}}, 0x0) [ 1334.447457][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:01:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 1334.500098][T14152] device bond29 entered promiscuous mode [ 1334.506867][T14150] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:01:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x4001002000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x44edff7f00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1334.634579][T14150] device bond63 entered promiscuous mode [ 1334.659002][T14151] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:01:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x6000000000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1334.709753][T14151] device bond38 entered promiscuous mode [ 1334.719760][T14193] bond38 (unregistering): Released all slaves [ 1334.833846][T14186] bond63 (unregistering): Released all slaves 07:01:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x8000000000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1334.914871][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1335.027363][T14237] device bond30 entered promiscuous mode [ 1335.321189][T14390] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1335.382717][T14390] device bond63 entered promiscuous mode [ 1335.391257][T14393] bond63 (unregistering): Released all slaves 07:01:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}}}, 0x100c) 07:01:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x8004020000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:01:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:01:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1) sendmmsg$inet(r3, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private, @remote}}}], 0x20}}], 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r6, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private, @remote}}}], 0x20}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', r2, 0x4, 0x8, 0x4, 0x1, 0xa, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x6}}) socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x5, 0x5, 0x3fa) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000005200000220000000fedbdf251c08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080006000700000008000100", @ANYRES32=0x0, @ANYBLOB="080006000500000008000100", @ANYRES32=0x0, @ANYBLOB="080006000180000008000100", @ANYRES32=0x0, @ANYBLOB="0000e0273be7270e3b35733d00"], 0x54}}, 0x0) 07:01:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1335.612079][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:01:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x80e4ff7f00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1335.711359][T14475] device bond38 entered promiscuous mode [ 1335.733734][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1335.858874][T14478] device bond31 entered promiscuous mode 07:01:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x8dffffff00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1335.915253][T14479] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:01:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 1336.025837][T14479] device bond63 entered promiscuous mode [ 1336.045685][T14483] bond38 (unregistering): Released all slaves 07:01:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xb80b000000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1336.176685][T14502] bond63 (unregistering): Released all slaves [ 1336.251891][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:01:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xc805000000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1336.382183][T14617] device bond32 entered promiscuous mode 07:01:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001100010000000000000000000000000083e17bb84bf8ffffffffffffff6ca8bbb1187332099095aca11f0eeeb6920e7eff6e7aeecbe6faa2f004e6d3a13be47f5ba0bed1a999daeb1511e68a7c7223fad280eaf4e52347900079b7036e1d12326df7d7638dc217c1b517610aa487485e0090ee9c579e7a441b00"/140, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b002c420d3d"], 0x28}}, 0x0) [ 1336.705647][T14715] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:01:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}}}}, 0x100c) 07:01:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}}}, 0x100c) 07:01:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:01:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xe803000000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x7afac930, @rand_addr=' \x01\x00', 0x488}, @in={0x2, 0x4e22, @multicast1}], 0x2c) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000080)) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x3}, 0x2}}, 0x10) 07:01:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xa, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1336.920357][T14733] device bond33 entered promiscuous mode 07:01:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) 07:01:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:01:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xeffdffff00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2a, 0x25dfdc01, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000880}, 0x48000) [ 1337.170355][T14777] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:01:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xf401000000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @loopback}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x73, [@broadcast, @private=0xa010102, @loopback, @multicast1, @rand_addr=0x64010102, @multicast1]}, @noop, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x8, [{@remote, 0x80000001}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_retopts={{0xf8, 0x0, 0x7, {[@generic={0x44, 0xf, "97b106f1183c69649e735c3f1f"}, @timestamp_addr={0x44, 0x4c, 0xf5, 0x1, 0x1, [{@multicast2, 0x3d}, {@private=0xa010100, 0x1}, {@empty, 0x8}, {@multicast2, 0x8000}, {@multicast2, 0x8}, {@rand_addr=0x64010102, 0x7fff}, {@multicast2, 0x3e3b}, {@rand_addr=0x64010101}, {@remote, 0x6}]}, @generic={0x83, 0x12, "994d1c81dfc7f5fae8798f09645060fd"}, @cipso={0x86, 0x54, 0xffffffffffffffff, [{0x1, 0x8, "3540aba0ab97"}, {0x5, 0xa, "c2920170fb2736eb"}, {0x1, 0xd, "25d0a70f80c2742b79626b"}, {0x0, 0x12, "a7e57c70ec7c9cf222492a1d13eed682"}, {0x7, 0x4, "779b"}, {0x2, 0x11, "091031cc18a31977762671d8641a4c"}, {0x6, 0x8, "4fd1197c3ce5"}]}, @rr={0x7, 0x23, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @rand_addr=0x64010105]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x5e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0x1}, {@local, 0x2}, {@remote, 0x400}, {@broadcast, 0x15e2}, {@loopback, 0x4}]}]}}}], 0x220}}], 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r3, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private, @remote}}}], 0x20}}], 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r6, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private, @remote}}}], 0x20}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_newroute={0x80, 0x18, 0x100, 0x70bd2d, 0x25dfdbff, {0x1c, 0x10, 0x10, 0x91, 0x0, 0x0, 0xff, 0x9}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4d}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}, @RTA_DST={0x8, 0x1, {0xffff8, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x3ff, 0x7, 0x8e}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x7, 0x40, r2}}, @RTA_VIA={0x14, 0x12, {0x11, "50239849d730dd4f27514e5a49b2"}}, @RTA_DST={0x8, 0x1, {0xcc}}, @RTA_DST={0x8, 0x1, {0x9}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r8}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x2000c004) [ 1337.289689][T14777] device bond63 entered promiscuous mode [ 1337.306522][T14781] bond63 (unregistering): Released all slaves [ 1337.348844][T14808] __nla_validate_parse: 2 callbacks suppressed [ 1337.348856][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1337.449589][T14808] device bond34 entered promiscuous mode [ 1337.831231][T14911] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1337.862755][T14911] device bond63 entered promiscuous mode 07:01:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}}}, 0x100c) 07:01:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:01:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xf5ffffff00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:01:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xc, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1338.018593][T14959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:01:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xf7ffff7f00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1338.125967][T14959] device bond38 entered promiscuous mode 07:01:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xfe80000000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xfeffffff00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xff03000000000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xffffff7f00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1338.541429][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1338.592845][T14963] device bond35 entered promiscuous mode [ 1338.605584][T14966] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:01:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1338.710365][T14966] device bond64 entered promiscuous mode [ 1338.725577][T14975] bond38 (unregistering): Released all slaves [ 1338.762369][T14991] bond64 (unregistering): Released all slaves 07:01:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f00ddbc00210000000000000000000800120000000300000000000000000006000000000000000000000000000000cc0000000000003b28c993000001e8000000000000000000000000e2e0f0bf845d47ee5d7e000003000500000000000200f7522de0590bbe6ed787ab194e20ac1414bb00000000000000000300"], 0x80}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x6, 0x0, 0x10, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, 0x1, 0x1, 0x1000, 0x81}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x20, {0x0, 0x0, 0x0, r2, 0x11001}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x90) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @none}, 0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) read$alg(r5, &(0x7f0000000340)=""/180, 0xb4) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000000)={@none, 0x9, 0x101, 0x6}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000001780)={0xffffffffffffffff, 0x7c}) [ 1338.842500][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1338.892603][T15132] device bond36 entered promiscuous mode [ 1338.910523][T15160] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:01:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}}}}, 0x100c) 07:01:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0xffffffff00000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 07:01:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:01:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xe, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:01:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) [ 1339.343344][T15215] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:01:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1339.437536][T15215] device bond38 entered promiscuous mode [ 1339.456297][T15216] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:01:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x2}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1339.585849][T15216] device bond64 entered promiscuous mode [ 1339.599265][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1339.693221][T15218] device bond37 entered promiscuous mode [ 1339.719374][T15225] bond38 (unregistering): Released all slaves 07:01:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x3}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1339.770377][T15243] bond64 (unregistering): Released all slaves 07:01:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 07:01:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x4}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x5}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1340.330833][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:01:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}}}, 0x100c) 07:01:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x6}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:01:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:01:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b002c420d3d"], 0x28}}, 0x0) [ 1340.398154][T15412] device bond38 entered promiscuous mode [ 1340.421457][T15420] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:01:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x10, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) [ 1340.517390][T15468] device bond38 entered promiscuous mode [ 1340.554370][T15468] bond38 (unregistering): Released all slaves 07:02:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x7}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private, @remote}}}], 0x20}}], 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) 07:02:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x8}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x9}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1341.028335][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xa}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xe, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1341.148859][T15542] device bond39 entered promiscuous mode [ 1341.158598][T15543] validate_nla: 1 callbacks suppressed [ 1341.158606][T15543] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1341.287934][T15543] device bond64 entered promiscuous mode [ 1341.303793][T15548] bond64 (unregistering): Released all slaves [ 1341.388681][T15595] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1341.448876][T15595] device bond38 entered promiscuous mode [ 1341.488722][T15601] bond38 (unregistering): Released all slaves [ 1341.592266][T15711] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}}}, 0x100c) 07:02:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xe}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}}}, 0x100c) 07:02:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x405, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) 07:02:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x60, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x1000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x10}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1342.019481][T15760] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1342.088196][T15760] device bond38 entered promiscuous mode [ 1342.117074][T15761] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x11}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1342.216225][T15761] device bond64 entered promiscuous mode [ 1342.254929][T15797] bond64 (unregistering): Released all slaves 07:02:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x30}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x38}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x60}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1342.697017][T15760] bond38 (unregistering): Released all slaves 07:02:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x103}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1342.808447][T15797] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1342.948132][T15797] device bond64 entered promiscuous mode [ 1342.984332][T15939] bond64 (unregistering): Released all slaves 07:02:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}}}, 0x100c) 07:02:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000011000100000000010001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b002c420d3d"], 0x28}}, 0x0) 07:02:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000300)) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x3, 0x4, 0x3, 0x0, 0x0, [{{r1}}, {{r2}, 0xffff}, {{r0}, 0x10000}]}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet(0x2, 0x6, 0x6) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004804) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$unix(r6, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000a00)={r5, 0xe023}, 0x8) 07:02:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x1f4}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x1000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) 07:02:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x300}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8100, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1343.246703][T16028] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:02:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x301}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1343.337465][T16028] device bond38 entered promiscuous mode 07:02:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x3e8}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x500}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1343.745403][T16034] bond38 (unregistering): Released all slaves [ 1343.787425][T16033] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1343.849827][T16033] device bond64 entered promiscuous mode [ 1343.891494][T16048] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1343.954456][T16048] device bond40 entered promiscuous mode [ 1343.973669][T16074] bond64 (unregistering): Released all slaves [ 1344.074976][T16076] bond40 (unregistering): Released all slaves [ 1344.141553][T16234] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1344.244619][T16234] device bond64 entered promiscuous mode [ 1344.266149][T16074] bond64 (unregistering): Released all slaves 07:02:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000}}}}, 0x100c) 07:02:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x5c8}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@int=0x7fff, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) getpeername(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) 07:02:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x1000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8100, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x600, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x4, 0x1b, 0x3d0d422c}, @IFLA_TXQLEN={0x0, 0xd, 0x1}, @IFLA_TARGET_NETNSID={0x0, 0x2e, 0x1}, @IFLA_LINKMODE={0x0, 0x11, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080) socket$xdp(0x2c, 0x3, 0x0) [ 1344.649879][T16348] device bond40 entered promiscuous mode 07:02:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x600}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1344.718419][T16347] device bond38 entered promiscuous mode [ 1344.871620][T16344] device bond64 entered promiscuous mode 07:02:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x700}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1344.939631][T16383] bond64 (unregistering): Released all slaves [ 1345.025116][T16384] bond38 (unregistering): Released all slaves 07:02:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x900}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1345.113446][T16348] bond40 (unregistering): Released all slaves 07:02:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xa00}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xbb8}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ea0000}}}}, 0x100c) 07:02:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xe00}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8100, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xa00, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xc6, 0x3, 0x40, 0x2, 0x80, 0x80, 0x1d, 0x0, r3}, {0xdbd4, 0x392d, 0x7, 0x2, 0x0, 0x5}, {0xbc15, 0xff, 0xf443, 0x10001}, 0x0, 0x6e6bbc, 0x2, 0x1, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0xff}, 0xa, @in=@private=0xa010101, 0x3504, 0x4, 0x1, 0x36, 0x2, 0x5, 0xe3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r2, r3}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x3, 0x0, 0x5}, 0x7, 0x0, 0x2, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r4, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private, @remote}}}], 0x20}}], 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_delroute={0x54, 0x19, 0x8, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x14, 0x7, 0x0, 0x4, 0xfd, 0x0, 0x100}, [@RTA_UID={0x8, 0x19, r3}, @RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_OIF={0x8}, @RTA_IIF={0x8, 0x3, r6}, @RTA_IIF={0x8, 0x3, r8}, @RTA_ENCAP_TYPE={0x6}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x54}}, 0x0) 07:02:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x1100}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1345.774131][T16600] device bond64 entered promiscuous mode 07:02:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x2000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1345.833363][T16602] bond38 (uninitialized): Released all slaves [ 1345.919996][T16609] device bond40 entered promiscuous mode 07:02:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x3000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1345.972118][T16632] bond64 (unregistering): Released all slaves 07:02:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x3800}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x3f00}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x4000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1346.568545][T16644] bond40 (unregistering): Released all slaves [ 1346.608190][T16738] validate_nla: 9 callbacks suppressed [ 1346.608211][T16738] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040200}}}}, 0x100c) 07:02:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x6000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x1100}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080)=0x8000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 07:02:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xc00, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x1c}}, 0x40048c4) [ 1346.850277][T16794] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x80fe}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1346.934721][T16794] device bond64 entered promiscuous mode [ 1346.942319][T16796] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1346.996704][T16796] device bond40 entered promiscuous mode [ 1347.010208][T16800] bond64 (unregistering): Released all slaves [ 1347.058084][T16802] bond40 (unregistering): Released all slaves 07:02:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xb80b}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20080, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x468, 0x3f4, 0x1, 0x70bd2d, 0x25dfdbfd, {0x4, 0x0, 0x34, [0xa000, 0x4, 0x9, 0x4, 0x2, 0x5, 0x7, 0xffffffff, 0x1, 0x10000, 0x5, 0x5, 0x3ff, 0x587, 0x3, 0xff, 0xfff, 0x10001, 0x1, 0x2, 0x707, 0x1, 0xdd3, 0x5464, 0x2, 0x8, 0x5, 0xfffffffc, 0x26, 0xff, 0x10000, 0x8000, 0x2, 0x1, 0xff, 0xf6, 0x7, 0x1, 0x81, 0x9, 0xfff, 0xffffff84, 0x40, 0x7ff, 0xfffffff9, 0x81, 0x7, 0x400, 0x0, 0x3, 0x401, 0x67, 0x3fed5ab5, 0x9, 0x1, 0x0, 0xc73, 0x0, 0x7, 0x8, 0x0, 0x2, 0x0, 0x702], [0x81, 0x8001, 0x70c8347d, 0x4, 0x6, 0x4, 0x3, 0x0, 0x2, 0x7, 0x9c7, 0x5, 0x2, 0xff2, 0x7, 0x2, 0x401, 0x3, 0x21dd, 0xffffc00a, 0x2, 0x3, 0xff, 0x4, 0x4, 0x0, 0x800, 0x46, 0xa82, 0x4, 0x800, 0x1f, 0x20000000, 0x5, 0xfff, 0x101, 0x101, 0x4, 0x4a8, 0x5, 0x80000000, 0x7, 0x4, 0x200, 0xdf5, 0x7fff, 0x2e, 0x80000000, 0x6, 0xdd04, 0x0, 0x9, 0x10001, 0xffffff5f, 0xe7d8, 0x7fffffff, 0xffffeeed, 0x7fffffff, 0x1, 0x94bb, 0x1, 0x6, 0x7, 0x1f], [0xfffffff9, 0x2f22, 0x2, 0xdd, 0x5, 0x9, 0x0, 0x40, 0x8, 0x42d39924, 0x0, 0x9, 0x20, 0xffffffff, 0xffff, 0x3, 0x5, 0x80000000, 0x5, 0x1f, 0x4, 0x0, 0x101, 0x10001, 0x1, 0xe0, 0x7, 0xfffffff7, 0x8001, 0x0, 0x1000, 0x3, 0x1, 0x9, 0x9, 0x10000, 0x8000, 0x0, 0x4, 0x9, 0x80000000, 0x1ff, 0x5c6a, 0x8000, 0x4be, 0x8000, 0x7, 0x1a5e, 0x6, 0x7, 0x2, 0x0, 0xffffffff, 0x4, 0x7, 0x1, 0x80000000, 0x81, 0x9f, 0x200, 0xb7af, 0x40, 0xe3, 0x1], [0xff, 0x1, 0x3f7, 0x8791, 0x5, 0x0, 0x5, 0x4, 0x7, 0x8, 0x8001, 0x663ec238, 0x6, 0x40, 0x101, 0x1, 0x40, 0x0, 0x200, 0x2, 0x3, 0x6, 0x5, 0x80000001, 0x3, 0x100, 0x1, 0xffffffad, 0x3, 0x9, 0x62, 0x5, 0x1, 0x7ff, 0x1, 0x10000, 0x100, 0x2, 0x11, 0x7, 0x328, 0x8, 0x6, 0x198, 0x9, 0x6, 0x7ff, 0x6, 0x100, 0x7fff, 0x59, 0x66800000, 0x5bc9009, 0x0, 0x1, 0x9, 0x1, 0xf37, 0x8001, 0x4, 0x6, 0x1, 0x400, 0x4], 0x46, ['*::&\xad^,:@\\/^[:&+~@[\xdc[\x00', ']\x00', '\x00', '\x00', '/dev/net/tun\x00', '}))\']\x17*(,\x00', '@^\x00', '#\x00', '*\x1e\x00', '/dev/net/tun\x00']}, ["", "", "", "", ""]}, 0x468}, 0x1, 0x0, 0x0, 0x20040891}, 0x10010) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x9200}, @val={0x1, 0x0, 0x14e, 0x2, 0x6, 0x81}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @rand_addr=0x64010100, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r2, &(0x7f0000000300), 0xfffffe8c) r3 = openat$cgroup_ro(r2, &(0x7f0000001e80)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001ec0)={0x0, 0x8000}, 0x4) 07:02:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xc805}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1347.524775][T16926] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1347.565898][T16926] device bond38 entered promiscuous mode [ 1347.575102][T16946] bond38 (unregistering): Released all slaves [ 1347.630793][T16800] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1347.678358][T16800] device bond64 entered promiscuous mode [ 1347.708808][T17028] bond64 (unregistering): Released all slaves 07:02:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}}}, 0x100c) 07:02:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xe803}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x10, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x20, 0x11, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 07:02:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}, 0x100c) 07:02:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xe00, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xf401}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1347.953263][T17107] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1348.040061][T17107] device bond40 entered promiscuous mode 07:02:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xfe80}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xff03}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x20480}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@dellink={0x28, 0x11, 0x1, 0xfffffffe, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000300)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private, @remote}}}], 0x20}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', r4}) [ 1348.495300][T17114] bond40 (unregistering): Released all slaves [ 1348.575467][T17131] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x34000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1348.755124][T17131] device bond64 entered promiscuous mode [ 1348.801082][T17151] bond64 (unregistering): Released all slaves [ 1349.101405][T17257] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0f0000}}}}, 0x100c) 07:02:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xc6, 0x3, 0x40, 0x2, 0x80, 0x80, 0x1d, 0x0, r2}, {0xdbd4, 0x392d, 0x7, 0x2, 0x0, 0x5}, {0xbc15, 0xff, 0xf443, 0x10001}, 0x0, 0x6e6bbc, 0x2, 0x1, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0xff}, 0xa, @in=@private=0xa010101, 0x3504, 0x4, 0x1, 0x36, 0x2, 0x5, 0xe3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r1, r2}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x3, 0x0, 0x5}, 0x7, 0x0, 0x2, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) r3 = getgid() r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000300)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, 0x0, &(0x7f0000000300)) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, 0x0, &(0x7f0000000300)) r7 = accept(r6, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f00000000c0)=0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r8, 0x0, 0x83, 0x0, &(0x7f0000000300)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00'], 0x13c}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x20, 0x1, 0x1, [r4, r5, r7, r8]}}], 0x40}, 0x4000800) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) 07:02:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x40000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x10, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3f00, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1349.237254][T17292] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1349.286604][T17292] device bond40 entered promiscuous mode [ 1349.293254][T17293] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1349.332808][T17293] device bond38 entered promiscuous mode 07:02:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x100000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1349.374641][T17294] device bond64 entered promiscuous mode [ 1349.394814][T17334] bond64 (unregistering): Released all slaves 07:02:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x400300}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x278}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1349.545512][T17292] bond40 (unregistering): Released all slaves 07:02:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xf0ff7f}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}}}, 0x100c) 07:02:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x1000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000}}}}, 0x100c) 07:02:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x1030000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x3, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x1e}, 0x16}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000011000200000000000000000000000000bec8f967517fba9a3dcd6b72df9c487570e00a7411e4fa49a7c6f16d02baaae30f0d952188f5dafea0db0120bcf88946448ffe5aff341107087183f1ce0d0a7993ee9752c50930b3ccb58de18aef4c754bdde19f9aac8e3018b7605b453df01927c224dfb985d9e8a647741c35b4edaf5e2b0485c9682a4fd2c9a641fe843172ade4e56169001d8e86cefaa09ed437f831b6c2f8c52071b9463ef2ff9155e5bc4d28876b5491501308a564c49eb8744d86141d7ddd9b5a8ed2b0b311c128831009", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b002c420d3d"], 0x28}}, 0x0) 07:02:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x10, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x5865, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x2000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1350.763171][T17528] device bond39 entered promiscuous mode [ 1350.848206][T17531] device bond64 entered promiscuous mode 07:02:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x3000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1350.936382][T17532] device bond40 entered promiscuous mode 07:02:10 executing program 0 (fault-call:6 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1351.003049][T17566] bond64 (unregistering): Released all slaves [ 1351.088684][T17574] bond40 (unregistering): Released all slaves [ 1351.113979][T17697] FAULT_INJECTION: forcing a failure. [ 1351.113979][T17697] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.146735][T17697] CPU: 1 PID: 17697 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 1351.155612][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.165962][T17697] Call Trace: [ 1351.169502][T17697] dump_stack+0x18f/0x20d [ 1351.173993][T17697] should_fail.cold+0x5/0x14 [ 1351.178708][T17697] should_failslab+0x5/0xf [ 1351.183276][T17697] kmem_cache_alloc_node+0x257/0x3c0 [ 1351.189057][T17697] __alloc_skb+0x71/0x550 [ 1351.193516][T17697] netlink_sendmsg+0x94f/0xd90 [ 1351.198542][T17697] ? netlink_unicast+0x7d0/0x7d0 [ 1351.203511][T17697] ? netlink_unicast+0x7d0/0x7d0 [ 1351.208728][T17697] sock_sendmsg+0xcf/0x120 [ 1351.213349][T17697] ____sys_sendmsg+0x6e8/0x810 [ 1351.218232][T17697] ? kernel_sendmsg+0x50/0x50 [ 1351.223366][T17697] ? do_recvmmsg+0x6d0/0x6d0 [ 1351.228127][T17697] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1351.234446][T17697] ? _parse_integer+0x132/0x180 [ 1351.239650][T17697] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1351.245804][T17697] ___sys_sendmsg+0xf3/0x170 [ 1351.250505][T17697] ? sendmsg_copy_msghdr+0x160/0x160 [ 1351.256115][T17697] ? __fget_files+0x272/0x400 [ 1351.261169][T17697] ? lock_downgrade+0x820/0x820 [ 1351.266275][T17697] ? find_held_lock+0x2d/0x110 [ 1351.271543][T17697] ? ksys_write+0x212/0x250 [ 1351.276083][T17697] ? __fget_files+0x294/0x400 [ 1351.280795][T17697] ? __fget_light+0xea/0x280 [ 1351.285425][T17697] __sys_sendmsg+0xe5/0x1b0 [ 1351.290042][T17697] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1351.295680][T17697] ? do_syscall_64+0x1c/0xe0 [ 1351.300292][T17697] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1351.306514][T17697] do_syscall_64+0x60/0xe0 [ 1351.310955][T17697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1351.317053][T17697] RIP: 0033:0x45c1d9 [ 1351.321092][T17697] Code: Bad RIP value. [ 1351.325282][T17697] RSP: 002b:00007f3bafb11c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1351.333844][T17697] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1d9 07:02:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x4000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1351.342069][T17697] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1351.350196][T17697] RBP: 00007f3bafb11ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1351.358487][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.366595][T17697] R13: 00007fff6b11a8cf R14: 00007f3bafb129c0 R15: 000000000078bfac 07:02:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x5000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x6000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1351.736177][T17665] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1351.793463][T17665] device bond40 entered promiscuous mode [ 1351.817381][T17531] validate_nla: 5 callbacks suppressed [ 1351.817392][T17531] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff}}}}, 0x100c) 07:02:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x7000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:11 executing program 4 (fault-call:6 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) 07:02:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:11 executing program 0 (fault-call:6 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1352.018672][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) 07:02:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x8000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1352.092866][T17793] FAULT_INJECTION: forcing a failure. [ 1352.092866][T17793] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.135281][T17807] FAULT_INJECTION: forcing a failure. [ 1352.135281][T17807] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.195232][T17786] device bond40 entered promiscuous mode [ 1352.202980][T17793] CPU: 0 PID: 17793 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 1352.211674][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.221745][T17793] Call Trace: [ 1352.225048][T17793] dump_stack+0x18f/0x20d [ 1352.229393][T17793] should_fail.cold+0x5/0x14 [ 1352.233996][T17793] should_failslab+0x5/0xf [ 1352.238419][T17793] kmem_cache_alloc_node+0x257/0x3c0 [ 1352.243710][T17793] __alloc_skb+0x71/0x550 [ 1352.248057][T17793] netlink_sendmsg+0x94f/0xd90 [ 1352.252831][T17793] ? netlink_unicast+0x7d0/0x7d0 [ 1352.257809][T17793] ? netlink_unicast+0x7d0/0x7d0 [ 1352.262773][T17793] sock_sendmsg+0xcf/0x120 [ 1352.267211][T17793] ____sys_sendmsg+0x6e8/0x810 [ 1352.271988][T17793] ? kernel_sendmsg+0x50/0x50 [ 1352.276667][T17793] ? do_recvmmsg+0x6d0/0x6d0 [ 1352.281280][T17793] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1352.287278][T17793] ? _parse_integer+0x132/0x180 [ 1352.292148][T17793] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1352.298152][T17793] ___sys_sendmsg+0xf3/0x170 [ 1352.302759][T17793] ? sendmsg_copy_msghdr+0x160/0x160 [ 1352.308079][T17793] ? __fget_files+0x272/0x400 [ 1352.312786][T17793] ? lock_downgrade+0x820/0x820 [ 1352.317656][T17793] ? find_held_lock+0x2d/0x110 [ 1352.322431][T17793] ? ksys_write+0x212/0x250 [ 1352.327379][T17793] ? __fget_files+0x294/0x400 [ 1352.332072][T17793] ? __fget_light+0xea/0x280 [ 1352.336677][T17793] __sys_sendmsg+0xe5/0x1b0 [ 1352.341188][T17793] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1352.346228][T17793] ? do_syscall_64+0x1c/0xe0 [ 1352.350819][T17793] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1352.356824][T17793] do_syscall_64+0x60/0xe0 [ 1352.361244][T17793] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1352.367134][T17793] RIP: 0033:0x45c1d9 [ 1352.371016][T17793] Code: Bad RIP value. [ 1352.375097][T17793] RSP: 002b:00007fa11e6d2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.383523][T17793] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1d9 [ 1352.391673][T17793] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1352.399650][T17793] RBP: 00007fa11e6d2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.408682][T17793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.416664][T17793] R13: 00007ffe6e6cfb4f R14: 00007fa11e6d39c0 R15: 000000000078bfac [ 1352.424756][T17807] CPU: 1 PID: 17807 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 1352.433444][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.443614][T17807] Call Trace: [ 1352.446923][T17807] dump_stack+0x18f/0x20d [ 1352.451455][T17807] should_fail.cold+0x5/0x14 [ 1352.456063][T17807] should_failslab+0x5/0xf [ 1352.460486][T17807] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1352.466301][T17807] __kmalloc_node_track_caller+0x38/0x60 [ 1352.471987][T17807] __alloc_skb+0xae/0x550 [ 1352.476321][T17807] netlink_sendmsg+0x94f/0xd90 [ 1352.481124][T17807] ? netlink_unicast+0x7d0/0x7d0 [ 1352.481522][T17790] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x9000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1352.486078][T17807] ? netlink_unicast+0x7d0/0x7d0 [ 1352.499083][T17807] sock_sendmsg+0xcf/0x120 [ 1352.503513][T17807] ____sys_sendmsg+0x6e8/0x810 [ 1352.508297][T17807] ? kernel_sendmsg+0x50/0x50 [ 1352.512983][T17807] ? do_recvmmsg+0x6d0/0x6d0 [ 1352.517678][T17807] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1352.523675][T17807] ? _parse_integer+0x132/0x180 [ 1352.528551][T17807] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1352.539066][T17807] ___sys_sendmsg+0xf3/0x170 [ 1352.543772][T17807] ? sendmsg_copy_msghdr+0x160/0x160 [ 1352.549073][T17807] ? __fget_files+0x272/0x400 [ 1352.554048][T17807] ? lock_downgrade+0x820/0x820 [ 1352.557264][T17790] device bond64 entered promiscuous mode [ 1352.559435][T17807] ? find_held_lock+0x2d/0x110 [ 1352.559454][T17807] ? ksys_write+0x212/0x250 [ 1352.559473][T17807] ? __fget_files+0x294/0x400 [ 1352.559493][T17807] ? __fget_light+0xea/0x280 [ 1352.559521][T17807] __sys_sendmsg+0xe5/0x1b0 07:02:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xa000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1352.565677][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1352.570174][T17807] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1352.570201][T17807] ? do_syscall_64+0x1c/0xe0 [ 1352.570218][T17807] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1352.570236][T17807] do_syscall_64+0x60/0xe0 [ 1352.570252][T17807] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1352.570265][T17807] RIP: 0033:0x45c1d9 [ 1352.570270][T17807] Code: Bad RIP value. [ 1352.570277][T17807] RSP: 002b:00007f3bafb11c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 07:02:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xe000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1352.640116][T17807] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1d9 [ 1352.648115][T17807] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1352.656118][T17807] RBP: 00007f3bafb11ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.664100][T17807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.672625][T17807] R13: 00007fff6b11a8cf R14: 00007f3bafb129c0 R15: 000000000078bfac 07:02:12 executing program 4 (fault-call:6 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1352.879116][T17791] device bond41 entered promiscuous mode [ 1352.927458][T17806] bond64 (unregistering): Released all slaves [ 1353.004175][T17914] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1353.016345][T17963] FAULT_INJECTION: forcing a failure. [ 1353.016345][T17963] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.100538][T17963] CPU: 1 PID: 17963 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 1353.109247][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.119309][T17963] Call Trace: [ 1353.122621][T17963] dump_stack+0x18f/0x20d [ 1353.127002][T17963] should_fail.cold+0x5/0x14 [ 1353.131618][T17963] should_failslab+0x5/0xf [ 1353.136055][T17963] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1353.141893][T17963] __kmalloc_node_track_caller+0x38/0x60 [ 1353.147540][T17963] __alloc_skb+0xae/0x550 [ 1353.151881][T17963] netlink_sendmsg+0x94f/0xd90 [ 1353.156648][T17963] ? netlink_unicast+0x7d0/0x7d0 [ 1353.161598][T17963] ? netlink_unicast+0x7d0/0x7d0 [ 1353.166613][T17963] sock_sendmsg+0xcf/0x120 [ 1353.171035][T17963] ____sys_sendmsg+0x6e8/0x810 [ 1353.175809][T17963] ? kernel_sendmsg+0x50/0x50 [ 1353.180483][T17963] ? do_recvmmsg+0x6d0/0x6d0 [ 1353.185080][T17963] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1353.191069][T17963] ? _parse_integer+0x132/0x180 [ 1353.195937][T17963] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1353.201928][T17963] ___sys_sendmsg+0xf3/0x170 [ 1353.206525][T17963] ? sendmsg_copy_msghdr+0x160/0x160 [ 1353.211811][T17963] ? __fget_files+0x272/0x400 [ 1353.216503][T17963] ? lock_downgrade+0x820/0x820 [ 1353.221366][T17963] ? find_held_lock+0x2d/0x110 [ 1353.226136][T17963] ? ksys_write+0x212/0x250 [ 1353.230651][T17963] ? __fget_files+0x294/0x400 [ 1353.235337][T17963] ? __fget_light+0xea/0x280 [ 1353.239932][T17963] __sys_sendmsg+0xe5/0x1b0 [ 1353.244437][T17963] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1353.249507][T17963] ? do_syscall_64+0x1c/0xe0 [ 1353.254098][T17963] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1353.260087][T17963] do_syscall_64+0x60/0xe0 [ 1353.264523][T17963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1353.270423][T17963] RIP: 0033:0x45c1d9 [ 1353.274312][T17963] Code: Bad RIP value. [ 1353.278378][T17963] RSP: 002b:00007fa11e6d2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1353.286796][T17963] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1d9 [ 1353.294774][T17963] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1353.302783][T17963] RBP: 00007fa11e6d2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1353.310781][T17963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.319368][T17963] R13: 00007ffe6e6cfb4f R14: 00007fa11e6d39c0 R15: 000000000078bfac [ 1353.406018][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}}}}, 0x100c) 07:02:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x10000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:13 executing program 0 (fault-call:6 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:13 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000280)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@can_newroute={0x34, 0x18, 0x400, 0x70bd29, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_AND={0x15, 0x1, {{{0x2}, 0x2, 0x2, 0x0, 0x0, "c9d605283e85b94e"}, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000300)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, 0x0, &(0x7f0000000300)) tee(r4, r5, 0x100000000, 0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) 07:02:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6558, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1353.478633][T17929] device bond41 entered promiscuous mode [ 1353.548931][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1353.588927][T18008] device bond42 entered promiscuous mode [ 1353.628335][T18008] FAULT_INJECTION: forcing a failure. [ 1353.628335][T18008] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.641388][T18008] CPU: 1 PID: 18008 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 1353.643155][T18045] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1353.650078][T18008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.668443][T18008] Call Trace: [ 1353.671742][T18008] dump_stack+0x18f/0x20d [ 1353.676079][T18008] should_fail.cold+0x5/0x14 [ 1353.680674][T18008] should_failslab+0x5/0xf [ 1353.685098][T18008] kmem_cache_alloc+0x40/0x3b0 [ 1353.689869][T18008] skb_clone+0x14f/0x3c0 [ 1353.694197][T18008] netlink_deliver_tap+0x990/0xb70 [ 1353.699414][T18008] netlink_unicast+0x5e5/0x7d0 [ 1353.704193][T18008] ? netlink_attachskb+0x810/0x810 [ 1353.709311][T18008] ? _copy_from_iter_full+0x247/0x890 [ 1353.714696][T18008] ? __phys_addr+0x9a/0x110 [ 1353.719207][T18008] ? __phys_addr_symbol+0x2c/0x70 [ 1353.724253][T18008] ? __check_object_size+0x171/0x3e4 [ 1353.729555][T18008] netlink_sendmsg+0x856/0xd90 [ 1353.734335][T18008] ? netlink_unicast+0x7d0/0x7d0 [ 1353.739583][T18008] ? netlink_unicast+0x7d0/0x7d0 [ 1353.744530][T18008] sock_sendmsg+0xcf/0x120 [ 1353.746480][T18045] device bond64 entered promiscuous mode [ 1353.748962][T18008] ____sys_sendmsg+0x6e8/0x810 [ 1353.759337][T18008] ? kernel_sendmsg+0x50/0x50 [ 1353.764018][T18008] ? do_recvmmsg+0x6d0/0x6d0 [ 1353.768624][T18008] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1353.774618][T18008] ? _parse_integer+0x132/0x180 [ 1353.779499][T18008] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1353.785490][T18008] ___sys_sendmsg+0xf3/0x170 [ 1353.790091][T18008] ? sendmsg_copy_msghdr+0x160/0x160 [ 1353.795383][T18008] ? __fget_files+0x272/0x400 [ 1353.800068][T18008] ? lock_downgrade+0x820/0x820 [ 1353.804918][T18008] ? find_held_lock+0x2d/0x110 [ 1353.809690][T18008] ? ksys_write+0x212/0x250 [ 1353.814194][T18008] ? __fget_files+0x294/0x400 [ 1353.818873][T18008] ? __fget_light+0xea/0x280 [ 1353.823462][T18008] __sys_sendmsg+0xe5/0x1b0 [ 1353.827960][T18008] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1353.832987][T18008] ? do_syscall_64+0x1c/0xe0 [ 1353.837571][T18008] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1353.843548][T18008] do_syscall_64+0x60/0xe0 [ 1353.847961][T18008] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1353.853850][T18008] RIP: 0033:0x45c1d9 [ 1353.857735][T18008] Code: Bad RIP value. [ 1353.861799][T18008] RSP: 002b:00007f3bafb32c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1353.870463][T18008] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1d9 07:02:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x11000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1353.878432][T18008] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1353.887315][T18008] RBP: 00007f3bafb32ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1353.895315][T18008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1353.903287][T18008] R13: 00007fff6b11a8cf R14: 00007f3bafb339c0 R15: 000000000078bf0c 07:02:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x20000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1353.985544][T18049] bond64 (unregistering): Released all slaves 07:02:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1354.081851][T18008] bond42 (unregistering): Released all slaves 07:02:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x20000140}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1354.193805][T18049] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x3d0d422c}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private, @remote}}}], 0x20}}], 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r5, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private, @remote}}}], 0x20}}], 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r8, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private, @remote}}}], 0x20}}], 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802040}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="d800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r2, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000600050003000b0000002400060004002414000000000001057cff070000000002025f0000007d0002070800000040000100240001006c625f706f72745f737461747300000040a6554b026b38e549e80c338c33000000000000000000000000000000050003000b00000008900400183acdc3080006009a4b164650298872a77b8cfac93300d8034dfd484a7cc678397f5ca2cce81536272679685ae347ede9c34309101cc35c23ab460cbd8df7253425b9f343f939862b910afd46af818540a6a0498377f0ce10f61c412c9c9d8fdad7ea70abc97d90492ddcbdf5cd68be90d3dca315f630ba5011667e8bb82a2478e9f68bdda2a1123b24c1939e5184c66f19222a11cc5092e1d7486a91b3b5512c9b8b6d6f5f13374a0631de840db3c2c62eb6455f6d876860e937b43e214e93aea50f", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400300c000008000600", @ANYRES32=r10, @ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000810) [ 1354.305009][T18049] device bond64 entered promiscuous mode [ 1354.312874][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x30000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1354.455024][T18163] device bond42 entered promiscuous mode [ 1354.489567][T18172] bond42 (unregistering): Released all slaves 07:02:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}}, 0x100c) 07:02:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x38000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8100, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:14 executing program 3: unshare(0x40000000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000140)=@caif=@rfm={0x25, 0x3, "9877cbf36efe7c6504489a3a9bf8f07e"}, 0x80) accept4(r0, 0x0, &(0x7f0000004a80), 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x481480, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r1) 07:02:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xa, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1354.714879][T18283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x3f000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x40000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1354.850337][T18283] device bond42 entered promiscuous mode [ 1354.866842][T18316] IPVS: ftp: loaded support on port[0] = 21 [ 1354.869037][T18289] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1354.995397][T18289] device bond65 entered promiscuous mode [ 1355.005079][T18294] bond42 (unregistering): Released all slaves 07:02:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x40010020}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1355.080199][T18317] bond65 (unregistering): Released all slaves [ 1355.163367][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x44edff7f}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1355.322760][T18331] device bond42 entered promiscuous mode 07:02:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x60000000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x7fffe480}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1355.895546][T18316] lo speed is unknown, defaulting to 1000 [ 1355.895594][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1355.934117][T18289] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1355.970304][T18494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1356.046893][T18494] device bond42 entered promiscuous mode [ 1356.056575][T18498] bond42 (unregistering): Released all slaves 07:02:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}, 0x100c) 07:02:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x7fffed44}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xe, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1356.179848][T18498] device bond42 entered promiscuous mode [ 1356.205914][T18498] bond42 (unregistering): Released all slaves [ 1356.445306][T18649] device bond43 entered promiscuous mode 07:02:17 executing program 3: unshare(0x4000a00) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) 07:02:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x7ffff000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xf, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x6, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}}, 0x100c) [ 1358.168121][T18739] __nla_validate_parse: 3 callbacks suppressed [ 1358.168132][T18739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x7ffffff7}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1358.263885][T18739] device bond44 entered promiscuous mode [ 1358.271041][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040600d284ee02000000000000000007"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000e0) 07:02:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x80040200}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1358.372762][T18740] device bond42 entered promiscuous mode [ 1358.409551][T18743] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1358.490293][T18743] device bond65 entered promiscuous mode [ 1358.513731][T18759] bond42 (unregistering): Released all slaves 07:02:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x80e4ff7f}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1358.537452][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1358.537466][ T29] audit: type=1804 audit(1595314938.028:509): pid=18867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/1984/cgroup.controllers" dev="sda1" ino=16053 res=1 [ 1358.611236][T18762] bond65 (unregistering): Released all slaves 07:02:18 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000580)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)={0x0, 0x7, [], [@hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x68}, @pad1, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x18, {0x2, 0x4, 0xf0, 0x83ac, [0x2, 0x8000]}}]}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4001) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 07:02:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0x8dffffff}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1358.699707][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x10, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1359.005244][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1359.031688][T18762] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1359.058630][T18948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xb80b0000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002f000511d25a80648c63940d0224fc60100006400a0003000200000037153e370a00018009000000d1bd", 0x33fe0}], 0x1}, 0x0) 07:02:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf0ffff, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1359.120311][T18948] device bond45 entered promiscuous mode [ 1359.446874][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1359.458642][T18997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1359.535873][T18997] device bond42 entered promiscuous mode [ 1359.546747][T19001] bond42 (unregistering): Released all slaves [ 1359.585287][T19002] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1359.628977][T19002] device bond65 entered promiscuous mode [ 1359.637489][T19004] bond65 (unregistering): Released all slaves 07:02:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}, 0x100c) 07:02:19 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) clock_gettime(0x0, &(0x7f0000006c00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)=""/149, 0x95}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000000640)=""/193, 0xc1}, {&(0x7f0000000740)=""/202, 0xca}, {&(0x7f0000000840)=""/177, 0xb1}], 0x5, &(0x7f0000000980)=""/178, 0xb2}, 0x27}, {{&(0x7f0000000a40)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000ac0)=""/44, 0x2c}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/177, 0xb1}, {&(0x7f00000098c0)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/91, 0x5b}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/233, 0xe9}, {&(0x7f0000000f40)=""/48, 0x30}, {&(0x7f0000000f80)=""/69, 0x45}], 0x9, &(0x7f00000010c0)=""/142, 0x8e}, 0x1f}, {{&(0x7f0000001180)=@can, 0x80, &(0x7f0000001440)=[{&(0x7f0000001200)=""/179, 0xb3}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/25, 0x19}, {&(0x7f0000001300)=""/218, 0xda}, {&(0x7f0000001400)=""/11, 0xb}], 0x5, &(0x7f00000014c0)=""/180, 0xb4}, 0x3ff}, {{&(0x7f0000001580)=@x25, 0x80, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/90, 0x5a}, {&(0x7f0000001680)=""/51, 0x33}, {&(0x7f00000016c0)=""/192, 0xc0}, {&(0x7f0000001780)=""/118, 0x76}], 0x4, &(0x7f0000001840)=""/216, 0xd8}, 0x40}, {{&(0x7f0000003640)=@nfc_llcp, 0x80, &(0x7f0000003b00)=[{&(0x7f00000036c0)}, {&(0x7f0000003700)=""/140, 0x8c}, {&(0x7f00000037c0)=""/163, 0xa3}, {&(0x7f0000003880)=""/37, 0x25}, {&(0x7f00000038c0)=""/205, 0xcd}, {&(0x7f00000039c0)=""/135, 0x87}, {&(0x7f0000003a80)=""/99, 0x63}], 0x7, &(0x7f0000003b80)=""/175, 0xaf}, 0x5}, {{&(0x7f0000003c40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003cc0)=""/188, 0xbc}, {&(0x7f0000003d80)=""/110, 0x6e}, {&(0x7f0000003e00)=""/215, 0xd7}], 0x3, &(0x7f0000003f40)=""/51, 0x33}, 0x7}, {{&(0x7f0000003f80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001800)=[{&(0x7f0000009a00)=""/4096, 0x1000}], 0x1, &(0x7f0000004040)=""/186, 0xba}, 0x40}, {{0x0, 0x0, &(0x7f0000009980)=[{&(0x7f0000004100)=""/86, 0x56}, {&(0x7f0000004180)=""/240, 0xf0}, {&(0x7f0000004280)=""/108, 0x6c}, {&(0x7f0000004300)=""/209, 0xd1}, {&(0x7f0000004400)=""/39, 0x27}, {&(0x7f0000004440)=""/151, 0x97}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/126, 0x7e}], 0x8, &(0x7f0000005580)=""/7, 0x7}, 0x5}, {{&(0x7f00000055c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000006900)=[{&(0x7f0000005640)=""/10, 0xa}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/251, 0xfb}, {&(0x7f0000006780)=""/109, 0x6d}, {&(0x7f0000006800)=""/234, 0xea}], 0x5, &(0x7f0000006980)=""/16, 0x10}, 0x1}], 0x9, 0x40000020, &(0x7f0000006c40)={r2, r3+60000000}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000006c80)=r4) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='gre0\x00'}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet(0x2, 0x80001, 0x0) sendmmsg$inet6(r5, &(0x7f0000009780)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x20, @rand_addr=' \x01\x00', 0x47}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000006cc0)="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", 0x1000}, {&(0x7f0000007cc0)="eb7deb24bee892cc3131bcaa9509c794183fdf9c585fd0e8184e922ee9fd46110a1f2d12db07f2097eafab2382f95dd7becb898a42ed3d2dbb25e2ad46db1a7bd5fc32747fdd3aa7356f20cdb989942fb00ccac3e46429b0485a86d1d79da863d934209788623f003faa9bc4beefecdb4797cfa43d6f1322278580eb10ff5f42ee80a074ea3c51e289304337837131085e1147ed750c46ceeed92c0a8159236270bb1099c1dee486fd0ba746fee8c3877d902a46a85f30fe0cea91058de4318ddcbbfd1ec4a7bf7a3a590fe3f2bfb6b6577364e306e44e0d26138400a21b4580f33a6c3dae6e76b336bc3a", 0xeb}, {&(0x7f0000007dc0)="5b3bfbc4ab30a50699ac0dfd5ce6f1f5ebb8e9ffabbae5037f425326df9d822d34a17908d842a67a83e0d31c1284e05c2f5b790a638e47a9b6dd953a09e6e396d89b1ea277532018a40c96cf7ae8b83d562a17cae1a823ae889ef32dcd605e476e6e4dbdbe1fe1a561cd145a41e26c0cd86b22d818db81f7ea2aad0ff9766bb686003b38adc5e2fe2c35f063eee27d6bdc3c917de43701b5b9563a6aab238da8f3dc42bd58bf835d5b78", 0xaa}, {&(0x7f0000007e80)="0c0d5e8f317f2838ed66e39fff2d7b9f9229cba9836046d02eede720dbf8bd08dc2856e09b47074eadd5d8c0d44ca628258b691954eaa164251823dbf2ad04e2260df09fdf8d841f3db78c66e5eb8e05a5db04fe348ecdf65c3efb3c5ff48e60bb53c149b3d236851d964acddce340c6dbd168080f9ace5b009d4ddb4c5a7fca536222e2594e763a252bec79c6d071dda4f7fac0fde3f70df84dbff90b4a97cd3ffbf953b852f91b84b71cda0713ab93d4bb3ac42e08fb6ceec170724697e70c67c7843259eb38e27d07737192ffd005d6ec33a1f1", 0xd5}], 0x4, &(0x7f0000007f80)=[@dstopts_2292={{0x268, 0x29, 0x4, {0x88, 0x4a, [], [@calipso={0x7, 0x30, {0x3, 0xa, 0x20, 0x9, [0x2, 0x2, 0xc0, 0x0, 0x4a16]}}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x0, [0xffffffffffff7fff, 0x8000, 0x9, 0x349]}}, @generic={0x3, 0xe8, "fbe75acd923924eaac07d58b154f616a066522f03b66973ef9fef1d472954afd5a55bf179886fffe666eef9e67b83b2282396b9cd45ea41648c643fc7d2e7dc749dac6744553bf02f6e4ca97ed1fa85cc716a66a63bc1218d839ccb25a400a79f99fda547280c03d7bb3374f34bb67c37330c88539ede957344e7dfd2ac18a50c9e704709184caa6f2ae2db4b551f240b3c56c76858f94fb25ac62c47a88f78a5345af1155e6331b8f1bfb0f90bd1af12f753d822621794c4de63497bc6ba171e19e7a5f833fae32055a65e8c32bd5acddd6a2497d773a6d1671869793137dfe8b19eb29a0f09b6e"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x1, 0x1, [0x4, 0x6, 0xbb]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0xc4, "2e4a99acbde2a41cf8fd49c42670782729c2d979e9fd88d05eaac152a882c6b5c0cc549f5cfe7af67478fdb584b190ce92aa52063e9c9581ef99d1bdd957e1862fbd0543834f741a889070adb2f865beecf011cd715fe42ddff94d84be7109812eac72b7a32367bf28408caf320a0785031bc00b582dac28ca4c63edd2b68c7c89b4529ece8d0d4537c9e7b1775473239ceaa675705124b68cb64de0f31972120908de7c13fd7a0c0bc1211acd049fdf501b74887c78f54a0e333f7973600e55d1d7849c"}, @enc_lim={0x4, 0x1, 0x3a}]}}}], 0x268}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x2, @local, 0x20}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000000440)="328134369e6af448f1d307ef12955f6747734ae552d9754259dead3e73ed254bbb526af9efc606e1a063f607e757b14dcb62a08793ea5266aec2134613680d", 0x3f}], 0x1, &(0x7f0000004000)}}, {{&(0x7f0000008200)={0xa, 0x4e20, 0x2, @local, 0x200}, 0x1c, &(0x7f0000008280)=[{&(0x7f0000008240)="c83b0225f6631328bebc6ae12d6c9c7e1f704ae8726556ee27afa6b0ea3931", 0x1f}], 0x1}}, {{&(0x7f00000082c0)={0xa, 0x4e24, 0x10000, @local, 0x10000}, 0x1c, &(0x7f0000008400)=[{&(0x7f0000008300)="f94e04023199875433f3206d1e0c66e3b7802469a95daf66e43377a9f4dc0089b121267eddf5206e102b78290d768a5ca751c246c46fa2f044c50046f8ab794f1c829d0911a6c551637c65dc92fee66c228ec20a22cac44f0d60eb433e4640211a29c725f10c25da34409c3ed733a9b3585bc8434be251ef697db5a855b0eab7da7c889073908376fde2a6f78a9485dfcfa742a1d91420cafced05cfe2335cdd786738f70985e5e3ca39f503902202f7037e05e7805a4f224fc7aa67d6029166ebe8a08c537118e46080f884766dec65aa53fdf628609f7a3778fd54320ad68359a65bb7352adc52ee046a639fb34d1f1ed813fc0afc230c", 0xf8}], 0x1, &(0x7f0000008440)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x5e, 0x6, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x8, 0x62, [0x9, 0x8c1, 0x69]}}, @jumbo={0xc2, 0x4, 0x8000}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x50}}, {{&(0x7f00000084c0)={0xa, 0x4e22, 0x7, @mcast1, 0xffff}, 0x1c, &(0x7f00000095c0)=[{&(0x7f0000008500)="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", 0x1000}, {&(0x7f0000009500)="7f93882491e6f01f027a57bd0497b1cb2175d2cfd4bb7eedc1a9c79ed5352aaea80a8ad5a59704b5668d1fc3d9c4c369ce2c7cce4fc96dc0b29a335a42153938d3f17a54e7f56baab067f90cb4ff45d521f27e81a7fca94dd1687a2b91dbeb997a9b015d7d0511fcb39d386d4253543442ee5e9a648f40f5761c9eaae86b4d90182567", 0x83}], 0x2, &(0x7f0000009600)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x33, 0x10, 0x2, 0x25, 0x0, [@remote, @remote, @mcast2, @remote, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x38}, @mcast2, @empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts={{0x88, 0x29, 0x37, {0x6, 0xd, [], [@pad1, @generic={0x0, 0x51, "179b16a0cc23c98450051a31d48d6b17b55fa3b57f789810e27f0f51b4178b4e62bea0f4ed586221f76d3c3c2c031c187acdff4c5df0e220b20ce7891dff6ed6594b41c85848521a4c3562b1536ea26def"}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x150}}], 0x5, 0x4040080) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x762e, @private1, 0x20}}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b901036000000601001fffffe100", 0x0, 0x3f00, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:02:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xc8050000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x25, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1359.683926][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1359.740157][T19001] device bond42 entered promiscuous mode [ 1359.749168][T19004] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x1000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1359.865799][T19004] device bond65 entered promiscuous mode 07:02:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x27, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1359.929002][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1360.027961][T19194] device bond46 entered promiscuous mode [ 1360.039691][T19233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xe8030000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x2f, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', r2, 0x2f, 0xff, 0xc0, 0x5, 0x42, @rand_addr=' \x01\x00', @loopback, 0x700, 0x7, 0x9, 0x6}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) connect$can_bcm(r1, &(0x7f00000004c0)={0x1d, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}]}, 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x30, r8, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x68, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x40}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r9, 0x0, 0x83, 0x0, &(0x7f0000000300)) getsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f0000580002000e0000000000000000000800000000000000200000000000000000000000000000010000feff00000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000bfba81ecd60e9a7877a2f2f8e882cace697e5f90657c69ebc3de7d74490755e9128121b6d9dd7b1e3f2ecb0bf5a4c521842cdf8ffdb3e0bc407ea5cf0f519ddf76d8fd1047c977c3dc3fd184da6b535a0d8fe7b03a3af6062f31a312bd1d576bf6186e05"], 0x88}}, 0x0) 07:02:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xeffdffff}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xf4010000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1360.547038][T19262] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xf5ffffff}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1360.619000][T19262] device bond66 entered promiscuous mode [ 1360.677514][T19264] device bond43 entered promiscuous mode [ 1360.697720][T19266] bond66 (unregistering): Released all slaves [ 1360.833660][T19268] device bond47 entered promiscuous mode [ 1360.852008][T19270] bond43 (unregistering): Released all slaves [ 1360.889843][T19266] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1360.936945][T19266] device bond66 entered promiscuous mode [ 1361.015177][T19270] device bond43 entered promiscuous mode [ 1361.036346][T19470] bond66 (unregistering): Released all slaves 07:02:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0xa) 07:02:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xf7ffff7f}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x43, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1361.093030][T19524] bond43 (unregistering): Released all slaves 07:02:20 executing program 3: r0 = socket$kcm(0x29, 0x7, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000300)) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00'}) r3 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) r4 = socket(0x29, 0x3, 0xffffffff) sendmsg(r4, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}, 0x40012100) write$binfmt_elf32(r4, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0xfffffd6d) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000380)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r2}) 07:02:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x2000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1361.292571][T19605] device bond48 entered promiscuous mode [ 1361.363529][T19652] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1361.399915][T19652] device bond66 entered promiscuous mode 07:02:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x28, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xfe800000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1361.413376][T19652] bond66 (unregistering): Released all slaves 07:02:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x60, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xfeffffff}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8ba}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004850}, 0x20004010) 07:02:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xff030000}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)=ANY=[@ANYBLOB='D\x00\b@', @ANYRES16=r3, @ANYBLOB="010000000000000000002c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x74, r3, 0x309, 0x70bd26, 0x0, {0xb}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x74}}, 0x0) [ 1362.039901][T19725] device bond43 entered promiscuous mode [ 1362.058468][T19728] bond43 (unregistering): Released all slaves [ 1362.153562][T19731] device bond49 entered promiscuous mode [ 1362.205800][T19852] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1362.252043][T19852] device bond66 entered promiscuous mode [ 1362.275831][T19728] device bond43 entered promiscuous mode [ 1362.293362][T19851] bond66 (unregistering): Released all slaves 07:02:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0xc) 07:02:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xfffffdef}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfffffff3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$ax25(r2, &(0x7f0000000300)={{0x3, @bcast, 0x7}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @null, @bcast]}, 0x48) sendto$inet(r0, &(0x7f0000000080)=';', 0x1, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000040), 0xfd1b, 0x4004800, 0x0, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="ab", 0x1}], 0x1}, 0x0) 07:02:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xc0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xffffff8d}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xfffffff5}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1362.799797][T19972] device bond50 entered promiscuous mode [ 1362.806440][T19973] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1362.853908][T19973] device bond66 entered promiscuous mode [ 1362.896444][T19975] device bond44 entered promiscuous mode [ 1362.912272][T19978] bond66 (unregistering): Released all slaves 07:02:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc, 0x0, 0x0, 0xfffffffe}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:22 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x29, 0xa, 0x8d7, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0x60}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c120000070a01030000000000000000000000000800094000000002140005800800014000000000080001400000000d0c000640000000000000000108000a4000000002090001"], 0x128c}}, 0x4000080) [ 1362.942287][T19979] bond44 (unregistering): Released all slaves 07:02:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x6c0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1363.200774][T20170] __nla_validate_parse: 14 callbacks suppressed [ 1363.200786][T20170] netlink: 4668 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1363.376732][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1363.418659][T20168] device bond51 entered promiscuous mode [ 1363.426037][T20173] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1363.448638][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1363.469864][T20171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x1003) 07:02:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:23 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000004060000000f0000000000000000000075000400a982851b0900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x24, r4, 0x800, 0x70bd29, 0x0, {0xf}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x0, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x0, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x0, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x7fffffff}]}, 0x24}}, 0x20000041) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r6, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x3, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x58, 0x2, 0x7, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40180}, 0x20004044) sendfile(r8, r2, 0x0, 0x100000000) 07:02:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x2000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xec0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1363.596425][T20222] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x2}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1363.763041][T20222] device bond66 entered promiscuous mode [ 1363.769329][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x8d0}}, 0x0) 07:02:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x3}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1363.863105][T20225] device bond44 entered promiscuous mode [ 1363.872441][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1364.003970][T20228] device bond52 entered promiscuous mode 07:02:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x4}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1364.049354][T20229] bond66 (unregistering): Released all slaves [ 1364.112121][T20245] bond44 (unregistering): Released all slaves [ 1364.201045][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x33fe0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x40000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r2, &(0x7f0000001200)=[{&(0x7f0000000000)="dd068b4f18851fe7909b4f3f7869320ef3de4f4a9440dd54250f24fd7d4c5d6e693f7dd417ea7fd3f44e6e0b033d817499f40a7aba54d01c8273803e31d7c14e1d2c2cb9fd694d0514390adf7762ea8c79f430d2661de402f187007dba105ea879", 0x61}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa3ae628eb8349162}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x134, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x921f}]}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x54780133}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb5e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdb21}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40020}, 0x48040) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="45000000e55590c336f21945f650239ccc109c8b153cf408b05ab92acde6f724b600dc85fff6ed07842b762921950536d982664f6501c2b718cf6a91368982582c5f36ab160174f99425c6e7e502f4a5f1b10c748981527363279ca3e0e03c8222cb53da9a9bc19f8dde4477b4a53fb00021dc36626dc3063ebfe75364f2cc4cc0a2655034c1", @ANYRES16, @ANYBLOB="000229bd7000fddbdf250500000014000200fe8000000000000000000000000000bb0500010001000000080005006401010214000300fe80000000000000000000000000003d"], 0x4c}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x7c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x30}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48010}, 0x4000880) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) r4 = accept4$inet(r3, &(0x7f0000001140)={0x2, 0x0, @dev}, &(0x7f0000001180)=0x10, 0x0) write$binfmt_script(r4, &(0x7f00000011c0)=ANY=[@ANYRESOCT=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x83, &(0x7f0000000080)=""/4091, &(0x7f00000010c0)=0xffb) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000001080)=0xfffd, &(0x7f0000001100)=0x2) [ 1364.591164][T20229] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1364.608563][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1364.679537][T20423] device bond53 entered promiscuous mode [ 1364.699940][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1364.736342][T20427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x1005) 07:02:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x5}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20000520, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1364.969314][T20485] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x6}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1365.024869][T20485] device bond66 entered promiscuous mode [ 1365.059235][T20487] device bond54 entered promiscuous mode 07:02:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x7}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1365.147753][T20486] device bond44 entered promiscuous mode [ 1365.178831][T20485] bond66 (unregistering): Released all slaves 07:02:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r8, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}}, 0x44000) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070000000059e86e4640aabc34", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(@\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_getneigh={0x20, 0x1e, 0xc01, 0x70bd27, 0x25dfdbf7, {0x7, 0x0, 0x0, r6, 0x200}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000858) 07:02:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x8}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x9}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x7ffff000, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1365.322752][T20526] bond44 (unregistering): Released all slaves 07:02:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x2007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x54}}, 0x0) [ 1365.793420][T20509] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1365.842108][T20687] device bond55 entered promiscuous mode 07:02:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x1008) 07:02:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xa}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xa000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x10000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0xf, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xe}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1366.375239][T20759] device bond44 entered promiscuous mode [ 1366.383174][T20757] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1366.489102][T20757] device bond4 entered promiscuous mode [ 1366.517264][T20756] device bond56 entered promiscuous mode [ 1366.527511][T20761] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x10}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1366.608221][T20761] device bond66 entered promiscuous mode [ 1366.631201][T20759] bond44 (unregistering): Released all slaves [ 1366.695202][T20800] bond66 (unregistering): Released all slaves 07:02:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x11}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1366.770207][T20797] bond4 (unregistering): Released all slaves 07:02:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x43, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1366.896336][T20789] device bond44 entered promiscuous mode 07:02:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x30}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x38}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1367.282242][T20800] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1367.360157][T21052] device bond57 entered promiscuous mode 07:02:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x1012) 07:02:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x60}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x27000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x73, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xc000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x103}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1367.805701][T21119] device bond45 entered promiscuous mode [ 1367.909104][T21118] device bond58 entered promiscuous mode [ 1367.926099][T21122] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:02:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x1f4}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1368.014650][T21122] device bond4 entered promiscuous mode [ 1368.030807][T21124] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x300}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1368.106413][T21124] device bond66 entered promiscuous mode [ 1368.130473][T21154] bond4 (unregistering): Released all slaves [ 1368.183849][T21146] bond45 (unregistering): Released all slaves 07:02:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x301}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1368.275475][T21164] bond66 (unregistering): Released all slaves 07:02:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x3e8}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1368.357580][T21147] __nla_validate_parse: 15 callbacks suppressed [ 1368.357591][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0x60}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, 0x4, 0x3, 0x3, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x4}, [@typed={0x8, 0x2c, 0x0, 0x0, @str='GPL\x00'}, @typed={0xd0, 0x0, 0x0, 0x0, @binary="dd62da2520a48387933d24e8944859246a7b19e3cef680f0ecb998cd9dbfad08373077b0cc5ac06191d4cae9374b5a1e096d02d9f62a6090e1715dd9cf1e38e1aa08f2b962dba74c408ec6380c24f3b61fd810308b40364ee818ca13c007132771b760aee0c7aceee41fb9aab0f18e7bad12b85e22abba0ab8b131714ef09ce8a3aa9a757d3439dff0bbf6567c5912ae093eabdf9ab6137ed342704c64b41224e7a49cffcb1665326b9b69faf9f19a7e339c29a40a95aac187ccaa6bfe96366d5acc69e9280b3c4a3197f60c"}]}, 0xec}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0x60}]}], {0x14}}, 0x6c}}, 0x0) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000140)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x1c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) [ 1368.797267][T21146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1368.816780][T21389] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0xfdef) 07:02:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x409, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x500}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:28 executing program 3: r0 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000bfc73a1000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000008001a80044084008e4eb323bb3b"], 0x28}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000180)=0x1) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000100)="dc926e30ec29249052ce4886692a595dfcb09b7ffdeac1010842fa258a2e5bea9f5a275ed334431c3714d006e8995e10a31ab82fc873ab67b2ccd75f192f274784806425437ca4b86c6f6b9e14a0f681bc0b7acc97922b0e99706cc7bfdeaef2ee319236ed56b0ec182c4405c21af33cdf4a2ee0", 0x74, 0x4000000, 0x0, 0x0) 07:02:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x28000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xe000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1368.980136][T21412] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x5c8}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000780)={r2}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000007c0)={@fixed={[], 0x10}, 0x7}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000f1ff00000a0001006261736963000000240002002000028008000100070000001400028010000100000001"], 0x54}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1369.068606][T21412] device bond66 entered promiscuous mode [ 1369.077888][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x600}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x700}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1369.221795][T21415] device bond59 entered promiscuous mode [ 1369.240207][T21414] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1369.349516][T21414] device bond45 entered promiscuous mode [ 1369.394729][T21424] bond66 (unregistering): Released all slaves 07:02:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x900}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1369.463019][T21438] bond59 (unregistering): Released all slaves [ 1369.529279][T21441] bond45 (unregistering): Released all slaves 07:02:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xa00}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1369.991290][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1370.026096][T21649] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1370.042576][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1370.057470][T21652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1370.091477][T21526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:02:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x10000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xbb8}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x3f000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x410, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x2000124c) 07:02:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xe000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1370.257004][T21682] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1370.322964][T21682] device bond4 entered promiscuous mode [ 1370.336976][T21684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xe00}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1370.421444][T21684] device bond59 entered promiscuous mode [ 1370.435288][T21683] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1370.485306][T21683] device bond66 entered promiscuous mode [ 1370.499947][T21685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x1100}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1370.612245][T21685] device bond45 entered promiscuous mode [ 1370.637231][T21726] bond45 (unregistering): Released all slaves 07:02:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x2000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1370.744880][T21725] bond66 (unregistering): Released all slaves 07:02:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x3000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1370.803018][T21682] bond4 (unregistering): Released all slaves 07:02:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x412, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x3800}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1371.311332][T21952] device bond60 entered promiscuous mode [ 1371.326426][T21957] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3de8bab0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x3f00}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x3800}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xfeffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1371.903050][T22014] device bond45 entered promiscuous mode [ 1371.908907][T22015] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1371.946397][T22015] device bond66 entered promiscuous mode [ 1371.954260][T22018] bond45 (unregistering): Released all slaves [ 1371.982246][T22019] bond66 (unregistering): Released all slaves 07:02:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0xfffffdef) 07:02:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x4000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:31 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) socket(0x2b, 0x6, 0x20000000) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 07:02:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x443, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1372.039777][T22018] device bond45 entered promiscuous mode [ 1372.086582][T22018] bond45 (unregistering): Released all slaves 07:02:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x6000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:31 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) socket(0x2b, 0x6, 0x20000000) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 07:02:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x80fe}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) connect$inet(r1, &(0x7f0000000000)={0x2, 0xfffa, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000340), 0x0, 0x20, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0x8, 0x1000, 0x8, 0x101, 0x51}) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="8a", 0x4000}], 0x1, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xfffffffffffffe32, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1407, 0x100, 0x70bd26, 0x25dfdbf8, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x200, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfff}) [ 1372.317892][T22195] device bond61 entered promiscuous mode [ 1372.332073][T22226] bond61 (unregistering): Released all slaves [ 1372.429763][T22019] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xb80b}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3f000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xfffffffe, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xc805}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1373.020555][T22325] device bond45 entered promiscuous mode [ 1373.027275][T22326] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1373.067912][T22326] device bond66 entered promiscuous mode [ 1373.079777][T22327] bond45 (unregistering): Released all slaves [ 1373.115074][T22328] bond66 (unregistering): Released all slaves 07:02:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0xfffffffffffffdef) 07:02:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xe803}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x463, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) connect$inet(r1, &(0x7f0000000000)={0x2, 0xfffa, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000340), 0x0, 0x20, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0x8, 0x1000, 0x8, 0x101, 0x51}) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="8a", 0x4000}], 0x1, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xfffffffffffffe32, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1407, 0x100, 0x70bd26, 0x25dfdbf8, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x200, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfff}) [ 1373.304657][T22327] device bond45 entered promiscuous mode [ 1373.334969][T22496] bond45 (unregistering): Released all slaves [ 1373.380809][T22328] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1373.507618][T22328] device bond66 entered promiscuous mode 07:02:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xf401}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1373.579868][T22543] bond66 (unregistering): Released all slaves 07:02:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xa, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1373.696002][T22545] __nla_validate_parse: 10 callbacks suppressed [ 1373.696012][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xfe80}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1373.887729][T22545] device bond61 entered promiscuous mode 07:02:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xff03}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1373.936054][T22578] bond61 (unregistering): Released all slaves [ 1374.031735][T22628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x60000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x20480}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x34000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3f000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1374.198274][T22628] device bond45 entered promiscuous mode [ 1374.231472][T22742] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1374.362420][T22742] device bond66 entered promiscuous mode [ 1374.405798][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1374.722466][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1374.735458][T22750] bond66 (unregistering): Released all slaves [ 1374.793886][T22792] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1374.856581][T22792] device bond4 entered promiscuous mode [ 1374.865065][T22793] bond4 (unregistering): Released all slaves 07:02:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x40000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xf, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:34 executing program 5: recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f00000000c0)={0x9, @remote={[], 0x2}}, 0x12) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:02:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1374.927635][T22750] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x100000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x65580000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1375.092506][T22750] device bond66 entered promiscuous mode [ 1375.120968][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x463, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x400300}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1375.256070][T22912] device bond46 entered promiscuous mode [ 1375.268792][T22913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1375.339234][T22913] device bond61 entered promiscuous mode [ 1375.347891][T22941] bond61 (unregistering): Released all slaves [ 1375.376648][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1375.418488][T22964] device bond4 entered promiscuous mode [ 1375.428469][T22985] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1375.472790][T22985] device bond67 entered promiscuous mode [ 1375.481243][T22986] bond4 (unregistering): Released all slaves [ 1375.505870][T22988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1375.518549][T22990] bond67 (unregistering): Released all slaves 07:02:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xf0ff7f}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x10, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x1000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x1030000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3f000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1376.029147][T22941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1376.056416][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1376.187471][T23196] device bond47 entered promiscuous mode [ 1376.211144][T22990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1376.251517][T23238] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1376.306129][T23238] device bond4 entered promiscuous mode 07:02:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x48a200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0xa8, 0x8, 0x1, 0x8}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:02:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x2000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x81000000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1376.365041][T23237] device bond61 entered promiscuous mode [ 1376.384070][T23253] bond61 (unregistering): Released all slaves [ 1376.479968][T23252] bond4 (unregistering): Released all slaves 07:02:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x3000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x25, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1376.570850][T23343] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x4000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1376.683347][T23343] device bond67 entered promiscuous mode [ 1376.720393][T23368] bond67 (unregistering): Released all slaves 07:02:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x5000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xfffffffe, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1376.906493][T23426] device bond48 entered promiscuous mode 07:02:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x6000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1376.971577][T23368] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$qrtr(r2, &(0x7f0000000140)={0x2a, 0x1, 0x4001}, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r3, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private, @remote}}}], 0x20}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x7, 0xd38, 0x3, 0x3}, 0x14) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000)=0x401, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$FITHAW(r6, 0xc0045878) connect(r3, &(0x7f0000000280)=@xdp={0x2c, 0x4, 0x0, 0x2d}, 0x80) write$tun(r0, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@dccp={{0x43, 0x4, 0x1, 0x1, 0x19c, 0x64, 0x0, 0x1, 0x21, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x0, 0xa, "93352879412eaa20"}, @rr={0x7, 0x23, 0x6b, [@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @empty, @empty, @local, @rand_addr=0x64010100, @remote]}, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x8, [{@loopback, 0x6c7}, {@local, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1f0}]}, @timestamp={0x44, 0x28, 0xba, 0x0, 0x7, [0x1, 0x9, 0x400, 0x7ff, 0xa9, 0x2647, 0x8f2e, 0x80, 0xffff]}, @cipso={0x86, 0x85, 0x2, [{0x2, 0x9, "e06da370498ec5"}, {0x0, 0xa, "6045c8b8f6c2dbeb"}, {0x1, 0x12, "031947c3aaae3d4fc397facabe5c64b1"}, {0x5, 0xe, "25af8d5652c344323219b39d"}, {0x5, 0x12, "d65bf838c1f6e52a8f5015ff88708b7f"}, {0x7, 0x12, "649725c6ac0b6c93dbdabb081980f298"}, {0x2, 0xb, "d652f3c4cfde57bb16"}, {0x6, 0xf, "e00815d50ac29bc0d56a0934a3"}, {0x1, 0xe, "96c4b8d051ca966c9df6bf2a"}]}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0xa, 0x2, "d41d36", 0x2, "d22918"}, "47d4cd7455db6c8b72e9ad0a95eb6f263c61620bc499c0fdaf8a6aa1ff8de8d927e452a90df299c676b2796d68f97a5efce85ee358952bea04f60eb852a118eca98cd79280ff94724540c20f9c064caedca257b92b0dd56de51ce2d7dab68d9f38d971708d7f1e29a8e190ee27857ed601185a926558be712ee5744bfac3af45"}}}}, 0x1a6) 07:02:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x7000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x8000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1377.120131][T23368] device bond67 entered promiscuous mode [ 1377.218231][T23516] device bond4 entered promiscuous mode [ 1377.254222][T23525] bond67 (unregistering): Released all slaves 07:02:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x2f, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1377.376050][T23526] bond4 (unregistering): Released all slaves [ 1377.508799][T23554] device bond61 entered promiscuous mode [ 1377.543766][T23597] bond61 (unregistering): Released all slaves 07:02:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x88a8ffff, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x9000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1377.738649][T23661] device bond49 entered promiscuous mode 07:02:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x7000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xa000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000002, 0x12, 0xffffffffffffffff, 0x57c82000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={[], [], @private=0xa010102}}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) 07:02:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xe000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:37 executing program 3: socket$phonet(0x23, 0x2, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$TUNSETFILTEREBPF(r0, 0x6628, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x80, 0x8, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x700, 0x8000, 0x3b, 0x8}}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, r1, 0xe, r2}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xa5f1, 0x10c55f69}) [ 1378.389233][T23783] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1378.425485][T23783] device bond67 entered promiscuous mode [ 1378.439019][T23786] bond67 (unregistering): Released all slaves [ 1378.697788][T23881] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000400)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000440)=0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip6gretap0\x00', 0x8000}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r7, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000327bd7000fddbdf250e00000008000b000300000108003c00060000000500290001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x30, 0x0]}}, &(0x7f00000004c0)=""/4096, 0x38, 0x1000}, 0x20) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$phonet_pipe(r2, &(0x7f0000000000)={0x23, 0x1, 0x31, 0x40}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x100c) 07:02:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x10000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x43, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x3, 0x6, 0x467, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r7], 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r7, @ANYBLOB="00000000000000ceea2c9dff4b976b4f8ade5537916abf1b3e25ae6929f4549d439b3f1a3a26ebe24a8c550d8d544172ff5d8cc7c68d6e1b0ff262d59bba35"], 0x20}}, 0x0) 07:02:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x9effffff, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1378.830724][T23891] __nla_validate_parse: 10 callbacks suppressed [ 1378.830736][T23891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x11000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1378.912882][T23891] device bond61 entered promiscuous mode [ 1378.968597][T23897] device bond4 entered promiscuous mode [ 1379.076092][T23893] device bond67 entered promiscuous mode 07:02:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x20000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1379.124337][T23895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x20000140}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1379.226460][T23895] device bond50 entered promiscuous mode [ 1379.262916][T23901] bond61 (unregistering): Released all slaves [ 1379.320490][T23927] bond67 (unregistering): Released all slaves 07:02:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x30000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1379.381838][T23931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x60, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1379.432880][T23897] validate_nla: 2 callbacks suppressed [ 1379.432890][T23897] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1379.572006][T23897] device bond5 entered promiscuous mode 07:02:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x38000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1379.908586][T23901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1379.928097][T24171] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1379.947305][T24174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1380.028374][T24174] device bond51 entered promiscuous mode [ 1380.279634][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:02:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x3f000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:39 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="185436fb5be70df71b062384be55e4b557c4677d001df986d360a471f8c75fed655c7c5edf94f3b1b820fc6f565c6c02618e9d0adab105a1cec761915bf8fbbbbe6fe5160b243e07afc574527f0877640afc9745c3f03b6eb8b82f7c38d4ea14a94c0557453d34eab5ad09a0d960d3625b787ff69613d6876208bf0c9ad618fd4f66781a0d8e2bab7d0281d50ba92b0ea03959e765e3ea326dcb2d654a651c3b6b378fabc30fa3e75cfe04aa733f63f0c2f65fbbb8a739eef7268e116627a1af9971d8fb13fc3dee3a0ea6180c7f4846d4727c552bd8c322c7e4ebf66e842af7a0a06c789d78a9353c", @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001700", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x48d1) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) sendmmsg$inet(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x20000181, 0x0) 07:02:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xb0bae83d, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xc0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1380.385473][T24233] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000001500)={'broute\x00'}, &(0x7f0000001580)=0x78) pipe(&(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/240, 0xf0}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000002a00), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x25b, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a4465ef0b007c05e87c55a1bc000900b8000699020000000500050007008178a8000500fec001c00200001203ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 07:02:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x40000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1380.539466][T24233] device bond67 entered promiscuous mode [ 1380.552061][T24236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1380.627271][T24236] device bond61 entered promiscuous mode 07:02:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x40010020}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1380.674080][T24237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x44edff7f}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1380.756614][T24237] device bond52 entered promiscuous mode [ 1380.769486][T24242] bond67 (unregistering): Released all slaves [ 1380.843951][T24259] bond61 (unregistering): Released all slaves 07:02:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x60000000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x7fffe480}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1380.949558][T24304] IPv6: NLM_F_CREATE should be specified when creating new route [ 1380.964702][T24304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1380.972512][T24304] IPv6: NLM_F_CREATE should be set when creating new route [ 1380.979766][T24304] IPv6: NLM_F_CREATE should be set when creating new route [ 1380.987080][T24304] IPv6: NLM_F_CREATE should be set when creating new route [ 1381.065572][T24360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1381.376286][T24439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1381.385867][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1381.403137][T24242] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002900)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000002a00)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000002a40)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x4e20, @loopback}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYRES64], 0x100c) 07:02:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x7fffed44}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x6c0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:41 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'ip_vti0\x00', {0x2a, 0x1, 0x3fff}}) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001b00)={0xffffffffffffffff, 0x284, 0x3, 0x9}) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) sendfile(r3, r0, &(0x7f0000000100)=0xfffffffffffffff8, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="6cb127f1", @ANYRES32=r1, @ANYBLOB="00000000764affff000000000a0001006e6574656d000000380002000000efff00000000000000000000000000000000000000001c0005801800080000000021ec225900"/80], 0x68}}, 0x0) 07:02:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf0ffffff, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x7ffff000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1381.657783][T24463] device bond61 entered promiscuous mode [ 1381.799487][T24464] device bond53 entered promiscuous mode [ 1381.840225][T24478] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x7ffffff7}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1381.923003][T24478] device bond67 entered promiscuous mode [ 1381.932836][T24491] bond61 (unregistering): Released all slaves [ 1382.012729][T24507] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1382.031055][T24533] bond67 (unregistering): Released all slaves 07:02:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xec0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x80040200}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x80e4ff7f}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1382.567681][T24661] device bond54 entered promiscuous mode [ 1382.598315][T24662] device bond6 entered promiscuous mode [ 1382.614070][T24666] bond6 (unregistering): Released all slaves 07:02:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @l2={0x1f, 0x7, @any, 0x401}, @hci={0x1f, 0x4, 0x2}, @nfc={0x27, 0x1, 0x2, 0xfa9a60dd3b65cfb4}, 0x9, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='erspan0\x00', 0x600000000, 0xec, 0x3f}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:02:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xffffa888, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0x8dffffff}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x33fe0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:42 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x30, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffd, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8804}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001fc0)="19", 0x1}], 0x1}}], 0x1, 0x400c07c) [ 1382.927875][T24786] device bond55 entered promiscuous mode 07:02:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xb80b0000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1383.133910][T24789] device bond61 entered promiscuous mode [ 1383.169192][T24791] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1383.240455][T24791] device bond67 entered promiscuous mode [ 1383.249606][T24821] bond67 (unregistering): Released all slaves 07:02:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xc8050000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1383.290432][T24820] bond61 (unregistering): Released all slaves 07:02:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002900)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000002a00)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000002a40)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x4e20, @loopback}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYRES64], 0x100c) 07:02:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20000520, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1383.356917][T24821] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1383.445504][T24821] device bond67 entered promiscuous mode 07:02:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xe8030000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xeffdffff}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1383.827624][T24983] bond67 (unregistering): Released all slaves [ 1383.898325][T25019] __nla_validate_parse: 10 callbacks suppressed [ 1383.898336][T25019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1383.969244][T25019] device bond56 entered promiscuous mode [ 1383.983784][T25028] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1384.248625][T25020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x100c) 07:02:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xf4010000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xfffff000, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x7ffff000, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x7001}, 0xc) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001700", @ANYRES32=r7, @ANYBLOB="a230401250ecf6f0f82e4ac4b1dd32c2f116753c3349bba7a3ce201465a59031cbd7c9205364479a1829a03c9bc924fb03eeff5628742aabed05bc7a96101d67fa30f906630bab8ea5b94c9623be1f4daa53a87a401b6069a998b118b9348bf05c7e7a041a11baeaf028df57384952d2be4fd68d24bd00e262e5275e7d2be308c00a2dd574a22af6666545a5bbb37268"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x0) [ 1384.392033][T25121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @remote}}}], 0x20}}], 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r5, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private, @remote}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000f000) 07:02:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xf5ffffff}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1384.562114][T25121] device bond57 entered promiscuous mode [ 1384.568007][T25122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1384.714424][T25122] device bond61 entered promiscuous mode [ 1384.735155][ T29] audit: type=1804 audit(1595314964.228:510): pid=25203 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/2025/cgroup.controllers" dev="sda1" ino=16378 res=1 07:02:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xf7ffff7f}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1384.748215][T25136] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000200)={0x2f, 0x1f, [], [@calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x90, [0x0, 0x7, 0x7fffffff, 0xff, 0x5, 0x10001]}}, @generic={0x4, 0xa7, "c96ae5e337d42a7ee69aca2b5ab5167b0f88fa741e920c7bc8bbfdf546898205d551569a12ea749cf16f569977f936c0a58f78f928fd2889d66bf510c1907a92bd9044bb9afb01153b5a425f0041f6afd23b0c934e590f526051702c1ab6e2a1b99dc76ff1b0cf2fba107bb1a3513d050b80b12eefacb5e20d32ff2064899bf96042b019fdd0ed3ce627c8a79e44c7703df39d0d8d9e6999503463fa7e619082b5f9d3480662ce"}, @generic={0x1, 0x13, "512bec50047c8bc4d5795a081464dbca4fc10c"}]}, 0x100) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000040)=""/39, &(0x7f0000000300)=0x27) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x84) 07:02:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xfe800000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1384.877074][T25136] device bond67 entered promiscuous mode [ 1384.934207][T25151] bond67 (unregistering): Released all slaves 07:02:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xfeffffff}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1385.028920][T25180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1385.043567][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1385.054799][T25292] IPVS: length: 39 != 8 [ 1385.069253][T25165] bond61 (unregistering): Released all slaves [ 1385.384871][T25332] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:02:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0xf, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xff030000}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x9, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xffffff7f, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1385.569258][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xfffffdef}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xffffff7f}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1385.710639][T25346] device bond58 entered promiscuous mode [ 1385.721934][T25349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xffffff8d}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1385.832983][T25349] device bond61 entered promiscuous mode [ 1385.848246][T25330] IPVS: length: 39 != 8 [ 1385.856417][T25351] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) [ 1386.015345][T25351] device bond67 entered promiscuous mode [ 1386.053432][T25365] bond61 (unregistering): Released all slaves 07:02:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) 07:02:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xfffffff5}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1386.136394][T25377] bond67 (unregistering): Released all slaves [ 1386.225844][T25352] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:45 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000440)="a9", 0x1}], 0x1, &(0x7f0000000040)=[@authinfo={0x10}], 0x10}, 0x0) [ 1386.296287][T25365] device bond61 entered promiscuous mode [ 1386.570783][T25588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1386.641755][T25588] device bond67 entered promiscuous mode [ 1386.659485][T25590] bond67 (unregistering): Released all slaves 07:02:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x32) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r5, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private, @remote}}}], 0x20}}], 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r8, 0x0, 0x83, 0x0, &(0x7f0000000300)) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) sendmmsg$inet(r8, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @rand_addr=0x64010101}}}], 0x60}}], 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x8, 0x5}, 0xc) 07:02:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x43, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:46 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) readv(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x80}, {}, {r0}, {0xffffffffffffffff, 0x2000}], 0x4, &(0x7f0000000100)={0x96}, &(0x7f0000000140), 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x10) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r0, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) 07:02:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}, 0xfffffffe}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xffffff9e, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xa, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x7fffed44, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1386.989010][T25672] device bond59 entered promiscuous mode [ 1387.066618][T25690] device bond62 entered promiscuous mode [ 1387.106891][T25710] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x2, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1387.235423][T25710] device bond67 entered promiscuous mode [ 1387.253023][T25725] bond67 (unregistering): Released all slaves [ 1387.345132][T25722] bond62 (unregistering): Released all slaves 07:02:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x73, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:47 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0xffffffffffffffff}, 0x1c) 07:02:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xb, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1387.881380][T25871] device bond60 entered promiscuous mode [ 1387.909327][T25879] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xfffffff0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x409, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:47 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000440)="a9", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) 07:02:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="4da88fc44b1bd892c2f0c37383aa69b9", 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x2, @dev={0xac, 0x14, 0x14, 0x30}, 0x4e21, 0x1, 'none\x00', 0x2, 0x9e, 0x22}, 0x2c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x1ff}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e20, 0x8, @remote, 0x4}}}, 0x84) r4 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x8, @remote, 0xffffffff}}, 0x5c7, 0x5}, 0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={r5, 0x4}, &(0x7f0000000400)=0x8) write$tun(r1, &(0x7f0000000240)=ANY=[], 0x100c) [ 1388.103262][T25928] device bond62 entered promiscuous mode [ 1388.125102][T25953] bond62 (unregistering): Released all slaves [ 1388.194538][T25963] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x3, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1388.273971][T25963] device bond67 entered promiscuous mode 07:02:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x8) 07:02:48 executing program 3: [ 1388.547987][T25974] bond67 (unregistering): Released all slaves 07:02:48 executing program 3: 07:02:48 executing program 3: [ 1388.726048][T26009] device bond61 entered promiscuous mode [ 1388.762663][T26034] bond61 (unregistering): Released all slaves [ 1388.878617][T25974] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:48 executing program 3: 07:02:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x4, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1388.987451][T25974] device bond67 entered promiscuous mode 07:02:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1389.027712][T26165] bond67 (unregistering): Released all slaves [ 1389.133826][T26009] __nla_validate_parse: 12 callbacks suppressed [ 1389.133836][T26009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xffffffff, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x410, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:48 executing program 3: [ 1389.230672][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, 0x0, 0x0) pipe(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/474], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe80, 0x0, &(0x7f00000000c0)="c99bb37b2400deffff4048da86dd", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket(0x0, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xc6, 0x3, 0x40, 0x2, 0x80, 0x80, 0x1d, 0x0, r5}, {0xdbd4, 0x392d, 0x7, 0x2, 0x0, 0x5}, {0xbc15, 0xff, 0xf443, 0x10001}, 0x0, 0x6e6bbc, 0x2, 0x1, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0xff}, 0xa, @in=@private=0xa010101, 0x3504, 0x4, 0x1, 0x36, 0x2, 0x5, 0xe3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r4, r5}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x3, 0x0, 0x5}, 0x7, 0x0, 0x2, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e21, 0x1ff, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x33, 0x0, r5}, {0x9, 0x4, 0x100000000, 0x777, 0x6bc, 0x1f, 0x2, 0x45}, {0x80000000, 0xbd6, 0x100000001, 0x4525}, 0x2, 0x6e6bb9, 0x0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in6=@ipv4={[], [], @loopback}, 0x3507, 0x2, 0x0, 0x3e, 0x7, 0x4, 0x7}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x22008800) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000020000000000064e02000000000009238ed83254f9c9f0b66c6d78ac141400200000000d009078001b00002c0000000000000000000000000000a265115be9c6d4738196cdd2dd033ce387a835f130c149d66f6927986ee8249191cfdd7f51370005a84823d19ff9bb6703f843a66240dfc8d3331833430b1d36e21adcb315affe4e6668091fbb2872c0aa826d000200005d4a12529d40cb724ad9c65898331435f1ba19ff376c1d6da39628a71d5878f190ff510999bf3343c8f370d4ac8839a1c4d5d1a8409202692eea1d072d356133eb07616c2946ec3ccc36b96c"], 0x100c) [ 1389.386492][T26242] device bond62 entered promiscuous mode 07:02:48 executing program 3: [ 1389.465541][T26244] bond62 (unregistering): Released all slaves [ 1389.546871][T26283] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:49 executing program 3: [ 1389.698083][T26283] device bond67 entered promiscuous mode [ 1389.760142][T26282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:49 executing program 3: [ 1389.950904][T26282] device bond61 entered promiscuous mode 07:02:49 executing program 3: [ 1390.004093][T26300] bond67 (unregistering): Released all slaves 07:02:49 executing program 3: [ 1390.093169][T26301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1390.122759][T26399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x412, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x5, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xd, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1390.602879][T26283] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1390.625780][T26442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x2, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:50 executing program 3: [ 1390.745529][T26442] device bond62 entered promiscuous mode [ 1390.784499][T26447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:50 executing program 3: [ 1390.937056][T26447] device bond62 entered promiscuous mode [ 1390.984675][T26450] bond62 (unregistering): Released all slaves [ 1391.088606][T26492] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1391.196991][T26492] device bond67 entered promiscuous mode [ 1391.224433][T26493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1391.263791][T26505] bond67 (unregistering): Released all slaves [ 1391.362808][T26607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1391.656775][T26647] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1391.689770][T26647] device bond67 entered promiscuous mode [ 1391.704148][T26650] bond67 (unregistering): Released all slaves 07:02:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x25, 0x1, 0x400) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r3, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private, @remote}}}], 0x20}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000810}, 0xc0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000280)=0x1ff, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:02:51 executing program 3: 07:02:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x6, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x443, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0xa, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:51 executing program 3: [ 1391.837396][T26723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:51 executing program 3: [ 1391.977635][T26723] device bond63 entered promiscuous mode 07:02:51 executing program 3: [ 1392.043321][T26727] device bond62 entered promiscuous mode 07:02:51 executing program 3: [ 1392.088933][T26729] bond63 (unregistering): Released all slaves [ 1392.242787][T26731] bond62 (unregistering): Released all slaves 07:02:51 executing program 3: [ 1392.348165][T26755] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1392.428969][T26755] device bond67 entered promiscuous mode [ 1392.446527][T26772] bond67 (unregistering): Released all slaves 07:02:52 executing program 3: [ 1392.830909][T26953] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x0, 0x0, 0x2}, @x25={0x2, 0x5, 0xb, "2d98224d5e9561ac82a3f3390818412ceab1a062f7315c7904a926649762e20aef0fbfe0a504e3ee778e66ff6fb3b1703aefc39eb37820d61327157f16866c1155f7a28194853925b4298f2b9cb1d406aa32e5e6786b6b39781d9b2e8693a7280898546d937e26931e757726d29683f5702248e6f06e2850f14a20f1ed2e90040d18e5bdabbd85f988ae2dbdeaf179e8342f08cc7831d06192412b7d6aa07118f7f32c0bc05e3867462ed61c8e905ebc73d27f132a4865ac4bca8683bb81179d3911cb38d563d3b42c757743dbef00"}}, 0xdc) 07:02:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x7, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:52 executing program 3: 07:02:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x463, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:52 executing program 3: [ 1393.046869][T26976] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1393.146821][T26976] device bond67 entered promiscuous mode 07:02:52 executing program 3: [ 1393.248193][T26977] device bond62 entered promiscuous mode [ 1393.324214][T26980] device bond63 entered promiscuous mode [ 1393.337240][T26984] bond67 (unregistering): Released all slaves 07:02:52 executing program 3: 07:02:52 executing program 3: [ 1393.452338][T26996] bond63 (unregistering): Released all slaves 07:02:53 executing program 3: [ 1393.583429][T26983] bond62 (unregistering): Released all slaves 07:02:53 executing program 3: [ 1394.078660][T26984] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x8, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:53 executing program 3: 07:02:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x10, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x2, 0x0, r2}}, 0x20}}, 0x0) 07:02:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000280)=""/254, 0xfe}, &(0x7f0000000000), 0x9a4952c68be905b7}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000480)={0x0, 0x6}, &(0x7f00000004c0)=0x8) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r8, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r8, 0x800, 0x4, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac00ac1414bb0d00907800"/50], 0x100c) 07:02:54 executing program 3: [ 1394.528671][T27224] __nla_validate_parse: 7 callbacks suppressed [ 1394.528683][T27224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:02:54 executing program 3: [ 1394.656750][T27224] device bond62 entered promiscuous mode 07:02:54 executing program 3: 07:02:54 executing program 3: 07:02:54 executing program 3: 07:02:54 executing program 3: [ 1395.267677][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x9, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:54 executing program 3: [ 1395.317548][T27228] device bond63 entered promiscuous mode [ 1395.324386][T27229] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1395.458519][T27229] device bond67 entered promiscuous mode [ 1395.495338][T27231] bond62 (unregistering): Released all slaves [ 1395.633164][T27248] bond63 (unregistering): Released all slaves [ 1395.683807][T27249] bond67 (unregistering): Released all slaves [ 1395.744827][T27281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1395.771039][T27317] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1395.828123][T27317] device bond67 entered promiscuous mode [ 1395.836236][T27315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:55 executing program 3: 07:02:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x48, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1396.291883][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1396.393422][T27501] device bond62 entered promiscuous mode [ 1396.409414][T27503] bond62 (unregistering): Released all slaves 07:02:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r3, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private, @remote}}}], 0x20}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x20, 0x7ff, 0x2b, @mcast1, @dev={0xfe, 0x80, [], 0xd}, 0x1, 0x20, 0x2, 0x5}}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x1a, r6, 0x1, 0x84, 0x6, @dev={[], 0x39}}, 0x14) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:02:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x4, 0x0, r2}}, 0x20}}, 0x0) 07:02:55 executing program 3: 07:02:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:56 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) [ 1396.501064][T27503] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1396.664785][T27503] device bond62 entered promiscuous mode [ 1396.707524][T27581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:02:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x8c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1644a58}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x493d8170}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3d062257}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4338b340}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5cf79a34}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65e00f36}]}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf68}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4229}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x36e}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELSET={0x140, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x30}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_USERDATA={0x73, 0xd, 0x1, 0x0, "9ddc7f039ec0a193deb5ba40a8a3398a7a5184cc302853daee3bf04997d3b5676001fa38e98104eb2fa17efb928330f407fad0c269581bee4ee08fce45c5895a75d7ea54aef6d006ac5a74cfe9406286d5561ec40206c22c78a8448d088d31c0956b54c17f63d12d1cc4c3ea333d32"}, @NFTA_SET_USERDATA={0x99, 0xd, 0x1, 0x0, "305a4b4304ff90595a6adba8f1a66bf7556d8c5670eb1fa2ab2153ee5df910683575980bc030827e1512fc794b08ef90288b0a60e26eb853968e759fadf825fe25c6b54ef237ec63b6140de4e70c9dbd6abeee284c1abc965ec87c0f0b8ff14a9e1a5d6d556e26348ac3cfacbad0eebdad0af08efa7953157de1c063a91eb60cd09f8b94701a2b54738c33ec776006bf25c10b1671"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xd4, 0x3, 0xa, 0x101, 0x0, 0x0, {0xd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40083ab7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x108e4de}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3b0e30fa}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004081) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r2, 0x4, 0x7, 0xfc, 0x526, 0x2, @private0={0xfc, 0x0, [], 0x1}, @private0, 0x8, 0x40, 0x2, 0x101}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) [ 1396.798646][T27581] device bond63 entered promiscuous mode [ 1396.805891][T27583] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1396.893096][T27583] device bond68 entered promiscuous mode [ 1396.906603][T27590] bond62 (unregistering): Released all slaves [ 1396.981203][T27604] bond68 (unregistering): Released all slaves 07:02:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1397.028279][T27596] bond63 (unregistering): Released all slaves [ 1397.543124][T27665] device geneve4 entered promiscuous mode 07:02:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1397.895995][T27803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1397.928499][T27804] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:02:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1397.971616][T27720] device geneve4 entered promiscuous mode 07:02:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x6, 0x0, r2}}, 0x20}}, 0x0) [ 1398.488835][T27829] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1398.525846][T27829] device bond62 entered promiscuous mode [ 1398.533429][T27833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1398.569723][T27833] device bond63 entered promiscuous mode [ 1398.583014][T27832] bond62 (unregistering): Released all slaves [ 1398.608655][T27834] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1398.647359][T27834] device bond68 entered promiscuous mode [ 1398.664262][T27837] bond63 (unregistering): Released all slaves [ 1398.703789][T27839] bond68 (unregistering): Released all slaves [ 1398.941614][T28044] device bond62 entered promiscuous mode [ 1398.947683][T27839] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1399.029243][T27839] device bond68 entered promiscuous mode [ 1399.045348][T27832] bond62 (unregistering): Released all slaves 07:02:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) socket$nl_xfrm(0x10, 0x3, 0x6) 07:02:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:02:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @private}}) write$tun(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0000000000000000000060bc7d9400442f00fe8000000000000000000000000000aaff020000000000000000000000000001242065580000000000000800000086dd080088be81"], 0x76) [ 1399.075257][T28080] bond68 (unregistering): Released all slaves 07:02:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x60, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:02:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x8, 0x0, r2}}, 0x20}}, 0x0) 07:02:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1399.670728][T28195] __nla_validate_parse: 2 callbacks suppressed [ 1399.670740][T28195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1399.793650][T28195] device bond62 entered promiscuous mode [ 1399.814491][T28197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1399.908722][T28197] device bond63 entered promiscuous mode [ 1399.939013][T28199] bond62 (unregistering): Released all slaves 07:02:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1400.083232][T28200] bond63 (unregistering): Released all slaves [ 1400.491252][T28233] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1400.616680][T28233] device bond68 entered promiscuous mode [ 1400.626764][T28244] bond68 (unregistering): Released all slaves [ 1400.668569][T28313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1400.693136][T28344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1400.737857][T28381] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x68, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0xa, 0x0, r2}}, 0x20}}, 0x0) [ 1401.604987][T28443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1401.642703][T28443] device bond62 entered promiscuous mode [ 1401.648636][T28444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1401.684517][T28444] device bond63 entered promiscuous mode [ 1401.690465][T28446] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1401.735109][T28446] device bond68 entered promiscuous mode [ 1401.751480][T28447] bond62 (unregistering): Released all slaves [ 1401.783977][T28448] bond63 (unregistering): Released all slaves [ 1401.816144][T28449] bond68 (unregistering): Released all slaves 07:03:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x24004000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20008001) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x15}, @val={0x0, 0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x206a, 0xfffd}}}}, 0x36) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000300)=""/108, 0x6c}, &(0x7f0000000380), 0x46}, 0x20) 07:03:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x12, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 1401.871443][T28527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1401.901702][T28528] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1401.926993][T28563] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6c, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0xc, 0x0, r2}}, 0x20}}, 0x0) [ 1401.993509][T28668] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1402.137071][T28671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1402.247460][T28671] bond6: (slave bridge5): Enslaving as a backup interface with an up link [ 1402.283910][T28692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1402.335422][T28692] device bond62 entered promiscuous mode [ 1402.343198][T28693] device bond6 entered promiscuous mode [ 1402.349905][T28693] device bridge5 entered promiscuous mode [ 1402.359066][ T7] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1402.391148][T28693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1402.421125][T28698] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1402.511510][ T7] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1402.536804][T28698] device bond68 entered promiscuous mode [ 1402.609403][T28714] bond62 (unregistering): Released all slaves 07:03:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x13, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1402.725702][T28716] bond68 (unregistering): Released all slaves [ 1402.850579][T28719] device bond63 entered promiscuous mode [ 1402.886216][T28725] bond63 (unregistering): Released all slaves [ 1403.010371][T26495] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 1403.027675][T28668] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:03:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x14, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1403.077728][T28671] device bridge6 entered promiscuous mode [ 1403.086176][T28671] bond6: (slave bridge6): Enslaving as a backup interface with a down link 07:03:02 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60bcc08e00002ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x0) 07:03:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB='z'], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x68}}, 0x0) [ 1403.512911][T28900] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x74, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1403.581296][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 07:03:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac1414bb0d009078000000000000000000000000000000001af70ea8673c63f174d716b71ea9453ff6b385ec1f6d7794428b9cada77812976886f3881843804ef3f2042fd96ff73228ee0f1d655ad5535672b545aa32bd1ebd42aaa6fd65418ce50d77159d787168d0d2ddcdcad4ab1359120c2705338ee47c5a8153bb2fb54d87e9d9496c2d23364e1d9489eab9b52aa35d50ac9fc22a23bcb3eb10266c7dc634912030d6f1df929b2d4e88dafa120a543d"], 0x100c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0xfffffffb, 0x4) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000100)='}@\x00', 0x3) 07:03:03 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000000)={@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 07:03:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0xe, 0x0, r2}}, 0x20}}, 0x0) 07:03:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd93}]}, 0x30}, 0x1, 0x6c}, 0xf0) [ 1403.811194][T28966] device bond63 entered promiscuous mode [ 1403.877917][T28980] device bond62 entered promiscuous mode [ 1403.893692][T28999] bond63 (unregistering): Released all slaves [ 1403.949013][T29003] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) [ 1404.064667][T29003] device bond68 entered promiscuous mode [ 1404.097756][T29019] bond62 (unregistering): Released all slaves 07:03:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x15, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1404.194206][T29039] bond68 (unregistering): Released all slaves 07:03:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0xf, 0x0}, 0x0) 07:03:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1404.394326][T28999] device bond63 entered promiscuous mode [ 1404.433525][T29039] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1404.515697][T29039] device bond68 entered promiscuous mode 07:03:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0xb6, 0x4) 07:03:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x10, 0x0, r2}}, 0x20}}, 0x0) 07:03:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1404.570789][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 07:03:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0xb6, 0x4) [ 1404.688626][T29265] __nla_validate_parse: 8 callbacks suppressed [ 1404.688638][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1404.766711][T29265] device bond62 entered promiscuous mode [ 1404.782660][T29268] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1404.819226][T29268] device bond69 entered promiscuous mode [ 1404.826775][T29270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1404.908259][T29270] device bond64 entered promiscuous mode [ 1404.917143][T29271] bond69 (unregistering): Released all slaves [ 1404.996341][T29273] bond62 (unregistering): Released all slaves [ 1405.054980][T29305] bond64 (unregistering): Released all slaves [ 1405.129208][T29271] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1405.215701][T29271] device bond69 entered promiscuous mode [ 1405.233767][T29273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1405.286212][T29305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180)="7785b9f522c906b77e5fc3641b9b93996f58b1a826de11b8bbcbbf1f5ec98186bfe199f0ca8bf4775d945d855039130804377cf17158c3f1c7a3f8fc7a3a6ca98b8ebc92a45a2dc3d9d54e46a77543b2d27d486c03b9a4f983dbdca963350e7abc631b9de938a02a8ce466ad0310814fa93ca7925be4fe787be69b54ee1720172fdfba6d86cbf621", 0x88, 0x8000, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac1414bb0d009078000000000000000000f9ff007fa849f9ed2c3988dee33138a0b2000000006dc3dfd9bdc81999"], 0x100c) 07:03:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x16, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:04 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x28, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}]}, 0x28}}, 0x0) 07:03:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x60, 0x0, r2}}, 0x20}}, 0x0) 07:03:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1405.480246][T29305] device bond64 entered promiscuous mode [ 1405.533164][T29520] bond64 (unregistering): Released all slaves [ 1405.603210][T29557] tipc: Failed to obtain node identity [ 1405.609036][T29557] tipc: Enabling of bearer rejected, failed to enable media [ 1405.729517][T29567] device bond70 entered promiscuous mode [ 1405.746801][T29584] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1405.809153][T29584] device bond62 entered promiscuous mode [ 1405.821894][T29602] bond70 (unregistering): Released all slaves [ 1405.886642][T29604] bond62 (unregistering): Released all slaves [ 1405.946640][T29608] tipc: Failed to obtain node identity [ 1405.952806][T29608] tipc: Enabling of bearer rejected, failed to enable media 07:03:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x9, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:05 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x204}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 07:03:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x17, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:05 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x204}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 07:03:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@esp={{0x30, 'esp\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 07:03:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x18, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1406.621991][T29604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1406.634199][T29762] x_tables: duplicate underflow at hook 2 [ 1406.652064][T29750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1406.796494][T29750] device bond64 entered promiscuous mode [ 1406.838861][T29753] bond64 (unregistering): Released all slaves [ 1406.888060][T29806] validate_nla: 2 callbacks suppressed [ 1406.888070][T29806] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1406.972828][T29806] device bond70 entered promiscuous mode [ 1407.029837][T29839] bond70 (unregistering): Released all slaves [ 1407.382825][T29842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1407.416052][T29918] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac1414bb0d009078000000000000000000007f624156a9c380a06d8f000000000000034e3c931f7105afe52b55340eac647e67605137ed97a87f969b8f8dd0b7ae77bbe0748bd23f23d89c4d0edfa914e84f3ec8274219ea45446cf61781623854c465a1bd43e65e93520e020d9456da56c74e656799149c96d01b899f6378370446711e2958cc8d979557d7107aa50af9b4e7db02db4f59d5fcdb915880f0a818d1a4e56d6d08a7d9db405ecc3727e500de808135ba48166d453869adbf21799e097ee3fb907a213581212fe0e812f66c3f725f3d5c362dd619ce482951a96e58e89a653ba9ce198512f931e6e617959dccd7c7d75848a4d6da9cf2b04e6aff013398d3315ea7e4d98f47fad5a23fe3380abcf1327e33d37c7b80df7592671aa8b60ac26dfb317f4a5c8b8204cd1e112f110729808e82a81be8a823ef5649a1abad1a02511e8a4bdf8e9e3e7e53aed1e2611b8aee7077529edebed78d0daf4bd71e43e1143caa6ea0a407f7b950fe3f70c45f1895807db5c128009ca1ecedde1fce92b89922401dc33c9b20e105b899b07e35bd736990cb45642a577d6862c2bde84aa087cf08b5144d2e690bb7ee71a585"], 0x100c) 07:03:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000302"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200002ddb11274e03f2bc0105000600200000000a000000000000000005dde400e6060000001fe531020000000300000000000002000100f5000000000000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000282, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) 07:03:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x300, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x19, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xa, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1407.444219][T29918] device bond70 entered promiscuous mode 07:03:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x2, r2}}, 0x20}}, 0x0) 07:03:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@esp={{0x30, 'esp\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1407.801170][T29974] x_tables: duplicate underflow at hook 2 [ 1407.814928][T29974] x_tables: duplicate underflow at hook 2 07:03:07 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x204}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 1407.852762][T29961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1407.973433][T29961] device bond62 entered promiscuous mode [ 1407.979490][T29964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1408.104840][T29964] device bond64 entered promiscuous mode [ 1408.122589][T29968] bond62 (unregistering): Released all slaves [ 1408.207732][T29969] bond64 (unregistering): Released all slaves [ 1408.288918][T29970] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1408.434879][T29970] device bond71 entered promiscuous mode [ 1408.460280][T29972] bond71 (unregistering): Released all slaves [ 1408.570791][T30156] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x4, r2}}, 0x20}}, 0x0) 07:03:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x500, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xb, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40015}, 0x4000000) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1408.780992][T30204] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1408.904419][T30204] device bond71 entered promiscuous mode [ 1409.011562][T30206] device bond62 entered promiscuous mode 07:03:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1409.095742][T30208] device bond64 entered promiscuous mode [ 1409.120298][T30210] bond71 (unregistering): Released all slaves [ 1409.213824][T30235] bond62 (unregistering): Released all slaves [ 1409.327774][T30236] bond64 (unregistering): Released all slaves 07:03:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1409.854355][T30421] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1409.877067][T30423] __nla_validate_parse: 4 callbacks suppressed [ 1409.877076][T30423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x600, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1409.916116][T30424] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x6, r2}}, 0x20}}, 0x0) 07:03:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', r4}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000200)) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac1414bb0d009078000000000000000000000000000000000ecfaca3a1eb5eeb3c3dca4acdd93e376f2df896274eaafe8d4cafac6a7486caded540195edc76c1ee5ea61abceda298b62a87fec136312cae2aa122b9ab5bee012528dba744b9271b9e61b02c"], 0x100c) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000280)={r7, 0x8, 0x2, [0x400, 0x8]}, &(0x7f00000002c0)=0xc) [ 1410.088289][T30448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1410.224651][T30448] device bond64 entered promiscuous mode [ 1410.241687][T30491] EXT4-fs warning (device sda1): ext4_group_add:1658: No reserved GDT blocks, can't resize [ 1410.255655][T30447] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1410.357999][T30447] device bond71 entered promiscuous mode [ 1410.386140][T30449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1410.455463][T30449] device bond62 entered promiscuous mode [ 1410.478700][T30465] bond64 (unregistering): Released all slaves [ 1410.544260][T30473] bond62 (unregistering): Released all slaves [ 1410.613129][T30472] bond71 (unregistering): Released all slaves 07:03:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@esp={{0x30, 'esp\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x2, 'set\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 07:03:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1d, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1410.956838][T30473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1410.983638][T30465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x2a) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) [ 1411.021487][T30667] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x700, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x8, r2}}, 0x20}}, 0x0) [ 1411.061951][T30452] EXT4-fs warning (device sda1): verify_group_input:131: Cannot add at group 20 (only 16 groups) 07:03:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xd, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x8, 0xffffffffffffffc0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x100c) [ 1411.193559][T30689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1411.287603][T30689] device bond62 entered promiscuous mode [ 1411.302285][T30692] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010800000000000000000f000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b"], 0x3c}}, 0x0) [ 1411.379416][T30692] device bond71 entered promiscuous mode [ 1411.424101][T30696] bond62 (unregistering): Released all slaves [ 1411.538621][T30707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1411.630461][T30707] device bond64 entered promiscuous mode [ 1411.664798][T30728] bond71 (unregistering): Released all slaves [ 1411.775315][T30734] bond64 (unregistering): Released all slaves [ 1411.853965][T30791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1411.880951][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 07:03:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1411.903600][T30791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1411.934880][T30791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:03:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1412.061548][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.082385][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1412.100963][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.130878][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.161060][ T7] bond6: (slave bridge5): link status up again after 0 ms [ 1412.201076][ T7] bond6: (slave bridge5): link status up again after 0 ms [ 1412.232141][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.251150][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1412.286951][ T7] bond6: (slave bridge5): link status up again after 0 ms [ 1412.310867][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1412.330782][ T7] bond6: (slave bridge5): link status up again after 0 ms [ 1412.360775][ T7] bond6: (slave bridge5): link status up again after 0 ms 07:03:11 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) [ 1412.402303][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1412.432170][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.452140][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.474554][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.520989][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1412.570729][ T26] bond6: (slave bridge5): link status up again after 0 ms 07:03:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000013000513d25a80648c63940d0124fc60100002400a600200053582c137153e370600018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 1412.621056][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.640872][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1412.653537][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.705915][T30912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1412.711085][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.732464][T30917] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1412.781831][T30918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1412.820762][ T8231] bond6: (slave bridge5): link status up again after 0 ms 07:03:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x900, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1412.840966][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1412.862289][ T143] bond6: (slave bridge5): link status up again after 0 ms 07:03:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xa, r2}}, 0x20}}, 0x0) 07:03:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000013000513d25a80648c63940d0124fc60100002400a600200053582c137153e370600018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 1412.940795][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.961939][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1412.980811][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1413.023011][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.044841][ T7] bond6: (slave bridge5): link status up again after 0 ms 07:03:12 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), 0xb) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) [ 1413.111012][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1413.130814][ T7] bond6: (slave bridge5): link status up again after 0 ms [ 1413.151405][ T7] bond6: (slave bridge5): link status up again after 0 ms 07:03:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x21, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1413.191953][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1413.241884][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.261828][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1413.281764][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.320840][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.360794][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.390765][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.420769][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.461181][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.491208][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.532063][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.580842][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.610911][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.651389][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.675843][T30950] device bond62 entered promiscuous mode [ 1413.711492][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.731726][T30957] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1413.761104][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.820839][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1413.844494][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1413.863717][T30957] device bond71 entered promiscuous mode [ 1413.871184][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1413.880252][T30956] bond62 (unregistering): Released all slaves [ 1413.891295][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1413.911831][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1413.930958][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1413.953187][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1413.967764][T30955] device bond64 entered promiscuous mode [ 1413.973690][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1413.990382][T30959] bond71 (unregistering): Released all slaves [ 1414.001030][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1414.021432][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1414.050829][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1414.060520][T30960] bond64 (unregistering): Released all slaves [ 1414.070763][ T8231] bond6: (slave bridge5): link status up again after 0 ms 07:03:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200000800000000460010f5ffff3efbdfc5f4e82aa1c50430ff00006c9078ac141400ac1400000000000000000000000000000010"], 0x100c) 07:03:13 executing program 3: 07:03:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x22, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1414.110902][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1414.131813][ T8231] bond6: (slave bridge5): link status up again after 0 ms [ 1414.140126][T31042] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1414.203074][ T8231] bond6: (slave bridge5): link status up again after 0 ms 07:03:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xc, r2}}, 0x20}}, 0x0) 07:03:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xa00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1414.244432][ T8231] bond6: (slave bridge5): failed to get link speed/duplex 07:03:13 executing program 3: 07:03:13 executing program 3: 07:03:14 executing program 3: 07:03:14 executing program 3: 07:03:14 executing program 3: 07:03:14 executing program 3: [ 1414.897813][T31186] __nla_validate_parse: 4 callbacks suppressed [ 1414.897823][T31186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1415.048428][T31186] device bond64 entered promiscuous mode [ 1415.055478][T31192] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1415.108458][T31192] device bond71 entered promiscuous mode [ 1415.148738][T31193] bond64 (unregistering): Released all slaves [ 1415.197165][T31195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1415.268857][T31195] device bond62 entered promiscuous mode [ 1415.277777][T31198] bond71 (unregistering): Released all slaves [ 1415.320605][T31199] bond62 (unregistering): Released all slaves [ 1415.380597][T31277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1415.404899][T31314] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1415.419093][T31332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r2, &(0x7f0000000300), 0xfffffe8c) write$tun(r2, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x32) 07:03:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x23, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:15 executing program 3: 07:03:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x10, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xb00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xe, r2}}, 0x20}}, 0x0) [ 1415.770972][ T8231] bond6: (slave bridge5): failed to get link speed/duplex 07:03:15 executing program 3: [ 1415.888049][T31436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1415.995911][T31436] device bond62 entered promiscuous mode [ 1416.012174][T31438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:15 executing program 3: 07:03:15 executing program 3: [ 1416.238065][T31438] device bond64 entered promiscuous mode 07:03:15 executing program 3: [ 1416.280635][T31439] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1416.438256][T31439] device bond71 entered promiscuous mode 07:03:15 executing program 3: [ 1416.485311][T31441] bond62 (unregistering): Released all slaves [ 1416.567853][T31443] bond64 (unregistering): Released all slaves 07:03:16 executing program 3: [ 1416.640312][T31451] bond71 (unregistering): Released all slaves [ 1416.738903][T31643] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1416.835676][T31643] device bond62 entered promiscuous mode [ 1416.848523][T31646] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1416.866790][T31645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1417.145920][T31664] bond62 (unregistering): Released all slaves [ 1417.201043][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x24, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:16 executing program 3: 07:03:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x48, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x10, r2}}, 0x20}}, 0x0) 07:03:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000300)) r2 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10, 0x80800) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "1191bccd4ca9df49", "927210e56c1e263c2a9cfb80c69120dd", "cbaa7147", "55b80a75c7b6d1fc"}, 0x28) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000300)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, 0x0, &(0x7f0000000300)) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, 0x0, &(0x7f0000000300)) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC=r6], 0x73b) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac1414bb0d0090780000000000000fbec1f88d9c4e01000007aca52ff8218e6fe38571aa6c7ac9670db1748d251fc6a1acde9e86c4323df27ebb6a31feb38e12942d817403fc2b50c8bfb9a64746e45f75f344caf040dd22eddc96cb38"], 0x100c) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000100)={0x7, 'veth1_to_bond\x00', {}, 0x50}) [ 1417.311774][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:16 executing program 3: [ 1417.360398][T31753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:16 executing program 3: 07:03:17 executing program 3: 07:03:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001b80)="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", 0x1b9}], 0x3) [ 1417.531994][T31753] device bond64 entered promiscuous mode [ 1417.569944][T31754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 07:03:17 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffff690810fe8b6886dd"], 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 1417.714866][T31754] device bond62 entered promiscuous mode [ 1417.740589][T31757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1417.793054][T31757] device bond71 entered promiscuous mode [ 1417.810485][T31759] bond64 (unregistering): Released all slaves 07:03:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x25, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1417.944963][T31761] bond62 (unregistering): Released all slaves [ 1418.036269][T31771] bond71 (unregistering): Released all slaves 07:03:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x26, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1418.442347][T31987] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1418.471598][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:03:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x60, r2}}, 0x20}}, 0x0) 07:03:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x27, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1418.959721][T32011] device bond64 entered promiscuous mode [ 1418.967701][T32015] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1419.003653][T32015] device bond71 entered promiscuous mode [ 1419.168999][T32016] bond64 (unregistering): Released all slaves [ 1419.196938][T32019] bond71 (unregistering): Released all slaves 07:03:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xd00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x28, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1419.242102][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1419.367903][T32016] device bond64 entered promiscuous mode 07:03:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x29, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1419.410573][T32172] bond64 (unregistering): Released all slaves [ 1419.536019][T32199] device bond62 entered promiscuous mode [ 1419.544587][T32019] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1419.565596][T32200] bond62 (unregistering): Released all slaves 07:03:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010865580000000000000f000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b"], 0x3c}}, 0x0) 07:03:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x2a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1419.602700][ T8231] bond6: (slave bridge5): failed to get link speed/duplex 07:03:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xf0, r2}}, 0x20}}, 0x0) 07:03:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x60, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1419.742483][T32200] device bond62 entered promiscuous mode [ 1419.751005][T32325] bond62 (unregistering): Released all slaves 07:03:19 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f7000000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fbdbdf250000000008000500ac1414aa"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x18d882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x22, 0x6, 0x80000001, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000804) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000002c0)={r7, @in6={{0xa, 0x3, 0x7f, @local, 0x800}}, 0xf887, 0x1000}, &(0x7f0000000380)=0x90) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r3, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote, {[@cipso={0x86, 0x0, 0x2, [{0x7, 0x0, "e9a9915e9ee3cc"}, {0x2}, {0x7, 0x0, "78dbd882f8"}, {0x0, 0x0, "7ee116252215b8b89314"}, {0x6, 0x0, "60bb"}, {0x5, 0x0, "c82ce6923bab4d31198e84e25b40"}, {0x2, 0x0, "b1c199a897aa45f784a23b7268"}, {0x0, 0x0, "3f1cf91987792b8f5ba6e4"}, {0x7, 0x0, "ac1e43ecb68757f1b1a4567e87e6"}, {0x7, 0x0, "a31ddab7855e"}]}]}}, @address_reply={0x12, 0x0, 0x0, 0x29ef}}}}, 0x26) 07:03:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x2b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1419.913635][T32342] device bond64 entered promiscuous mode [ 1419.928040][T32346] bond64 (unregistering): Released all slaves 07:03:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x2c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1419.980322][T32343] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1420.130013][T32343] device bond71 entered promiscuous mode [ 1420.166553][T32344] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:03:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x2d, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1420.190890][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1420.202629][T32344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1420.251964][T32344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:03:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x2e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1420.378504][T32381] bond71 (unregistering): Released all slaves [ 1420.385293][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1420.410943][ T21] bond6: (slave bridge5): link status up again after 0 ms [ 1420.431344][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1420.460941][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1420.510774][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1420.531628][T32346] __nla_validate_parse: 7 callbacks suppressed [ 1420.531639][T32346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1420.542063][ T8231] bond6: (slave bridge5): link status up again after 0 ms 07:03:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xff24, 0xe803000000000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 07:03:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x4, 0x8, 0x3, 0x6}) [ 1420.621739][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1420.642171][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1420.659842][T32346] device bond64 entered promiscuous mode 07:03:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x2f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1420.660863][ T143] bond6: (slave bridge5): link status up again after 0 ms [ 1420.667886][T32538] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1420.729260][T32539] bond64 (unregistering): Released all slaves [ 1420.754026][ T21] bond6: (slave bridge5): link status up again after 0 ms [ 1420.781063][ T21] bond6: (slave bridge5): link status up again after 0 ms [ 1420.814121][T32581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x30, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1420.826087][ T8602] bond6: (slave bridge5): link status up again after 0 ms 07:03:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x600, r2}}, 0x20}}, 0x0) [ 1420.860762][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1420.902001][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1420.914192][T32581] device bond62 entered promiscuous mode [ 1420.932669][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1420.962443][T32620] bond62 (unregistering): Released all slaves [ 1420.985759][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.062006][ T21] bond6: (slave bridge5): link status up again after 0 ms [ 1421.090801][ T8602] bond6: (slave bridge5): link status up again after 0 ms 07:03:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x68, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x31, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1421.120925][ T21] bond6: (slave bridge5): link status up again after 0 ms [ 1421.140860][ T21] bond6: (slave bridge5): link status up again after 0 ms [ 1421.162621][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.181273][ T21] bond6: (slave bridge5): link status up again after 0 ms [ 1421.230917][T32578] bond6: (slave bridge5): link status up again after 0 ms [ 1421.260943][ T8602] bond6: (slave bridge5): link status up again after 0 ms 07:03:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x32, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1421.282238][T32578] bond6: (slave bridge5): link status up again after 0 ms [ 1421.340928][T32578] bond6: (slave bridge5): link status up again after 0 ms [ 1421.371737][ T8602] bond6: (slave bridge5): link status up again after 0 ms 07:03:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x33, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1421.390894][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.421802][ T8602] bond6: (slave bridge5): link status up again after 0 ms 07:03:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x34, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1421.440928][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1421.470998][ T8602] bond6: (slave bridge5): link status up again after 0 ms 07:03:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x35, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1421.510864][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.560801][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.580796][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.601560][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1421.642719][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.665128][T32670] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1421.685497][ T21] bond6: (slave bridge5): link status up again after 0 ms [ 1421.721274][ T26] bond6: (slave bridge5): link status up again after 0 ms [ 1421.742835][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.754929][T32670] device bond71 entered promiscuous mode [ 1421.762704][ T8602] bond6: (slave bridge5): link status up again after 0 ms [ 1421.770006][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1421.783725][T32698] bond71 (unregistering): Released all slaves [ 1421.844485][T32701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1421.910487][T32701] device bond64 entered promiscuous mode [ 1421.929477][T32705] bond64 (unregistering): Released all slaves 07:03:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:21 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'ip6_vti0\x00'}, 0x18) [ 1421.999260][T32715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1422.026433][T32759] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1422.059351][ T382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1422.170025][ T382] device bond64 entered promiscuous mode [ 1422.185872][T32705] bond64 (unregistering): Released all slaves [ 1422.255874][ T408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1422.320027][ T408] device bond62 entered promiscuous mode [ 1422.344073][ T433] bond62 (unregistering): Released all slaves [ 1422.541222][ T433] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1422.571673][ T433] device bond62 entered promiscuous mode [ 1422.580459][ T433] bond62 (unregistering): Released all slaves 07:03:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:03:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x36, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)=ANY=[], 0xa0) 07:03:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xa00, r2}}, 0x20}}, 0x0) 07:03:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6c, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1422.616872][ T21] bond6: (slave bridge5): failed to get link speed/duplex 07:03:22 executing program 3: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) 07:03:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x37, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), 0x98) 07:03:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x38, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1423.031936][ T612] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0xfffff801}, 0xa0) [ 1423.156525][ T612] device bond71 entered promiscuous mode 07:03:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x39, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1423.200805][ T619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x12b6, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1423.277344][ T619] device bond64 entered promiscuous mode [ 1423.298695][ T622] bond71 (unregistering): Released all slaves [ 1423.424747][ T623] bond64 (unregistering): Released all slaves [ 1423.487334][ T750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1423.539230][ T750] device bond62 entered promiscuous mode [ 1423.574821][ T769] bond62 (unregistering): Released all slaves [ 1423.647490][ T774] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1423.663816][ T792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x3a, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="10024e2300"/135, @ANYRES32=0x0, @ANYBLOB="25d3"], 0xa0) 07:03:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xc00, r2}}, 0x20}}, 0x0) 07:03:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x74, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x200}) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000002000000000000004500002800000000006c9078ac141400ac907800010003fffffffc00"/50], 0x32) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x340}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, 0x3, 0x7, 0x5, 0x0, 0x0, {0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf07c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x88d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x54}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040}, 0x20008044) [ 1423.989102][ T769] device bond62 entered promiscuous mode [ 1424.001980][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:03:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x3b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1424.082440][ T908] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), 0xa0) 07:03:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x3c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1424.226381][ T908] device bond71 entered promiscuous mode [ 1424.301861][ T909] device bond64 entered promiscuous mode [ 1424.317328][ T921] bond71 (unregistering): Released all slaves 07:03:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x3d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:24 executing program 3: [ 1424.542057][ T927] device bond63 entered promiscuous mode [ 1424.557723][ T930] bond64 (unregistering): Released all slaves 07:03:24 executing program 3: [ 1424.605673][ T956] bond63 (unregistering): Released all slaves 07:03:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x3e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1424.690788][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:24 executing program 3: [ 1424.770191][ T930] device bond64 entered promiscuous mode [ 1424.805000][ T921] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1424.832049][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1424.869671][ T1169] bond64 (unregistering): Released all slaves [ 1425.000791][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:03:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xe00, r2}}, 0x20}}, 0x0) 07:03:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x41, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private, @remote}}}], 0x20}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl2\x00', r2, 0x4, 0x0, 0x0, 0x0, 0x41, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2={0xfc, 0x2, [], 0x1}, 0x7800, 0x7, 0x8, 0x2}}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r4, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000015c0)={'vcan0\x00', r6}) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r8, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private, @remote}}}], 0x20}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c020000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf25090000003800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8c0001801400020076657468305f766972745f77696669001400020062726964676530000000000000000000140002006e723000000000000000000000000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800b8f75b843d7a6ddd0e21e56dd3ea0100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f3000001400020064756d6d7930000000000000000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200767863616e31000000000000000000000800030000000000140002007767310000000000000000000000000008000300020000000c00018008000300030000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723100000000000014000200776731000000000000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="3800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c300000000000000000000800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="3c0001800800030001000000080003000300000008000300030000000800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="5c0001801400020067656e65766530000000000000000000140002006d6163736563300000000000000000000800030002000000140002006c6f000000000000000000000000000014000200776732000000000000000000000000001c00018008000100", @ANYRES32=r7, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB], 0x26c}}, 0x8010) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000200000000e7ff004600100200000000006c9078ac141400ac1414bb0d00907800000000000000000000000000000000267152a8166a0e98fd65e3a71eca2a519afad51a1a3fa7fa81a29692fe5f2f9fd851edb79cd632c6997f95b5ccdd1486d03275ecdc489e4f97eb38e05cd10f62b6e8d98b99c488d6b61d7021cde9afe6e5"], 0x100c) 07:03:24 executing program 3: 07:03:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3f00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1425.120920][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:03:24 executing program 3: 07:03:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x42, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1425.170134][ T1234] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:24 executing program 3: [ 1425.243644][ T1234] device bond71 entered promiscuous mode [ 1425.339168][ T1237] device bond63 entered promiscuous mode [ 1425.355881][ T1244] bond71 (unregistering): Released all slaves 07:03:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x43, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:25 executing program 3: [ 1425.470430][ T1240] device bond64 entered promiscuous mode [ 1425.497078][ T1255] bond63 (unregistering): Released all slaves [ 1425.611288][ T1295] bond64 (unregistering): Released all slaves 07:03:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x44, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x3f00, r2}}, 0x20}}, 0x0) [ 1426.043159][ T1244] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1426.064577][ T1471] __nla_validate_parse: 7 callbacks suppressed [ 1426.064588][ T1471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1426.116655][ T1472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1426.151769][ T21] bond6: (slave bridge5): failed to get link speed/duplex 07:03:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:25 executing program 3: [ 1426.178342][ T1480] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1426.286641][ T1480] device bond71 entered promiscuous mode [ 1426.326399][ T1484] bond71 (unregistering): Released all slaves [ 1426.423612][ T1501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1426.479225][ T1501] device bond64 entered promiscuous mode [ 1426.488209][ T1524] bond64 (unregistering): Released all slaves [ 1426.692503][ T1524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1426.727046][ T1524] device bond64 entered promiscuous mode [ 1426.735578][ T1480] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1426.766153][ T1480] device bond71 entered promiscuous mode [ 1426.775856][ T1685] bond71 (unregistering): Released all slaves 07:03:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac1414bbecff8f7800"/50], 0x100c) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4808140}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x140b, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x11) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f00000000c0)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$alg(r4, 0x0, 0x0, 0x80000) 07:03:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x45, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:26 executing program 3: 07:03:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x300, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1426.828141][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:03:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x5865, r2}}, 0x20}}, 0x0) 07:03:26 executing program 3: [ 1426.940816][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1426.955963][ T1766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x46, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:26 executing program 3: 07:03:26 executing program 3: [ 1427.092487][ T1766] device bond63 entered promiscuous mode [ 1427.118099][ T1765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x47, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:26 executing program 3: r0 = socket(0x2, 0x5, 0x0) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) [ 1427.225229][ T1765] device bond65 entered promiscuous mode [ 1427.248455][ T1778] bond63 (unregistering): Released all slaves [ 1427.291472][ T1787] bond65 (unregistering): Released all slaves [ 1427.343320][ T1796] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1427.418544][ T1796] device bond71 entered promiscuous mode [ 1427.435489][ T1815] bond71 (unregistering): Released all slaves [ 1427.817815][ T1778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1427.847005][ T1787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1427.880875][ T2001] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1427.939860][ T2001] device bond71 entered promiscuous mode 07:03:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x48, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:27 executing program 3: r0 = epoll_create(0x9614) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 07:03:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4800, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x500, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x6000, r2}}, 0x20}}, 0x0) [ 1428.182039][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', r2, 0x7800, 0x8000, 0x0, 0x10001, {{0x43, 0x4, 0x3, 0x3c, 0x10c, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x1f, 0xa7, [@multicast1, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010101, @empty, @rand_addr=0x64010101, @broadcast, @private=0xa010100]}, @rr={0x7, 0x13, 0x6e, [@empty, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}]}, @ssrr={0x89, 0x2b, 0x81, [@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010100, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xbf, 0x0, 0x8, [0x7, 0x80000000, 0x0, 0x1f, 0x45, 0x1]}, @timestamp={0x44, 0x10, 0xac, 0x0, 0x3, [0xff, 0x7ff, 0x0]}, @end, @ssrr={0x89, 0x17, 0xf6, [@local, @dev={0xac, 0x14, 0x14, 0xa}, @multicast1, @rand_addr=0x64010100, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x18, 0x3, 0x7, [{@remote, 0x20}, {@multicast2}, {@remote, 0x4}, {@private=0xa010101, 0x4}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1000}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0xf7, 0x3, 0x7, [{@broadcast, 0xff}, {@multicast1, 0x80000001}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6d, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r8, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4004800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac14149b0d00907800"/50], 0x100c) [ 1428.290899][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1428.298973][ T2056] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@empty}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 07:03:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x49, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1428.372561][ T2056] device bond63 entered promiscuous mode 07:03:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@empty}, {@in=@multicast1}, @in=@loopback}}, 0xf0}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 1428.420057][ T2053] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:28 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='x', 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0xa}, @init, @sndrcv], 0x1c}, 0x0) 07:03:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x4a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1428.565737][ T2053] device bond72 entered promiscuous mode [ 1428.596907][ T2054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1428.691491][ T2054] device bond65 entered promiscuous mode [ 1428.706593][ T2069] bond72 (unregistering): Released all slaves 07:03:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x4b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1428.818233][ T2074] bond63 (unregistering): Released all slaves [ 1428.878771][ T2085] bond65 (unregistering): Released all slaves 07:03:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x4c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1429.067347][ T2217] device bond7 entered promiscuous mode [ 1429.084231][ T2247] bond7 (unregistering): Released all slaves 07:03:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1429.355248][ T2069] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1429.390897][ T21] bond6: (slave bridge5): failed to get link speed/duplex 07:03:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x600, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x4d, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1429.788103][ T2376] device bond63 entered promiscuous mode [ 1429.803559][ T2380] bond63 (unregistering): Released all slaves [ 1429.894480][ T2382] device bond65 entered promiscuous mode [ 1429.906804][ T2385] bond65 (unregistering): Released all slaves 07:03:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@gre={{0x11, 0x4, 0x0, 0x15, 0x2cb, 0x68, 0x0, 0x1, 0x2f, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x1f, 0x65, [@multicast2, @remote, @multicast1, @empty, @empty, @broadcast, @multicast2]}, @end, @ssrr={0x89, 0xf, 0xec, [@remote, @broadcast, @remote]}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8e, 0x0, [], "0666debc003c7350cce4cb6b14a27b3f4042008309c3a498c678f424a35692f61f342540d6182fa1c1bc6a742fbf8683419aac34692e905f928699467c2343f77d33f0000096fe6b218a5534ee9ff854685b643bb13f034286997bdc40994c3d3c6bc72810c41a91e2c9158dfe1b7d9c3c6e5c979150c5ebbdbad353568f6a9492d2c7d1050300d6e6d63ea12869"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xfff8], "7556164c3b57927d0c102437008564c681e3ae29a9088b5c306e9e9718db6c506274666a277b37f80ab38e495359cdddef863958ff5e02b4850fd02c0ee478566ae21d1e0435d21c58b44c2bc57b9e4350e7a752cb19e493f51cd0b6e61427c6fd7cb29247e6dcfc62aeb95269b85ee4333862ad5e056883f05ba74e96d8bfa33b634b223cfb2bbf736d5467520e146030d49e326160f672b71c25daf45a330f6c9369849f25bd50ce670fab31bb3bfdb57834467cceb63fe57c36acd4bba65d95075dacbdddb7c141aeecac173cc2173ae1c925fdc0ccb5918e054446f2a165ef28"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "697bcf7c804852827543401f8ef0bdac8b27cfd8f7047bb17b9127673b653677e47a46a34d4d291bea28da085f41a85dea93db558ae7f52e37e517b9483e9f3b7bc0bf93fcfcb4189fabc03190cf1494"}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x86, 0x3, 0x1, 0x1, 0x1, 0xc8}, 0x1, {0x12}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x4, 0x1, 0x1, 0x2, 0x6, 0x2}, 0x2, {0x80000001, 0x3, 0x2, 0xe, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "50146faee175d42c832f6b64d8f64c3d54bd4650f62c3b3aaa758200f875c21529bfd282aa3639065f628063d2fba59d696e74d4b0ade6b0f57f22d0765728676869243540e779a4020081cd47ff8d71786221e98a977781ba2acd4afe62313de96bbf1e7ac7f509ea1aba1f2576791ce8298710ab53c92a370cc7c2432977654b"}}}}}, 0x2d5) 07:03:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x4e, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x6558, r2}}, 0x20}}, 0x0) 07:03:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4800, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1430.083442][ T2380] device bond63 entered promiscuous mode 07:03:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x4f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1430.135173][ T2563] bond63 (unregistering): Released all slaves [ 1430.222114][ T21] bond6: (slave bridge5): failed to get link speed/duplex [ 1430.250241][ T2585] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x700, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x50, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1430.324567][ T2585] device bond72 entered promiscuous mode [ 1430.358549][ T2603] device bond7 entered promiscuous mode [ 1430.367258][ T2621] bond72 (unregistering): Released all slaves 07:03:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x74, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x51, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5865, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x52, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x53, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1430.993454][ T2725] device bond65 entered promiscuous mode [ 1431.173137][ T2742] bond65 (unregistering): Released all slaves [ 1431.200655][ T2744] __nla_validate_parse: 9 callbacks suppressed [ 1431.200666][ T2744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1431.250054][ T2744] device bond8 entered promiscuous mode [ 1431.256999][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1431.284972][ T2746] bond8 (unregistering): Released all slaves [ 1431.319725][ T2749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1431.366533][ T2749] device bond63 entered promiscuous mode [ 1431.378097][ T2753] bond63 (unregistering): Released all slaves [ 1431.406363][ T2775] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1431.422984][ T2864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1431.453873][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1431.543704][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:03:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="6c37eeabe6cdff7665e6e0977a4ba2359cae238a820fe72a6d35ec8c2f19f5b8fb1087af840a5362c42b47a2a5c3a23a5126761292753b9ba26f30397d7b", 0x3e}, {&(0x7f0000000100)="35dc263b98909b387728ad9d4b2ffd6d1b063094e184ef9462fa613a", 0x1c}, {&(0x7f0000000180)="e9b9e26bc29b5f35dc0641226c20ae5a51e65abb6b9cddb7d8d304e545202b65e32d9491e06402bcae10258b314518b37890dcbe735c90bd73cd0ecdcc7397c2678026c18be2cb2b6f8ef149986971da9320960949c5ed856ece51473d43b1c8dbdb0b8b98511b9ae07f16414383bea36217c222f69ee10919f94a34108c81375b944126afe0c5f30012bb0d8fb385fc06ddf937deb336b42544d2d9d0008153", 0xa0}], 0x3, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb12b}}], 0x18}}, {{&(0x7f0000000300)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)="3e8ee5317c0d42713ddb13a4b5e555d9207225a475cdc086cd77c565bf65089815c32ffbf07a52847bc16333bea602a00be36116cf2a04d78fbbdecb0d6a118aee52c1d20848d9aa375b903366d52f848ed9f12728cf20a69c41b6162d82cda01053cbdb01c5d45554f9b4", 0x6b}, {&(0x7f00000003c0)="b85917c04cc8dbb2fa4d7a4878950edfb3ca8a34f65c883335e2388d9ef542f9a18685240c459e26152b5ab70d3e21887ad18c896b9664dc9636b9b16178f2af557fad771a1f629a6df18fa4656c493bd9997c4cc3e8e06b4a37339fd0abfcff519d2c4069ffea697a2ea43617c4314fd0073034a67579de9da91e861c2ae0cd992d6bdaabb1f829af6ee64c2bcb68b497462fc9a7da07bffe32e388bfa496bcbc7003c5e2aac8775b3e29c62301e3025c03fc8712b6c4d08fbc3e55ff6b16adbecdee2dca3765c37707cf9867a19ff694ad86d9e2d87cb50b9b", 0xda}, {&(0x7f00000004c0)="1368bb8d9c0dfd39eb3f3d3565da5050492f765ddf08982d53ec5416c34b5fe3f16854f8e033858f677e71f60ed2cfcc97ea42b7df94b051e80152dba8ebc57876032ae6e35f6cb9e5f1eb2d971d1f9d3fdffbdb0c4921834222a56837", 0x5d}, {&(0x7f0000000540)="678f08e2353c2866236e38e07c7cd9dcc65c1f43e660117ad6cd73bff823d4bc18e5d918980dd8dc815cae7a1803a73793137c2513290e0c946f785ac3c70ea7f15752e6da51f6222be4482fe5e66138e506bcd825c6bdf545927740f1b2690bcf2d8076ba3c", 0x66}, {&(0x7f00000005c0)="f401093342700af6002afee21fe48bd5abdb3268cedd4c1f08c1fb93e2afbec7db09a3698c3ed653a11203e215378a57ec337352b853d283f1f8e7bef4a6d1ea7ef396fa18c915bdc0e227cb2af22fb6f981af7241edf5052f85507e522e3da220acdae33a11c4a25770ec0ea4628180e1d1f571d035028b3dede3c3c2f5c72013052a6b63c99086e014b4d535203ec12eca9664f3ae5303140f8069e63a48ac12424c04784f9193e95da9f289080368e9", 0xb1}], 0x5}}, {{&(0x7f0000000700)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000740)="89c8c139419c6acaf798a4a2cd033565b49191b3a5a19d798cb503ab383553abba84a4b57bd44cc979d1237263bc8c86087a7fe99647d92a955b3c859de0dc57dfff69cf9517d6550b0719f30700b58b1c3e383dd313", 0x56}, {&(0x7f00000007c0)="52c72a2388e3753f2609d79fe5a17e6fd8c92cc7882438a678b2c1efa969b7213b3f6fbcc0e983819ca2599fe31f3a37893f16889c81d9a97c257982d76eab7a7d522a910d9df82d54c0d93864efd9088b884c0664e40173b06918393a7dda50153edb3c6f9ae64359d8c50937d6a282d29b699ca5ce43d61ea17d46c1ddf8426eb0c1d36f0c7dff633070b543f8827a72ee8902138d3400280697645b40f9e7e23edc78197082d9df51600442c8932c58f40d0cf895dba86470acffb9126df5de7c030e86e92650e229aed243e07d7568c14cccbb77755022bb3d31e13cdcd15b07609acae0fbbfe9f7fbc3720d354ad9419c9717b7", 0xf6}, {&(0x7f00000008c0)="f88da35130bb2e23a026cce382123a97563be50aa62f831b66f0382f1c52ee9aead1e547d7f9d055b21a23e9b30880d65d9822278e6f74fa60062db1057bfbc18d55c2abb34cbbae437ce3334d75dab3b068e98dce6ed6785f710e1ce349d360bd8fb68583f79a041e6bfcc42cc00a161af5570f8e1eed54f85313c7c6861ab7ab9019dbbac89b69918f0f6e8f4c376c18b9475b7e9edb693adbb4022505ff", 0x9f}], 0x3, &(0x7f00000009c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000a00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a40)="6ad4f0e23ff99a5253cf50219507ce06800f1cb603d318a8e0d3cfd4768f40f381a9b3b2244d4818f1e6471d5d2647f58cf5d2a786156889b89c27338cc275263a7a4e90699e33ca3f4d1e6c2c6b5baf4ac335e849716d40738bd939290d1b2754d3c66d2a014936a4cb4afcdd828433e486c79e268bdbd7d7935066a5311051caf4c816d6b070bc8300bff4dffc5224cbb07ffde70909", 0x97}, {&(0x7f0000000b00)="90226d9800be54d4a24a7d99bf6ab312f0837c0593c4c19da282faf292226fdd375d755703f3d06331e5f321fcd339bdd80a9ec0c7af5a2dc3b513fd4a4822bd104a743816f251da80192b904839c85de69b91b507f81b2d94cbe851fb535ac0880fd54d", 0x64}], 0x2, &(0x7f0000000bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}}], 0x4, 0x2800) 07:03:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x54, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x8100, r2}}, 0x20}}, 0x0) 07:03:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x74, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x87c, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1431.670887][ T8231] bond6: (slave bridge5): failed to get link speed/duplex [ 1431.692084][ T2990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x55, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1431.787553][ T2990] device bond72 entered promiscuous mode [ 1431.827707][ T2987] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x56, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1431.959854][ T2987] device bond65 entered promiscuous mode [ 1431.979847][ T2994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1432.040513][ T2994] device bond8 entered promiscuous mode [ 1432.049154][ T2995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1432.127863][ T2995] device bond63 entered promiscuous mode [ 1432.136739][ T2997] bond72 (unregistering): Released all slaves 07:03:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x57, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1432.194279][ T3005] bond65 (unregistering): Released all slaves [ 1432.303722][ T3034] bond8 (unregistering): Released all slaves 07:03:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x58, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1432.383098][ T3035] bond63 (unregistering): Released all slaves [ 1432.468306][ T3321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x59, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1432.579804][ T3321] device bond65 entered promiscuous mode [ 1432.605606][ T2997] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1432.974864][ T8231] bond6: (slave bridge5): failed to get link speed/duplex [ 1432.984704][ T3005] bond65 (unregistering): Released all slaves [ 1433.014511][ T2995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1433.041106][ T3380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1433.127801][ T3380] device bond8 entered promiscuous mode [ 1433.136765][ T3384] bond8 (unregistering): Released all slaves [ 1433.192062][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1433.433051][ T21] bond6: (slave bridge5): failed to get link speed/duplex 07:03:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) r4 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r3, 0x1, 0x2, 0x37d6, 0x1, 0x4, 0x0, 0xa0, {r5, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x18}, 0x1ff}}, 0x3, 0x9, 0x3, 0x5, 0x3}}, &(0x7f0000000000)=0xb0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:03:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x5a, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6558, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xf000, r2}}, 0x20}}, 0x0) 07:03:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x900, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x8100, r2}}, 0x20}}, 0x0) [ 1433.540893][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1433.556064][ T3520] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x5b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1433.625397][ T3520] device bond72 entered promiscuous mode 07:03:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x5c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1433.719499][ T3523] device bond63 entered promiscuous mode [ 1433.736461][ T3526] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1433.783870][ T3526] device bond8 entered promiscuous mode 07:03:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x5d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x5e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1433.866763][ T3534] device bond65 entered promiscuous mode [ 1433.904169][ T3546] bond72 (unregistering): Released all slaves [ 1433.997126][ T3565] bond63 (unregistering): Released all slaves 07:03:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x5f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1434.041875][ T3570] bond65 (unregistering): Released all slaves [ 1434.120291][ T3568] bond8 (unregistering): Released all slaves 07:03:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x60, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1434.535421][ T3836] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1434.561955][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:03:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r3}, 0x7c8, 0x4, 0x8}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:03:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x61, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x60, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xa00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6800, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0xffff, r2}}, 0x20}}, 0x0) [ 1434.671326][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1434.757118][ T3863] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1434.812854][ T3863] device bond72 entered promiscuous mode 07:03:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x62, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1434.853297][ T3864] device bond63 entered promiscuous mode [ 1434.917840][ T3866] device bond65 entered promiscuous mode [ 1434.988875][ T3865] device bond8 entered promiscuous mode 07:03:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x63, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1435.049368][ T3894] bond72 (unregistering): Released all slaves [ 1435.124170][ T3908] bond63 (unregistering): Released all slaves [ 1435.178661][ T3907] bond65 (unregistering): Released all slaves 07:03:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x64, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1435.255446][ T3909] bond8 (unregistering): Released all slaves 07:03:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x65, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x66, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x67, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1435.757701][ T3894] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1435.812996][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:03:35 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x800}) r1 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x17, 0x0, 0x8, {r7, @remote, @remote}}}], 0x20}}], 0xd1d6ea5df6a835f1, 0x80) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}]}, 0x34}}, 0x40000) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x100c) 07:03:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6c00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x68, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xb00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x60, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1435.950971][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:03:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x69, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1436.078468][ T4190] device bond63 entered promiscuous mode [ 1436.159242][ T4192] device bond8 entered promiscuous mode [ 1436.173405][ T4219] bond63 (unregistering): Released all slaves 07:03:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x6a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1436.269362][ T4231] __nla_validate_parse: 11 callbacks suppressed [ 1436.269373][ T4231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1436.417209][ T4231] device bond65 entered promiscuous mode [ 1436.440181][ T4220] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x6b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1436.491014][ T4220] device bond72 entered promiscuous mode [ 1436.512645][ T4226] bond8 (unregistering): Released all slaves 07:03:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x6c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1436.581718][ T4237] bond72 (unregistering): Released all slaves 07:03:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x6d, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1436.667642][ T4236] bond65 (unregistering): Released all slaves 07:03:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x6e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1436.773901][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1436.785491][ T4219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r2, &(0x7f0000000300), 0xfffffe8c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r3, &(0x7f0000000300), 0xfffffe8c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x1000}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1436.984214][ T4219] device bond63 entered promiscuous mode [ 1437.002966][ T4493] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1437.027176][ T4495] bond63 (unregistering): Released all slaves [ 1437.105447][ T4231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1437.141328][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7400, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x6a, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x6f, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x2}}, 0x20}}, 0x0) 07:03:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7ff, 0x49, 0x1, 0xffff}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1437.261095][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1437.338934][ T4585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x70, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1437.430304][ T4585] device bond65 entered promiscuous mode [ 1437.446020][ T4587] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x71, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1437.623352][ T4587] device bond72 entered promiscuous mode [ 1437.653603][ T4588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x72, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1437.818957][ T4588] device bond63 entered promiscuous mode [ 1437.831555][ T4591] bond65 (unregistering): Released all slaves [ 1437.876643][ T4593] bond72 (unregistering): Released all slaves [ 1437.916803][ T4609] bond63 (unregistering): Released all slaves 07:03:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x73, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1437.983261][ T4663] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1438.016106][ T4663] device bond8 entered promiscuous mode [ 1438.032385][ T4673] bond8 (unregistering): Released all slaves 07:03:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x74, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1438.458792][ T4593] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1438.472015][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1438.479387][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1438.501159][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x75, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xd00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x4}}, 0x20}}, 0x0) [ 1438.581043][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) poll(&(0x7f00000000c0)=[{r0, 0xb000}, {r2, 0x1200}, {}], 0x3, 0xa30f) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000011000000004600100200000000006c9078ac141400ac1414bb0d0090780000000000000000000000f8ec000000"], 0x100c) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x779, 0x7, 0x8001, 0x142}, 0x10) [ 1438.655409][ T4907] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1438.718677][ T4907] device bond8 entered promiscuous mode [ 1438.732950][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x76, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1438.818654][ T4908] device bond65 entered promiscuous mode [ 1438.837180][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x77, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1438.982554][ T4915] device bond63 entered promiscuous mode [ 1438.993746][ T4930] bond8 (unregistering): Released all slaves [ 1439.045550][ T4931] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1439.083266][ T4931] device bond72 entered promiscuous mode [ 1439.099517][ T4943] bond65 (unregistering): Released all slaves [ 1439.154165][ T4959] bond63 (unregistering): Released all slaves [ 1439.181859][ T4974] bond72 (unregistering): Released all slaves 07:03:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x78, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1439.230880][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1439.254341][ T4943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6800, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1439.314517][ T4943] device bond65 entered promiscuous mode 07:03:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x79, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x7a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1439.656118][ T5219] bond65 (unregistering): Released all slaves 07:03:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8100, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x7b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1439.867734][ T5238] device bond8 entered promiscuous mode [ 1439.883085][ T5239] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1439.906750][ T5240] bond8 (unregistering): Released all slaves 07:03:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x6}}, 0x20}}, 0x0) 07:03:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x7c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1440.108665][ T5320] device bond63 entered promiscuous mode [ 1440.133637][ T5322] bond63 (unregistering): Released all slaves [ 1440.255376][ T5397] device bond65 entered promiscuous mode [ 1440.294413][ T5416] bond65 (unregistering): Released all slaves [ 1440.406721][ T5420] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1440.457219][ T5420] device bond72 entered promiscuous mode [ 1440.490021][ T5454] bond72 (unregistering): Released all slaves 07:03:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x700, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x7d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000300)) r1 = socket$caif_stream(0x25, 0x1, 0x5) r2 = accept4(r1, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80, 0x800) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000200)=0x9, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'vcan0\x00', {0x7, 0x0, @local}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="79a8b0c309bb52fc00004604000200000000006c9078ac141400ac1414bb0d0090780000000000000000000000000011128ae975320bb868dfc62128f1ec93000000"], 0x100c) [ 1440.626074][ T5322] device bond63 entered promiscuous mode [ 1440.639537][ T5558] bond63 (unregistering): Released all slaves 07:03:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x7e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1440.806377][ T5646] device bond8 entered promiscuous mode [ 1440.840252][ T5454] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x82, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1440.865432][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1440.888698][ T5637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:03:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xb612, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1440.911776][ T5666] bond8 (unregistering): Released all slaves 07:03:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x83, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x8}}, 0x20}}, 0x0) [ 1441.085837][ T5705] device bond65 entered promiscuous mode [ 1441.134647][ T5721] bond65 (unregistering): Released all slaves 07:03:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x84, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1441.356336][ T5766] device bond63 entered promiscuous mode 07:03:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1441.397532][ T5777] bond63 (unregistering): Released all slaves 07:03:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x85, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1441.469317][ T5795] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1441.519469][ T5795] device bond72 entered promiscuous mode [ 1441.565501][ T5822] bond72 (unregistering): Released all slaves 07:03:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) pwrite64(r2, &(0x7f0000000280)="8831fecead3ba60c7e66a4d84e9614963a0564dec83d4a49c19c068ca0c0bdb861e65cfdc2ad931e64d9932fbdbf17ad3e8e209b82bd8e098105c46c89688bca40b989b190a661b4f3e437d8930f39e803bd37d9fb99", 0x56, 0x6) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:03:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x86, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1441.617960][ T5721] __nla_validate_parse: 9 callbacks suppressed [ 1441.617971][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x87, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1441.714342][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1441.779808][ T5777] device bond63 entered promiscuous mode [ 1441.790105][ T5956] bond63 (unregistering): Released all slaves [ 1441.875384][ T5822] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xa}}, 0x20}}, 0x0) 07:03:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x88, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x89, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1442.460841][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1c, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x8a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1442.598314][ T6040] device bond65 entered promiscuous mode [ 1442.624507][ T6044] bond65 (unregistering): Released all slaves [ 1442.723052][ T6046] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x8b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1442.806028][ T6046] device bond72 entered promiscuous mode [ 1442.846710][ T6049] bond72 (unregistering): Released all slaves [ 1442.974800][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1443.041247][ T6091] device bond63 entered promiscuous mode [ 1443.057478][ T6095] bond63 (unregistering): Released all slaves 07:03:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x8c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1443.136844][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1443.167771][ T6168] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1443.215306][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1443.294998][ T6095] device bond63 entered promiscuous mode [ 1443.311815][ T21] bond6: (slave bridge5): failed to get link speed/duplex 07:03:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x0, 0x0, 0x2}, @x25={0x2, 0x11, 0xfd}}, 0xd) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x0, 0x401, 0x10001}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$netrom(r6, &(0x7f0000000280)={{}, [@default, @bcast, @netrom, @remote, @null, @null, @netrom, @default]}, &(0x7f0000000340)=0x48, 0x800) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r4, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private, @remote}}}], 0x20}}], 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r7) 07:03:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3f00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xc}}, 0x20}}, 0x0) 07:03:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1b, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x20000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x8d, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1443.440883][ T21] bond6: (slave bridge5): failed to get link speed/duplex [ 1443.464818][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x8e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1443.566082][ T6325] device bond65 entered promiscuous mode [ 1443.604894][ T6328] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x8f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1443.790492][ T6328] device bond72 entered promiscuous mode [ 1443.829439][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x90, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1443.904230][ T6329] device bond64 entered promiscuous mode [ 1443.914342][ T6334] bond65 (unregistering): Released all slaves 07:03:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x91, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1444.038493][ T6359] bond72 (unregistering): Released all slaves 07:03:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x92, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1444.142488][ T6362] bond64 (unregistering): Released all slaves [ 1444.236865][ T6359] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x93, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1444.330051][ T6359] device bond72 entered promiscuous mode [ 1444.596889][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1444.611557][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1444.649620][ T6587] bond72 (unregistering): Released all slaves [ 1444.752191][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:03:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'team_slave_1\x00', {0x7, 0x4e21, @loopback}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d905fe19f060609268a422be6e3000002000000000000004600100200000000006c9078ac14080000000000000090780000"], 0x100c) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000)=0x1000, 0x4) 07:03:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x94, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x1b, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x40000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xe}}, 0x20}}, 0x0) [ 1444.861252][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1444.953473][ T6666] device bond64 entered promiscuous mode 07:03:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x95, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1445.000257][ T6665] device bond65 entered promiscuous mode [ 1445.010027][ T6666] bond64 (unregistering): Released all slaves 07:03:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x96, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1445.100735][ T6678] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1445.165652][ T6678] device bond72 entered promiscuous mode [ 1445.185246][ T6705] bond65 (unregistering): Released all slaves [ 1445.230255][ T6740] bond72 (unregistering): Released all slaves 07:03:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x97, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1445.424336][ T6705] device bond65 entered promiscuous mode [ 1445.473902][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:03:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x98, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0ffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4800, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1445.514988][ T6740] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1445.656794][ T6740] device bond72 entered promiscuous mode [ 1445.770475][ T6966] device bond64 entered promiscuous mode 07:03:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x3c, @loopback, 0x4e23, 0x0, 'fo\x00', 0x10, 0x20, 0x61}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 0x6, 0x5, 0x6}}, 0x44) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000000400034500002800000000006c9078ac141401ac5414bb0d0090780000000300000000"], 0x32) 07:03:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x300, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x10}}, 0x20}}, 0x0) 07:03:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x99, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1445.861160][ T6976] device bond66 entered promiscuous mode [ 1445.885168][ T6980] bond64 (unregistering): Released all slaves 07:03:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x9a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1446.006045][ T6989] bond66 (unregistering): Released all slaves [ 1446.076102][ T7073] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x9b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1446.140914][ T7073] device bond73 entered promiscuous mode [ 1446.152008][ T7093] bond73 (unregistering): Released all slaves [ 1446.285165][ T7090] device bond8 entered promiscuous mode [ 1446.312442][ T7118] bond8 (unregistering): Released all slaves 07:03:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x9c, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x9d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x9e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1446.813522][ T6980] __nla_validate_parse: 7 callbacks suppressed [ 1446.813533][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1446.838514][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x9f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1446.870972][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1446.881621][ T7294] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x1000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x19, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f00000000c0)={{0x84, @remote, 0x4e21, 0x3, 'none\x00', 0xb, 0x7, 0x5d}, {@private=0xa010101, 0x4e21, 0x10000, 0x2, 0x3, 0x7f}}, 0x44) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000200000000ac141400ac1414bb0d00907800000000000a00"/50], 0x100c) 07:03:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x60}}, 0x20}}, 0x0) 07:03:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa0, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1447.012130][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1447.046015][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1447.227526][ T7315] device bond64 entered promiscuous mode [ 1447.272188][ T7321] bond64 (unregistering): Released all slaves 07:03:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa1, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1447.367581][ T7343] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1447.492014][ T7343] device bond73 entered promiscuous mode [ 1447.536439][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa2, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1447.676836][ T7351] device bond66 entered promiscuous mode [ 1447.689430][ T7360] bond73 (unregistering): Released all slaves [ 1447.793517][ T7362] bond66 (unregistering): Released all slaves [ 1447.960422][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa3, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa4, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa0, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa5, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1448.478674][ T7554] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1448.518031][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1448.547130][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1448.667924][ T7563] device bond64 entered promiscuous mode [ 1448.684137][ T7566] bond64 (unregistering): Released all slaves [ 1448.717871][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1448.777541][ T7607] device bond8 entered promiscuous mode [ 1448.785879][ T7647] bond8 (unregistering): Released all slaves [ 1449.086058][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1449.122651][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r2 = socket$alg(0x26, 0x5, 0x0) bind(r2, &(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x100c) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x1406, 0x4, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x8884) 07:03:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x60}}, 0x20}}, 0x0) 07:03:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xf0}}, 0x20}}, 0x0) 07:03:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5865, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa6, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1449.230913][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1449.266596][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa7, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1449.453440][ T7737] device bond66 entered promiscuous mode [ 1449.485182][ T7742] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:03:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa8, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1449.558100][ T7742] device bond73 entered promiscuous mode [ 1449.625229][ T7745] device bond64 entered promiscuous mode [ 1449.660422][ T7748] bond73 (unregistering): Released all slaves [ 1449.739925][ T7746] bond66 (unregistering): Released all slaves 07:03:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa9, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1449.795401][ T7744] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1449.904532][ T7744] device bond8 entered promiscuous mode [ 1449.923553][ T7765] bond64 (unregistering): Released all slaves 07:03:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xaa, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1449.980020][ T7772] bond8 (unregistering): Released all slaves 07:03:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xab, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xac, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1450.285891][ T7748] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1450.345119][ T21] bond6: (slave bridge5): failed to get link speed/duplex [ 1450.502699][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:03:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac1414bb0d0090780000000000cb00002d4460d8703a7f758acebd0000000000000000e57d802262499231431366cbf97909e58bb0d2c5781404f88a83fcc6fd27f720914373c2cfa143b20604a6e5460a88bbea848391ed26f4702c0c968323ff3fc95a5c60e2d9afac69f9010ede75c397d8ccf0665374738a18ab53def90203b2f957c1923945"], 0x100c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x2, 0xd, 0x7, 0x1}, &(0x7f00000000c0)=0x20) [ 1450.851048][ T21] bond6: (slave bridge5): failed to get link speed/duplex 07:03:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x60}}, 0x20}}, 0x0) 07:03:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x600}}, 0x20}}, 0x0) 07:03:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xad, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xae, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1451.022110][ T8080] device bond66 entered promiscuous mode [ 1451.049700][ T8082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:03:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xaf, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1451.143059][ T8082] device bond8 entered promiscuous mode [ 1451.206353][ T8091] device bond64 entered promiscuous mode [ 1451.220003][ T8103] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1451.270390][ T8103] device bond73 entered promiscuous mode [ 1451.282798][ T8108] bond66 (unregistering): Released all slaves [ 1451.304349][ T8120] bond8 (unregistering): Released all slaves [ 1451.336037][ T8121] bond64 (unregistering): Released all slaves [ 1451.374090][ T8122] bond73 (unregistering): Released all slaves [ 1451.440977][ T143] bond6: (slave bridge5): failed to get link speed/duplex [ 1451.479131][ T8121] device bond64 entered promiscuous mode 07:03:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb0, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x17, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1451.604517][ T8366] device bond66 entered promiscuous mode [ 1451.642051][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1451.654511][ T8108] bond66 (unregistering): Released all slaves 07:03:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb1, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1451.772566][ T8122] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1452.207903][ T8475] __nla_validate_parse: 7 callbacks suppressed [ 1452.207915][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1452.289070][ T8475] device bond65 entered promiscuous mode [ 1452.307376][ T8477] bond65 (unregistering): Released all slaves [ 1452.412083][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1452.436664][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1452.471308][ T8477] device bond65 entered promiscuous mode [ 1452.486578][ T8477] bond65 (unregistering): Released all slaves 07:03:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb2, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xa00}}, 0x20}}, 0x0) 07:03:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6558, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000000)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000004440)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004340)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=""/211, 0xd3}, 0x2}, {{&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)=""/226, 0xe2}, {&(0x7f0000000200)=""/34, 0x22}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f00000007c0)=""/147, 0x93}, {&(0x7f0000000880)=""/113, 0x71}, {&(0x7f0000000900)=""/85, 0x55}], 0x9, &(0x7f0000000a40)=""/186, 0xba}, 0x1b7f197f}, {{&(0x7f0000000b00)=@tipc=@id, 0x80, &(0x7f0000002e00)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/242, 0xf2}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/66, 0x42}], 0x5, &(0x7f0000002e80)=""/68, 0x44}, 0x9}, {{&(0x7f0000002f00)=@qipcrtr, 0x80, &(0x7f0000004240)=[{&(0x7f0000002f80)=""/192, 0xc0}, {&(0x7f0000003040)}, {&(0x7f0000003080)=""/69, 0x45}, {&(0x7f0000003100)=""/16, 0x10}, {&(0x7f0000003140)=""/217, 0xd9}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x6, &(0x7f00000042c0)=""/109, 0x6d}, 0x166}], 0x4, 0x41, &(0x7f0000004480)={r4, r5+60000000}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000044c0)=0x20000, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1452.520978][ T8231] bond6: (slave bridge5): failed to get link speed/duplex 07:03:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1452.630896][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1452.643447][ T8631] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1452.710323][ T8631] device bond73 entered promiscuous mode [ 1452.723664][ T8655] bond73 (unregistering): Released all slaves 07:03:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb3, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1452.864997][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1452.999258][ T8656] device bond66 entered promiscuous mode [ 1453.013026][ T8678] bond66 (unregistering): Released all slaves 07:03:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb4, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xa, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1453.114250][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1453.183547][ T8677] device bond65 entered promiscuous mode [ 1453.199769][ T8711] bond65 (unregistering): Released all slaves 07:03:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb5, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb6, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb7, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb8, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1453.821892][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1453.850784][ T8655] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1453.881204][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xc00}}, 0x20}}, 0x0) 07:03:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xb9, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6800, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1453.933798][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1454.044731][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1454.140403][ T8882] device bond66 entered promiscuous mode [ 1454.147495][ T8886] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1454.177132][ T8886] device bond73 entered promiscuous mode [ 1454.189903][ T8888] bond66 (unregistering): Released all slaves [ 1454.237800][ T8915] bond73 (unregistering): Released all slaves [ 1454.301391][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1454.349064][ T8888] device bond66 entered promiscuous mode [ 1454.358808][ T8915] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1454.384605][ T8915] device bond73 entered promiscuous mode 07:03:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xa00}}, 0x20}}, 0x0) 07:03:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xba, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xe00}}, 0x20}}, 0x0) 07:03:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6c00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1454.401568][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:03:53 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)=ANY=[@ANYBLOB="44000101", @ANYRES16=r3, @ANYBLOB="010000000000000000002c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x41200}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x110, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7d48}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xad6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x200}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xfffffd02, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0xffffffff}}, {{@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x6}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r8, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x6900a001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x40010) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r4, &(0x7f00000005c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x1c, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote, {[@rr={0x7, 0x1f, 0xca, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @rand_addr=0x64010102, @loopback]}, @cipso={0x86, 0x8, 0x0, [{0x7, 0x2}]}, @noop, @timestamp_addr={0x44, 0x34, 0x46, 0x1, 0x8, [{@remote, 0x8}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x5}, {@empty}, {@local, 0x2}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x401}}}}, 0x8e) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb34}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3a}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x890) [ 1454.511391][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1454.563673][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xbb, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1454.649459][ T9108] device bond65 entered promiscuous mode [ 1454.679136][ T9109] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1454.778654][ T9109] device bond74 entered promiscuous mode [ 1454.789205][ T9106] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:03:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xbc, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1454.856555][ T9106] device bond8 entered promiscuous mode [ 1454.887399][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xbd, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1455.012224][ T9107] device bond67 entered promiscuous mode [ 1455.020346][ T9118] bond65 (unregistering): Released all slaves [ 1455.084331][ T9145] bond8 (unregistering): Released all slaves 07:03:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xbe, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1455.165030][ T9146] bond74 (unregistering): Released all slaves [ 1455.264038][ T9148] bond67 (unregistering): Released all slaves [ 1455.342089][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xbf, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xa00}}, 0x20}}, 0x0) 07:03:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc0, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc1, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1455.721198][ T9146] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1455.745245][ T9407] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:03:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x3f00}}, 0x20}}, 0x0) 07:03:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7400, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1455.851694][ T9407] device bond8 entered promiscuous mode [ 1455.875111][ T9410] bond8 (unregistering): Released all slaves [ 1456.063875][ T9469] device bond67 entered promiscuous mode [ 1456.198250][ T9489] device bond65 entered promiscuous mode [ 1456.217603][ T9488] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1456.311983][ T9488] device bond74 entered promiscuous mode [ 1456.341560][ T9490] bond67 (unregistering): Released all slaves [ 1456.365409][ T9522] bond65 (unregistering): Released all slaves [ 1456.415186][ T9523] bond74 (unregistering): Released all slaves 07:03:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000426095860ffd7a20562fef8d22948bc4d2f867635f9d0ae5701860b766afb025b72e9d596d23b9dab0414b83306843caeab93f1aea560b00000000780000", @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001700", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r7, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x710, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r9}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0xb24, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x24cb85c2a4a23064) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:03:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc2, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xa00}}, 0x20}}, 0x0) [ 1456.557367][ T9522] device bond65 entered promiscuous mode 07:03:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1456.616914][ T9724] bond65 (unregistering): Released all slaves 07:03:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc3, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1456.717460][ T9488] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1456.753463][ T9740] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:03:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x5865}}, 0x20}}, 0x0) [ 1456.842436][ T9740] device bond8 entered promiscuous mode [ 1456.863788][ T9747] bond8 (unregistering): Released all slaves 07:03:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc4, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1457.017556][ T9783] device bond67 entered promiscuous mode 07:03:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x9000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1457.166048][ T9789] bond67 (unregistering): Released all slaves 07:03:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc5, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1457.257540][ T9860] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1457.319329][ T9860] device bond74 entered promiscuous mode [ 1457.335961][ T9891] bond74 (unregistering): Released all slaves 07:03:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc6, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xc00}}, 0x20}}, 0x0) 07:03:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc7, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1457.818292][ T9899] __nla_validate_parse: 9 callbacks suppressed [ 1457.818305][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1457.858565][ T9899] device bond65 entered promiscuous mode [ 1457.866976][ T9926] bond65 (unregistering): Released all slaves [ 1457.887857][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1457.907264][T10010] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1457.957696][T10010] device bond8 entered promiscuous mode [ 1457.967595][T10014] bond8 (unregistering): Released all slaves [ 1458.029522][T10017] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1458.046525][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1458.149241][T10141] device bond65 entered promiscuous mode [ 1458.172467][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1458.187826][ T9926] bond65 (unregistering): Released all slaves 07:03:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r2, 0xffffffffffffffff, 0x13}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r3}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:03:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc8, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1458.470963][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:03:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x6000}}, 0x20}}, 0x0) 07:03:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7c08, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xa000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1458.580958][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1458.596437][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xc9, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1458.664554][T10237] device bond67 entered promiscuous mode [ 1458.695823][T10240] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1458.794806][T10240] device bond74 entered promiscuous mode [ 1458.801531][T10238] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1458.853123][T10238] device bond8 entered promiscuous mode [ 1458.861319][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xca, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1458.946255][T10239] device bond65 entered promiscuous mode [ 1458.988478][T10256] bond67 (unregistering): Released all slaves 07:03:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xcb, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1459.046825][T10264] bond8 (unregistering): Released all slaves [ 1459.124953][T10269] bond74 (unregistering): Released all slaves 07:03:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xcc, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1459.204463][T10274] bond65 (unregistering): Released all slaves [ 1459.325723][T10269] device bond74 entered promiscuous mode [ 1459.343572][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x443, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1459.384892][T10256] device bond67 entered promiscuous mode 07:03:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xcd, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1459.727958][T10566] bond67 (unregistering): Released all slaves [ 1459.803129][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1459.828752][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1459.899023][T10607] device bond8 entered promiscuous mode [ 1459.907438][T10611] bond8 (unregistering): Released all slaves [ 1459.951548][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:03:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'ip6gre0\x00', 0x4000}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0xcb19b65d6e9d5789}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:03:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x6558}}, 0x20}}, 0x0) 07:03:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xce, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:03:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xb000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8100, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:03:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r2, 0xffffffffffffffff, 0x13}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r3}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1460.061070][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1460.097900][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xcf, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1460.173872][T10721] device bond67 entered promiscuous mode [ 1460.180210][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:03:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd0, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1460.312827][T10722] device bond65 entered promiscuous mode [ 1460.436512][T10724] device bond75 entered promiscuous mode [ 1460.454890][T10733] bond65 (unregistering): Released all slaves 07:04:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd1, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1460.548842][T10734] bond67 (unregistering): Released all slaves 07:04:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd2, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1460.632248][T10748] bond75 (unregistering): Released all slaves 07:04:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd3, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd4, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd5, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1461.361043][T10959] validate_nla: 2 callbacks suppressed [ 1461.361055][T10959] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x8100}}, 0x20}}, 0x0) 07:04:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd6, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1461.431889][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:04:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, 0x0, 0x0) pipe(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/474], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe80, 0x0, &(0x7f00000000c0)="c99bb37b2400deffff4048da86dd", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket(0x0, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xc6, 0x3, 0x40, 0x2, 0x80, 0x80, 0x1d, 0x0, r5}, {0xdbd4, 0x392d, 0x7, 0x2, 0x0, 0x5}, {0xbc15, 0xff, 0xf443, 0x10001}, 0x0, 0x6e6bbc, 0x2, 0x1, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0xff}, 0xa, @in=@private=0xa010101, 0x3504, 0x4, 0x1, 0x36, 0x2, 0x5, 0xe3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r4, r5}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x3, 0x0, 0x5}, 0x7, 0x0, 0x2, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e21, 0x1ff, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x33, 0x0, r5}, {0x9, 0x4, 0x100000000, 0x777, 0x6bc, 0x1f, 0x2, 0x45}, {0x80000000, 0xbd6, 0x100000001, 0x4525}, 0x2, 0x6e6bb9, 0x0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in6=@ipv4={[], [], @loopback}, 0x3507, 0x2, 0x0, 0x3e, 0x7, 0x4, 0x7}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x22008800) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000020000000000064e02000000000009238ed83254f9c9f0b66c6d78ac141400200000000d009078001b00002c0000000000000000000000000000a265115be9c6d4738196cdd2dd033ce387a835f130c149d66f6927986ee8249191cfdd7f51370005a84823d19ff9bb6703f843a66240dfc8d3331833430b1d36e21adcb315affe4e6668091fbb2872c0aa826d000200005d4a12529d40cb724ad9c65898331435f1ba19ff376c1d6da39628a71d5878f190ff510999bf3343c8f370d4ac8839a1c4d5d1a8409202692eea1d072d356133eb07616c2946ec3ccc36b96c"], 0x100c) [ 1461.551117][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:04:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd7, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1461.718282][T10985] device bond65 entered promiscuous mode [ 1461.767186][T10986] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1461.827404][T10986] device bond75 entered promiscuous mode [ 1461.923441][T10994] device bond67 entered promiscuous mode 07:04:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd8, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1461.965124][T11002] bond65 (unregistering): Released all slaves [ 1461.999244][T11003] bond75 (unregistering): Released all slaves [ 1462.041871][T11017] bond67 (unregistering): Released all slaves [ 1462.132528][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1462.187277][T11002] device bond65 entered promiscuous mode 07:04:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xd9, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xd000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xda, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xdb, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xdc, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xf000}}, 0x20}}, 0x0) [ 1462.794693][T11203] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x20000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1462.866226][T11244] device bond66 entered promiscuous mode [ 1462.903953][T11247] bond66 (unregistering): Released all slaves 07:04:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xdd, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1462.961227][ T143] bond6: (slave bridge5): failed to get link speed/duplex [ 1462.997784][T11247] __nla_validate_parse: 7 callbacks suppressed 07:04:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1462.997793][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1463.150663][T11247] device bond66 entered promiscuous mode [ 1463.182065][T11330] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xde, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xdf, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1463.284416][T11330] device bond75 entered promiscuous mode [ 1463.314422][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1463.414996][T11332] device bond67 entered promiscuous mode [ 1463.452068][T11333] bond75 (unregistering): Released all slaves 07:04:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe0, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1463.586743][T11363] bond67 (unregistering): Released all slaves [ 1463.685161][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe1, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1463.846663][T11337] device bond8 entered promiscuous mode [ 1463.904660][T11375] bond8 (unregistering): Released all slaves [ 1464.024008][T11550] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1464.054165][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:04:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe2, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1464.179871][T11551] device bond67 entered promiscuous mode [ 1464.186475][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1464.210668][T11560] bond67 (unregistering): Released all slaves 07:04:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x40000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1464.291104][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:04:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x20000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1464.339577][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:04:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xf0ffff}}, 0x20}}, 0x0) 07:04:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe3, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1464.427323][T11560] device bond67 entered promiscuous mode 07:04:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1464.478913][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe4, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1464.612565][T11708] device bond67 entered promiscuous mode [ 1464.618998][T11712] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe5, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1464.758755][T11712] device bond75 entered promiscuous mode [ 1464.791171][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1464.869009][T11714] device bond8 entered promiscuous mode [ 1464.910202][T11713] bond67 (unregistering): Released all slaves 07:04:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe6, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1465.046037][T11728] bond75 (unregistering): Released all slaves [ 1465.107531][T11738] bond8 (unregistering): Released all slaves [ 1465.169241][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:04:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe7, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1465.275608][T11742] device bond68 entered promiscuous mode [ 1465.339055][T11756] bond68 (unregistering): Released all slaves 07:04:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe8, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, 0x0, 0x0) pipe(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/474], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe80, 0x0, &(0x7f00000000c0)="c99bb37b2400deffff4048da86dd", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket(0x0, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xc6, 0x3, 0x40, 0x2, 0x80, 0x80, 0x1d, 0x0, r5}, {0xdbd4, 0x392d, 0x7, 0x2, 0x0, 0x5}, {0xbc15, 0xff, 0xf443, 0x10001}, 0x0, 0x6e6bbc, 0x2, 0x1, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0xff}, 0xa, @in=@private=0xa010101, 0x3504, 0x4, 0x1, 0x36, 0x2, 0x5, 0xe3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r4, r5}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x3, 0x0, 0x5}, 0x7, 0x0, 0x2, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e21, 0x1ff, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x33, 0x0, r5}, {0x9, 0x4, 0x100000000, 0x777, 0x6bc, 0x1f, 0x2, 0x45}, {0x80000000, 0xbd6, 0x100000001, 0x4525}, 0x2, 0x6e6bb9, 0x0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in6=@ipv4={[], [], @loopback}, 0x3507, 0x2, 0x0, 0x3e, 0x7, 0x4, 0x7}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x22008800) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000020000000000064e02000000000009238ed83254f9c9f0b66c6d78ac141400200000000d009078001b00002c0000000000000000000000000000a265115be9c6d4738196cdd2dd033ce387a835f130c149d66f6927986ee8249191cfdd7f51370005a84823d19ff9bb6703f843a66240dfc8d3331833430b1d36e21adcb315affe4e6668091fbb2872c0aa826d000200005d4a12529d40cb724ad9c65898331435f1ba19ff376c1d6da39628a71d5878f190ff510999bf3343c8f370d4ac8839a1c4d5d1a8409202692eea1d072d356133eb07616c2946ec3ccc36b96c"], 0x100c) [ 1465.455835][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1465.497799][T11712] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x1000000}}, 0x20}}, 0x0) 07:04:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0ffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1465.541009][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:04:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x10000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xe9, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1465.691032][ T143] bond6: (slave bridge5): failed to get link speed/duplex 07:04:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xea, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1465.859063][T12024] device bond67 entered promiscuous mode [ 1465.968642][T12026] device bond68 entered promiscuous mode 07:04:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xeb, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1466.030417][T12027] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1466.162834][T12027] device bond75 entered promiscuous mode [ 1466.216496][T12037] bond67 (unregistering): Released all slaves 07:04:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xec, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xed, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xee, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1466.752011][T12060] bond75 (unregistering): Released all slaves 07:04:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xef, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1466.823058][T12177] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x20000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1466.888451][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:04:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x3, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x2000000}}, 0x20}}, 0x0) 07:04:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x1000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = socket(0x10, 0xa, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x5, 0x3}) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x2, 0x8) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x8100}, @void, @ipv6=@tcp={0x6, 0x6, "b51c28", 0xd0, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[@routing={0x1d, 0xa, 0x0, 0x20, 0x0, [@mcast1, @ipv4={[], [], @multicast1}, @private1={0xfc, 0x1, [], 0x1}, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], {{0x4e21, 0x4e24, r6, r7, 0x1, 0x0, 0x6, 0x8, 0x8bc, 0x0, 0x0, {[@eol]}}, {"b3931df9247432fd074a39e89444c538533e696a6bc7f0f1421c49959c4a0936045b0be1e2b67a954a3d5dd67f43de44c82b6132d8c199bb8ceb9001fc2964766bc91fdc09acfdbb10ff57e71b8de3c74be4b1ce5e3cdbf33d369d3137753fc0"}}}}}, 0xfc) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="0000008080009b2f98f8b993b307489c0dd4781dd272f5426d4003a18194b0f8079148b3b9bd0d2e1cf8b9f17cbd73de000060f49d67d1820ec2f32e55ffd5d0f448667f003bb52e5edbe8d0adbecd4e3c2b97aeae3175cbdf8f339bb4b3f2787cdeedd380b7cb6875087318e9bf39af3cda5383e44667ef6a24b07a9ee28d5baef0211916600609d38ec2"]) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x7, 0x10}, &(0x7f0000000440)=0xc) [ 1467.010994][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:04:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf0, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1467.155577][T12233] device bond69 entered promiscuous mode 07:04:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf1, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1467.288101][T12244] device bond67 entered promiscuous mode [ 1467.337974][T12255] bond69 (unregistering): Released all slaves 07:04:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf2, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1467.417037][T12257] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1467.516119][T12257] device bond75 entered promiscuous mode [ 1467.571618][T12273] bond67 (unregistering): Released all slaves 07:04:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf3, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1467.691925][T12274] bond75 (unregistering): Released all slaves 07:04:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf4, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x2c, 0x31, 0x727, 0x0, 0x0, {}, [{0x18, 0x1, [@m_ct={0x14, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4}, {0x4}}}]}]}, 0x2c}}, 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/77, 0x4d}], 0x3, &(0x7f0000001340)=""/205, 0xcd}, 0x40012002) 07:04:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf5, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1468.186110][T12255] __nla_validate_parse: 7 callbacks suppressed [ 1468.186121][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1468.210199][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1468.231423][T12463] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2fa98fe9, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf6, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x4000000}}, 0x20}}, 0x0) 07:04:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1468.300699][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1468.386211][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1468.466629][T12485] device bond69 entered promiscuous mode [ 1468.479876][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1468.516111][T12488] device bond67 entered promiscuous mode [ 1468.522246][T12489] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1468.566903][T12489] device bond75 entered promiscuous mode [ 1468.575556][T12490] bond69 (unregistering): Released all slaves [ 1468.610060][T12524] bond67 (unregistering): Released all slaves [ 1468.694035][T12525] bond75 (unregistering): Released all slaves [ 1468.761893][ T8231] bond6: (slave bridge5): failed to get link speed/duplex [ 1468.769079][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1468.819144][T12524] device bond67 entered promiscuous mode [ 1468.831023][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1468.897812][T12490] device bond69 entered promiscuous mode [ 1468.981840][T12715] bond67 (unregistering): Released all slaves [ 1469.037034][T12735] bond69 (unregistering): Released all slaves 07:04:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x20000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf7, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r4, 0x1, 0x0, 0x0, {0x2c}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x200, 0x80000001, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10080) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000001000804600100202000000006c9078ac141400ac1414ce0d00907800"/50], 0x100c) 07:04:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x6000000}}, 0x20}}, 0x0) [ 1469.078987][T12525] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1469.101247][ T26] bond6: (slave bridge5): failed to get link speed/duplex 07:04:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3f000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1469.209226][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf8, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1469.306748][T12842] device bond8 entered promiscuous mode [ 1469.338662][T12847] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xf9, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1469.448953][T12847] device bond75 entered promiscuous mode [ 1469.465065][T12849] bond8 (unregistering): Released all slaves [ 1469.558970][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfa, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1469.668903][T12870] device bond67 entered promiscuous mode [ 1469.700671][T12884] bond75 (unregistering): Released all slaves 07:04:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfb, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1469.812528][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1469.874318][T12875] device bond69 entered promiscuous mode [ 1469.883161][T12891] bond67 (unregistering): Released all slaves [ 1469.903257][T12896] bond69 (unregistering): Released all slaves 07:04:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfc, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfb, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfd, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x100000400000003a) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="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", 0x87f}], 0x1}}], 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x4e22, @loopback}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x4ff60, 0x0) [ 1470.390670][T12884] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1470.417300][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1470.461101][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1470.682234][ T143] bond6: (slave bridge5): failed to get link speed/duplex 07:04:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$alg(r0, &(0x7f00000034c0)=[{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000300)="36fe0caceec81d682323cebe278fce25d74a7054398b1b830fcc869b55a53a021f6e826cded8a54ac653c6a115058b96fc457e13c07b3651141b66625932e29d74fc03272088caff3534c37a0c0a3708edf8b2db798e65ee1a7253096225e75cc469aa315ec8b4ee6046c851cfe09599250a2d33669da78cc6126df0d45ee9886fbc7911e421f39e7d7bd154116230aa78da", 0x92}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="e3ac88ac8181aeadba734603ea62eeda800a8c0165fdb3776c9cbb7a3d23ef444722e4bb3acf543ae2f3c88c91e2637d75ea9618b0adc0306e686bc01f323fd98970afb3dfcf7678b1a9ca73308db61b8108177979bad81cb0ba5d9f5d4f1e6580a694b84561eab4caa1084369655bf0db36b7a76d13214c39f9a6ed0561069e4694040ad796b609623de95dde52ef08eeed9ad357e2414a0b8cf3c6cfc694645b83a342feb898035fc534fdf59314a375abb66b3f1940f028d3d84487bc328ad582015dcbb5f6af9fc8185fc73de1d18b87984436b013828efb5d5d07da1db93e8692e46c6469b8f531c7795173b364fbf8e737d46d078f601eb8d79248d547ec9ae9633801194e3714f01daa5ea20af28a23fcdcd4d64cb0792758317818cd000a9bb402cb3f088d3f148e9b2bc0efe9ab4a43ae9f5922855eb4655c26a2c697dfd2c696f25a7647c8f4549031676f932a099fdf96ddacaab6d8a6692bd5252c41e6b56f87ced7ce07022c383c84069719429ed303760d956fdc80bdec23a2ac4fd0cee4fba35589b6fbe64fc2199f36259665b11525c87b71161405a04c34ecc75b720e359a6fb4ce0d0557606b88b69d2d6cfe52ee922f36c48b39bd9f41713a05ec169b71754fb4ea08d892a2dc5789d541adbada431fc1f74981578266c6914fc7901d33809bae4ab4065e1617cec837e8bc32133efc2d6d9486d9667746f2f40779c65f91e524feb301744644f23594d87ed7ef83af91d26eb154a7c138f8afc01f70018a686187bfe909da5ae492aa397f684ca87f2e1ff66c6f1a8825f7a156283f1d5e1eb4818057f3da6a4879f32ad966c579fd8fe68593235a4a1c1bd78a208e44981ff0b9c20858065530b9434bb223fe3a748a823f4f2781cb287bd47c6d283e59005efb6e63206a998c4267807ba52c11bef4771b188e9ca210e5d87535288dd67146e447a1bbbccd3c0341d42de7524a2a116e6a5475c6eb2f4a5672cee807b93337792df095ae7a7829e273ff38e7aa6ef5a1ef6ade31e8705c94acd864c33d80081ed59b705f70546065a7a9d1673e0c8e741a7a9bc2729b710a36a154357303302b62279b7cdc22fc5e3421b9b78764bd68867034fe1cc6f493608d74878f4cc7f199ac92263349d03de57032f38f85c6be8f9907c319e07677169ee92141da47a8716a20d315810d2e75c430ce7e7cd68c14c92c3ac60532dd2b2bf3b4fc8deeac91e3352e4dd53f18b35ff6daf4114649ea3a21260660cb6d4517f22b8c7988181d6b0f166b7672bf831bc64ac3b7b5c3589405e602785f08fd73d51b74dab249074c80fe2fcd1a85b80c13d5388c49ec4e7377e0e80f22b9b05cfbbe20522c3ea7a7d97b5d0471e8297644f59c280fb8371a14375ac948f7c76ea38d71606adcf1b2837e670e07c146c2fd2c3eae971c2375e7a44c38b0d373dc43411c0c1a94cb7ae5237910c8de08898fe665aac8bc6420c6ddee1727e974d0922e073b4ec64119121156a59c36411a68b7a650431072f12ef8ecc49898cd03a3b38f3ed07ac5edb01e92e1175f3349b1271d6f47db2e4ad19719077514a73c23c1b4a27a898e8910702dfc990a5c031b77648e5f5d5de58bf7664684ff372460814356990533f4157c0a990b04edae639babbb987f858d85983c6217c8e7c23924687839361a4c6f702f7c6b89e264384e1903c037dc2ba7ca1a4ba4a5a54650abf429460cf5a67acd10a1526e6cd45b3632abd56c8dce29a4a3d8d9ed5652b49df6fa237d1b5785aec49c31c9726c9bb54c66d885f5804e268f4ce67cf66f4fd49d8493dfbede31b4e14f7a84005a2e8e6b2e7b84e84041d152c3663bacf19048199c23f5adf9ce415517f99ae9acb83c9cfddd3e30204afb81b239490fa5dda538ae6e18ace3519f4d4c293f419f6be2c01db2eaf560b022ba04ec4e00887f252b4d9aaa03c9c6adb91665aa3660f4ab25710b01fac3872c36228ffa98d08aabc32b7ff90af00bbe4137836a706a18f0070914299e3ab82e5c811021a2d6cfa575f2630aeaa5609b1a49908d8c1791b7a13f054dff47863575625a97b5d61934dc08b0511b1259f4a05a6458049c2145bd3a72314717cc802edb0f97865effe7afbbc4f3d79ce5941b16975d091d9c7855abbe7c12203e872623a52e3c47880f8ffeafdfd1757e7ef3a9d19f880a448861e771e15336be1ac404082be1fc184fe0976c222cc2bc9ed5c4ac90b1f1e62c7029555b10c131280b9d0ec1098c3a299d07d9cef0b39eb10989747f0b0cd11c53d0cb928e93889dd8fd1f9d1c85e087efdab17d65db84293283e2f4d7906ee4cff30affcacaa6b5c5e1ffda7ac98ffbe774384d1a0dd4ded2d358d014008830fc073cf2eb38e9f883d9d0516d131da72ed884da174e594b0f74e1446b54feec14bcce9254bc3d7aa3905d38c9b0d8455a1cc993d70fb7b4320f6db69bd14d7dc23c650e37a70ac03a24599b7d651e649b5640a6255c93d71a39e0fc46e9f9aba2483b49805d3521f733df7f1f434205f08ee2d9c881916e0492ad88927596a11350368c0b784099c9984f77e6d9b538b1a7f36788cd04cebc167374ff3c324bfbb603f9f155675f77afb102e2658edd2794a770b3966ff6c53c66802ea4428690768cce4e3eda2efdf0056bee5ae16fa1e7b08a70c04869ec528220f74b134bb56a5f9abea7acd7ed99be8fe667d98881f3e9b7f9980bfcccbf7be88632062cf9c4b2686d640856910b1c6776f2a6c1df6a1fe8d53cd83645ad1811f0d8f5ddc5e0c3793bc871134ffbc2e1ccea79293aaf67d15b1b6af690083a9498bd5bfeb7661dc3565f3ceed6c1090587257c11a842366ffe43654bf8be8ec9069656256db07fdfe0de8aef592b5a83d3158f6f9d065225efe0f84f6a87c06c97b1fae344f5dce2204fb706d15e2a625eabaa72a9c4a1529f656de0f32df05414071e727324d83a7e544e32aaccaef9d3ff23e206bfa9db96d6ea82760f0cbb1f7fdee389e611b991f21e96196a6ba3c8b6b4d18540565e43cdbdcdd8cf908e7533e2425612c803c02fda0d6ef57d631c0f9bf4e2218c8b5c7a45829b9a2a6f80cd944ab1d64efa792bc11699db808575c15ca433d393a21c0c1512df068b2774480efa92abfdae7c5ed9b033654a3497d060e4b7765e2855bff2a39732f09a723bcf491d44af329b02d02fd890e2b45d28b94272efb337d02a3d0ec12f921e0610567818e53521a8e73be924c810fcdd233e84fdf28a962e3a299a633a6fc5d8d102a32c6c98a7e12c5b9bdfc8bf8a1c70f755000d89b3f1d704e9163e15c534ac286daf0fd2d9f9a925a8044dc96eb9326bbac9b3cafe97122b686b8bc9f4e3cdaac62a42082938cbf8e1b6558e2cfe6184ce726bbfda3a22602228c7f3fd185e58c721bccc61d684678765274776672b6b94ea4a7950d1c5fe9723e16a7c9f4f5a96aae61a7ee1c3dabc314d9c0dd50faabcde58470190e9218653ff5caf29b748ec1ac0a1e1e1f63a1302e4717a8256b7afe142356d6ec5c7c602b6854180ab1b154f16111dcf0197df3c55c2d7014bc3503c06fba9cba7fe9dee537969e76354b3072558209bd980cf1ade970910add136e338cd0b5d801e81963dda00d5d3010365c06cc55f9f4e7896261c3cb052fb3c53933ef4c24b23eca4195d5848786eafbb1dd1df122ec6dbab20449cebb0bed1b0e57fd11c5ff41d669317d0041057d96a4892abdc21018493c60e9c0a723c47cc7d67f80a311b636977c126def945c9c44e4de029f2293181522a52a9c3d1028cc30e6bc643645ab4567b5b7e869edeb8c385f8a51ff7a863d2db3d7bc331615554c2b154cc4650cc3e09bc8cb3f334a2f012d8f3ae7f3bf1bea22565de88cd2c701ee5af9ec412e39373e7ad65980ec2aa46f69c49d235bc7f19a2511ba0fe37dca26d981584327967c542a4969574278a0174d48cbe98796ed9ee2b430888869ac8742db1ec60d5a6050c511fa763e1e0e64a69373151e6e17271d135b8b97ac4e9c1855143e5ab86c08e777f9b188003c5daf7937afb7c87cebb8102bbe19f6e55a10a503c880b3e3e4bac4129d7b6e50628b9584819e6778ff4f4429455ccf5dfc1e505bc65bf038ce66e0c1668b46425492465cdfb2c2901de96d64e46d64d023fb82edb3f7096185effd23081115e9d0715eceb69a87ec4358dea41679282c11c0ad18863332cc7be0b26895ca35e7dfb7c4daefda55a6a081e118265a062ca4cfb54d1a802e5bcbb84bea6aa8af9d1f569162529392a0adb1219f983583bfb17bb9ae0f61726fcb9f1acb14be5525a843172d2b68016749b524f5374cd6f8c915df5131197d61e03a5732f2248277ca96a67c4ee454620886208ce89a6174e541031fd33086c22f21ded4b07d08be1b9c31c307f3b6d5dc2da3ad0d71f7cac9081f531694ff5f1b51fd5b5c206f78ff17b8b1f5766a2474ff87e780c0f84f063a9d7d9df57c07765c8f545fa1538ba3e60337e528cdb403c3869486afcf258e8954851711489824a5705850a64a72d146e7e098760b433030ebda4e1669130b9660a0952fcbf4ec945e5c4acb0252d9e3d0c561c2942c8d131476e55d90b56882c98b018746781480164da46b4ee42f43f248552fb2c37657e55c0326e98659838ce71da80b5868861b0f8b146dd33a136b34343c9f264787c220e079fa703af5178c39ef489d2004f4583f564df487f40dd3105cf3afb83e12e405c92660d2b482e7aa782b82eceedfb169133ec0eea9de366b9b3210e740dbdeb82e473f87ace474faae700b002586faff86120f0811d3f8eabd828e31cf9275d3b5dce6bbca367ebf4fd6caf986e9fe25aedf6cf599bda29c0c0c932499a80aebfbefff94090a31929d94c6ab7bcd382c96dc1cc4f7c1044cef8e344034c12e62478b9493864ab0614c69effe04537945bc66cb9e912af24f0c98cb4430bda3a90a190e612a3fa71151fb62836de48af22baff557bedf993dd417645171e50aab194b62efa221b64f6e9138a3638afd6d2910b9f7b842437195945ea1473a3188a3408f93d72be16767090b06f9e057eb2651da280fcff7568f95f91f112d1ab24582e2c43d4118533eb8cf67f4187d8ca56645b77416d58b3d28c9341e7e77e6ecc2f03c9857ed97ee0b0da0020be09d1d43ff72aeca0fdd0c05b9b0251ace37d67eeb24e7731512681f62b888f2949a663d978d6246756303b1df412a13d2988713b4adf8a980e312ce3bb4f36e6887f4aa0b8bd5cc0235496370f44f28daba2451a524d45ae7993c3e99963d902d5ed1b08abc5c383026db70deef75ebd44a4dfb6d063c0ec8e7bb041f17d3851d450c85ccf4646224cfef05ff361a026b2ac1412e7eac43f6aa866c4c09c1ca45a0e59c1ca9c792ba2c4aa1c1699f4dc903d63c1c506858e7733d9a80e30f9374fc8b061a63749c8da40b93961e2b60c5b58bdbca5cf18ad17ead07aa89355ed185f129a226b685a64805f22f175d402ba4763bcfc9445b248d9685814f5f2e098c54c00d03a7cc8c1a270442957222ec6a878d8ee49a2af3ff25a935ceb48d5a1485caf6ef32ba83621607c7a0cb7d086dc0d7104c0059e0fd8e969ece20db7cf5d747f26e8c2f152c2523b57c80d22686df2431a8704ac6b0a55463968b3a2850dc2369b708dd35951bca706928a373e32bb87c44e2caf78ffd966a65d974017319aaf106c3deaac4e44e28b8cfde711934fc29c5fea5f4c254a5b17af3522f0206ee06263fa080d638b", 0x1000}, {&(0x7f0000000240)="af03c9d3c8a3f92f477f406863", 0xd}, {&(0x7f00000023c0)="d0883757aa1dabd7b5a97e41c08eeb1a0a34c7f05896744a31bbddfaf6e1703f2a662f1557123893c8ab8a59601692c7e3009eac1540954487cc504e94ea592a24abd44b52033780b97ccca11e536c88980a6bcccd463e42f8923f", 0x5b}, {&(0x7f0000002440)="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", 0x1000}], 0x6, 0x0, 0x0, 0x4000}], 0x1, 0x4000040) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000120020000020e77801000600010000000000c70d00002ce7000000000000040000000900"/56, @ANYRES32=r4, @ANYBLOB="0100040009000000070000000700000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x4040085}, 0x814) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000000000000004600100200000000006c9078ac141400ac1414b3c159460d00907800008eea174d3e1253dfab3f93e5723caacb32fd8f952350bf17"], 0x100c) 07:04:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x8000000}}, 0x20}}, 0x0) 07:04:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0xfe, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x40000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1470.791090][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1470.820082][T13181] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x102, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1470.888141][T13181] device bond75 entered promiscuous mode [ 1470.917750][T13180] device bond69 entered promiscuous mode [ 1470.960024][T13184] device bond67 entered promiscuous mode [ 1470.983096][T13207] bond75 (unregistering): Released all slaves 07:04:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x103, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1471.069218][T13213] bond69 (unregistering): Released all slaves [ 1471.156906][T13221] bond67 (unregistering): Released all slaves 07:04:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x104, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1471.229259][T13207] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x105, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1471.337436][T13207] device bond75 entered promiscuous mode 07:04:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x106, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x107, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1471.709923][T13429] device bond8 entered promiscuous mode [ 1471.751027][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1471.779240][T13444] bond8 (unregistering): Released all slaves [ 1471.863762][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:04:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x48000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x108, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xa000000}}, 0x20}}, 0x0) 07:04:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1472.151135][ T143] bond6: (slave bridge5): failed to get link speed/duplex 07:04:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4850}, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 1472.257114][T13541] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private, @remote}}}], 0x20}}], 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r4, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private, @remote}}}], 0x20}}], 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200420}, 0xc, &(0x7f0000002340)={&(0x7f0000001a00)={0x918, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x60}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xbd4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0xfffe, 0x81, 0xab, 0x6}, {0xaf6, 0x5, 0x1, 0x8}, {0x1, 0x0, 0x7f, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x824b}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x6, 0x8, 0xa7, 0x1}, {0x8001, 0xd0, 0x6, 0x6f}, {0x29, 0x5, 0x5, 0x1886}, {0x9, 0x40, 0x7, 0x8001}, {0x7, 0x3, 0x3, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x918}, 0x1, 0x0, 0x0, 0x40040001}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$packet_int(r8, 0x107, 0xe, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 07:04:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x109, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1472.350628][T13541] device bond76 entered promiscuous mode [ 1472.404800][T13543] device bond69 entered promiscuous mode 07:04:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1472.485451][T13546] device bond67 entered promiscuous mode [ 1472.516593][T13552] bond76 (unregistering): Released all slaves 07:04:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10b, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1472.659480][T13566] bond69 (unregistering): Released all slaves 07:04:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x32600) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x10000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x106, 0x5}, 0x0, 0x0, &(0x7f0000000600)={0x1, 0xe, 0xfcc, 0x20}, &(0x7f0000000280)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xfffbfffffffffffd}}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000004c0)=""/192, &(0x7f0000000580)=0xc0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x48e}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040010}, 0x40000) r5 = openat$cgroup_ro(r0, &(0x7f00000007c0)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) r6 = openat$cgroup_ro(r0, &(0x7f0000000740)='cgroup.stat\x00', 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000780)={[{0x2d, 'memory'}, {0x2d, 'rdma'}]}, 0xe) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x17) pwrite64(r5, &(0x7f0000000100)="c67043d40781fd58e1a336d9c28a15cb751920c06e90c0ae0fb51b2f488d5b2c4e4dbd6ec111a845b13da9fdbadc7cc4a95dfb30eda3727e6ad30331abf450047769cbeeb4dad14968cba2b6bc188fbef73421d6ff52c25f0faace408dbf7ad1ef4bae7a2b6d3576b678", 0x6a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x3fe00) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x131001, 0x0) 07:04:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10d, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1472.758709][T13575] bond67 (unregistering): Released all slaves [ 1472.863606][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1473.193388][T13566] __nla_validate_parse: 8 callbacks suppressed [ 1473.193399][T13566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1473.218911][T13552] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1473.243286][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xc000000}}, 0x20}}, 0x0) 07:04:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x48000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1473.342049][ T8231] bond6: (slave bridge5): failed to get link speed/duplex 07:04:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000886303c009bc2718496e6dc326ba83586302f0ef6ff984eaa719c7f7eee8c7d30ecf9c7f289a4bb392791bb49fc22cc286d568e5789e7ba7597455140fc4a621f65d2a0c1ed7d130b5330c2b203d87e318b2ebafa7ce3dfd0c3434a539e4d50823815c024dba7b029e7fdc3bdc84ccd12a3a8bb0846081e3d20a766d8e05fdd90158b6d11b3edfc12b99796af034c59c63a003d2debf49786c8ca2629a3377e66b61eed21654a0ae45b43ae4cc3f77f6509dd74c0d2bb9c6e84c1660609de8a9845781c82c319bea04a5c7ddd835921a092de2c84dbc2df2c5b3f37e44292c3f4189b7f520ccddf14d34751ab171f33163b017ccd6a7dac35db3aec5dd06d1a1"], 0x102) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1473.385538][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1473.449492][T13806] device bond69 entered promiscuous mode [ 1473.473100][T13806] bond69 (unregistering): Released all slaves 07:04:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x10f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1473.604073][T13844] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x110, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1473.695448][T13844] device bond76 entered promiscuous mode [ 1473.731261][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x111, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1473.829454][T13849] device bond8 entered promiscuous mode [ 1473.837354][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x112, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1473.927724][T13859] device bond67 entered promiscuous mode [ 1473.950308][T13860] bond76 (unregistering): Released all slaves [ 1474.047637][T13887] bond67 (unregistering): Released all slaves 07:04:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x113, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1474.126952][T13878] bond8 (unregistering): Released all slaves [ 1474.187821][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:04:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x114, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1474.350015][T14101] device bond69 entered promiscuous mode [ 1474.376981][T13860] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1474.683000][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1474.707636][T13829] bond69 (unregistering): Released all slaves [ 1474.772273][ T143] bond6: (slave bridge5): failed to get link speed/duplex 07:04:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x60000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x115, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x48000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xe000000}}, 0x20}}, 0x0) 07:04:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1474.900465][T14201] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1474.958814][T14201] device bond76 entered promiscuous mode [ 1474.975629][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1475.025401][T14200] device bond8 entered promiscuous mode [ 1475.031916][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1475.105824][T14203] device bond67 entered promiscuous mode [ 1475.132946][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1475.186992][T14221] device bond69 entered promiscuous mode [ 1475.217423][T14228] bond76 (unregistering): Released all slaves [ 1475.408401][T14239] bond8 (unregistering): Released all slaves [ 1475.437073][T14240] bond67 (unregistering): Released all slaves [ 1475.472831][T14241] bond69 (unregistering): Released all slaves [ 1475.537862][T14228] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1475.633944][T14228] device bond76 entered promiscuous mode [ 1475.649045][T14480] bond76 (unregistering): Released all slaves 07:04:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x116, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:15 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000180)={@any, 0x8000, 0x6889, 0x9, 0x8bf, 0xffff, "abb9039a8600947aaf90aa021c6aca63a1af8d70f2d519fbc193e157173b377307dc828297bb5ecc05cbeeca8811c7a411afb3c49ea0fd642012e18782a0702a7197501e662d369b806219303834f7bf50f87abfba53882188790b4f066d6599ef8c429e8ae90bfd92ec3f97bdf569b7261c1e30a09bfdfb50f8c0a9754b4d0b"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000100)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r3, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private, @remote}}}], 0x20}}], 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4, 0x1, 0xfffff2d1, {0x77359400}, {0x0, 0xea60}, {0x0, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "3b45ec73ccbe737f"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x14018) sendfile(r2, r1, &(0x7f0000000040), 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1475.725791][T14240] device bond67 entered promiscuous mode 07:04:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r4, 0x1, 0x0, 0x0, {0x2c}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x50, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000280)=0x5, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000000400)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x88, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x41}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0x60}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000010801020009080001400000000708000140ffff000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:04:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x117, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1475.810849][T14241] device bond69 entered promiscuous mode [ 1475.827290][T14549] bond67 (unregistering): Released all slaves [ 1475.895851][ T29] audit: type=1804 audit(1595315055.387:511): pid=14621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/2191/memory.events" dev="sda1" ino=16384 res=1 07:04:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x10000000}}, 0x20}}, 0x0) [ 1475.951253][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1475.980527][T14583] bond69 (unregistering): Released all slaves [ 1476.037584][ T29] audit: type=1800 audit(1595315055.417:512): pid=14621 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16384 res=0 07:04:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x118, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1476.113524][ T143] bond6: (slave bridge5): failed to get link speed/duplex [ 1476.142970][T14701] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1476.189042][ T29] audit: type=1804 audit(1595315055.417:513): pid=14621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/2191/memory.events" dev="sda1" ino=16384 res=1 [ 1476.289621][T14701] device bond76 entered promiscuous mode [ 1476.316202][ T29] audit: type=1804 audit(1595315055.557:514): pid=14671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/2191/memory.events" dev="sda1" ino=16384 res=1 [ 1476.342543][T14703] bond76 (unregistering): Released all slaves 07:04:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x65580000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x119, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1476.436093][T14742] device bond67 entered promiscuous mode [ 1476.478973][T14755] bond67 (unregistering): Released all slaves [ 1476.558306][T14812] device bond69 entered promiscuous mode [ 1476.635358][ T29] audit: type=1804 audit(1595315056.127:515): pid=14671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/2191/memory.events" dev="sda1" ino=16384 res=1 07:04:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x102) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1476.681568][ T29] audit: type=1804 audit(1595315056.127:516): pid=14881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/2191/memory.events" dev="sda1" ino=16384 res=1 07:04:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1476.812439][T14845] bond69 (unregistering): Released all slaves [ 1476.881253][T14703] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1476.976306][T14703] device bond76 entered promiscuous mode [ 1477.000412][T14922] bond76 (unregistering): Released all slaves 07:04:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11b, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x9000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1477.571086][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1477.631638][T15010] device bond67 entered promiscuous mode [ 1477.641801][T15014] bond67 (unregistering): Released all slaves 07:04:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000000)=""/13, &(0x7f00000000c0)=0xd) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}}}, 0x32) 07:04:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x68000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x3de8bab0}}, 0x20}}, 0x0) [ 1477.942225][T15014] device bond67 entered promiscuous mode [ 1477.951697][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:04:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2c, 0x800000003, 0x40) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="240000002c13270d00"/20, @ANYRES32=r2, @ANYBLOB='\x00'/12], 0x24}}, 0x0) 07:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xa000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1478.011116][T15134] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1478.115085][T15134] device bond76 entered promiscuous mode [ 1478.255785][T15133] device bond69 entered promiscuous mode 07:04:17 executing program 3: r0 = socket$inet6(0xa, 0xa, 0x9) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r2}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0xffffffff}}, 0x5c7, 0x5}, 0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r2, 0x1000, "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"}, &(0x7f0000000240)=0x1008) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f00000000c0), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000000000000000000000000000fc00ff0006571317f62eabad01b3e3d5818fd5b03e5d5b2994484eb86318944b094ffb5fc1e9b6a95e3b4589931997a9503947ae999d9483c1d4369c5fe9dbf163d703dcabc630bb65d427c347d88904fba8f83b4d7b0c41ec5cb64d2c64ef4cd02a48c5d763c04c7e57b153eec653aea457e035595509729e09887636cd38341c86acfea002657bb4246163fab8f267b1a4fbdd923cdccbba780e43c4410d13c45a6881"], 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0x1f) sendmmsg$alg(r5, &(0x7f0000003240), 0x492492492492619, 0x0) [ 1478.329271][T15138] bond76 (unregistering): Released all slaves 07:04:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x11f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1478.446710][T15141] bond69 (unregistering): Released all slaves [ 1478.529637][T15178] __nla_validate_parse: 11 callbacks suppressed [ 1478.529648][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x120, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x121, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1478.664493][T15178] device bond68 entered promiscuous mode [ 1478.684999][T15204] bond68 (unregistering): Released all slaves 07:04:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x122, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1478.830751][T15134] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1478.869097][T15134] device bond76 entered promiscuous mode [ 1478.891555][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1479.131409][T15391] bond76 (unregistering): Released all slaves [ 1479.159887][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1479.211410][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:04:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @void, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x28) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$ax25(r2, &(0x7f0000000000)=""/37, 0x25, 0x2040, &(0x7f00000000c0)={{0x3, @bcast, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2710, @host}, 0x10) 07:04:18 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6cb4772061b9f8ff0000000000000027a59f0f9fe0bf010ad7fa7e5542c692928161cdc3f436e331d788077b50e6af67b86f1c20c8cc92ff2fca0656473757ba19ccd87cb6b41107851c71c78d988e883bb8a162982b6aa1ec782d17fe0e690de342b1b604d7cad37a8d87160359ed1ac99e0d13789909953644fe3b3706ecfb24dbf3b7350c0a322602ce6f59d84e1023fc968c12b59f950c06c68e3358ca85991ad4b43cdef9", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf25100000000400028024000180060002000c00000008000b0073697000070006006e71000008000b00736970000800041b020000000400028004000180080004000000000088a7d0e8eeb6cdcf63fa41f5b41b1bf4c8f81e941501165f3b52869ef8c158e1402c72d6af6b8a30f66c63e006132d4af7d5acb926d130f762778832cbc4a75eed6e"], 0x54}, 0x1, 0x0, 0x0, 0x24000084}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f7ffff48e30000000021b880d26dc26b97bafff1bb373bdd000000000000000303fe1c09863121f9c4569e41e8a4dfeb17fde4aa6d6b08bea4907f", @ANYRESDEC=0x0, @ANYRESHEX=r6], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 07:04:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x123, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6c000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xb000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x3f000000}}, 0x20}}, 0x0) [ 1479.321115][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1479.343320][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1479.411984][T15468] device bond68 entered promiscuous mode [ 1479.418749][T15473] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x124, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1479.473404][ T29] audit: type=1804 audit(1595315058.967:517): pid=15470 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/2195/memory.events" dev="sda1" ino=16379 res=1 07:04:19 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x207}, 0x20) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000020001280080001007369740007000225d45abc00", @ANYRES32=0x0, @ANYBLOB="08000300e0000001"], 0x40}}, 0x0) [ 1479.631878][ T29] audit: type=1800 audit(1595315058.967:518): pid=15470 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16379 res=0 [ 1479.667048][T15473] device bond76 entered promiscuous mode [ 1479.684673][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1479.698967][ T29] audit: type=1804 audit(1595315059.027:519): pid=15514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir126679881/syzkaller.rxCGDh/2195/memory.events" dev="sda1" ino=16379 res=1 07:04:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x125, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1479.805027][T15472] device bond69 entered promiscuous mode [ 1479.841688][T15493] bond68 (unregistering): Released all slaves [ 1479.888022][T15513] bond76 (unregistering): Released all slaves 07:04:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x126, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1479.968493][T15516] bond69 (unregistering): Released all slaves 07:04:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x127, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1480.083522][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x128, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1480.421215][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1480.450005][T15513] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1480.472347][ T370] bond6: (slave bridge5): failed to get link speed/duplex [ 1480.481111][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:04:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x129, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x60000000}}, 0x20}}, 0x0) 07:04:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x74000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1480.581235][ T143] bond6: (slave bridge5): failed to get link speed/duplex 07:04:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) r3 = accept4(r1, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f0000000200)=0x80, 0x40000) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="9f820000000000000000000c0007800500020000000000000000a69c76"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa3ae628eb8349162}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0104f93ccae4178f51c235feef63116e0d5c4241", @ANYRES16=r7, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x40020}, 0x48040) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="45000000e55590c336f21945f650239ccc109c8b153cf408b05ab92acde6f724b600dc85fff6ed07842b762921950536d982664f6501c2b718cf6a91368982582c5f36ab160174f99425c6e7e502f4a5f1b10c748981527363279ca3e0e03c8222cb53da9a9bc19f8dde4477b4a53fb00021dc36626dc3063ebfe75364f2cc4cc0a2655034c1", @ANYRES16=r5, @ANYBLOB="000229bd7000fddbdf250500000014000200fe8000000000000000000000000000bb0500010001000000080005006401010214000300fe80000000000000000000000000003d"], 0x4c}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1480.677476][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1480.727940][T15738] device bond68 entered promiscuous mode [ 1480.734184][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1480.744759][T15735] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x12a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1480.857621][T15735] device bond76 entered promiscuous mode 07:04:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x12b, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:20 executing program 3: unshare(0x40000000) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000300)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x78, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x10, 0x6, 0x1, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00000010005fba00000000000000000000a0d6", @ANYRES32=0x0, @ANYBLOB="000dfcaa2c0abf3398ec00000000000000001980"], 0x2c}}, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000440)=""/219, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f00000002c0)=0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000380)=0x2, 0x4) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) getsockopt$ax25_int(r4, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000100)=0x4) [ 1481.066390][T15739] device bond69 entered promiscuous mode [ 1481.113854][T15738] bond68 (unregistering): Released all slaves [ 1481.196896][T15779] bond76 (unregistering): Released all slaves [ 1481.212661][T15892] IPVS: ftp: loaded support on port[0] = 21 07:04:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x12c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1481.312612][T15771] bond69 (unregistering): Released all slaves 07:04:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x12d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x12e, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x12f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1481.906598][T15972] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1481.952388][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1481.961020][T15892] lo speed is unknown, defaulting to 1000 07:04:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xd000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x65580000}}, 0x20}}, 0x0) [ 1481.994996][T15903] IPVS: ftp: loaded support on port[0] = 21 07:04:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x130, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000300)) r2 = accept(r1, &(0x7f00000000c0)=@sco={0x1f, @fixed}, &(0x7f0000000000)=0x80) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000040a0103000000019dac5300020000064c0008800c0002400000000000007fff0c00014000000000000001010c00014000000000000000020c00024000000000000000010c00024000000000000001010c00024000000000000100010c00224000000000000000030c000a4000000003531eb4f4cd72762eb1f8ee634b22a90577bd6510ac8c90fe0be3217e13f1de7dc796644bb760c1363a25fb4a3c165555773b0ccd8d92f5c2fca556a34114980818266bb01a5b4b00"], 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x44) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1482.101211][ T26] bond6: (slave bridge5): failed to get link speed/duplex [ 1482.166142][T15903] lo speed is unknown, defaulting to 1000 [ 1482.208477][T16027] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1482.303648][T16027] device bond76 entered promiscuous mode [ 1482.417766][T16034] device bond68 entered promiscuous mode [ 1482.443440][ T21] tipc: TX() has been purged, node left! [ 1482.446322][T16035] bond76 (unregistering): Released all slaves 07:04:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x131, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1482.524798][T16038] device bond69 entered promiscuous mode [ 1482.547014][T16056] bond68 (unregistering): Released all slaves 07:04:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x132, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1482.627176][T16073] bond69 (unregistering): Released all slaves [ 1482.732605][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1482.941187][ T143] bond6: (slave bridge5): failed to get link speed/duplex [ 1482.962788][T16035] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1483.075060][ T143] bond6: (slave bridge5): failed to get link speed/duplex [ 1483.145995][T16271] device bond69 entered promiscuous mode [ 1483.387041][T16073] bond69 (unregistering): Released all slaves [ 1483.431566][ T143] bond6: (slave bridge5): failed to get link speed/duplex [ 1483.561281][ T143] bond6: (slave bridge5): failed to get link speed/duplex [ 1483.671198][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1483.791125][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1483.901070][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:04:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x81000000}}, 0x20}}, 0x0) 07:04:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x133, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x420000015001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'rose0\x00', 0x400}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x80, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000ff010000000000fe1300ac1414bb0d009078000000007c00000000000000000000000000a24650d3f3dddad35f2cfc"], 0x100c) 07:04:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7c2f29fa, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x134, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1485.589863][T16374] __nla_validate_parse: 9 callbacks suppressed [ 1485.589874][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1485.694756][T16374] device bond68 entered promiscuous mode [ 1485.700870][T16376] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x135, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1485.815713][T16376] device bond76 entered promiscuous mode [ 1485.829171][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:04:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x136, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1485.913075][T16375] device bond69 entered promiscuous mode [ 1485.918922][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1485.992439][T16378] device bond8 entered promiscuous mode [ 1486.014223][T16379] bond68 (unregistering): Released all slaves [ 1486.097896][T16380] bond76 (unregistering): Released all slaves [ 1486.144075][T16383] bond69 (unregistering): Released all slaves 07:04:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x137, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1486.211758][T16412] bond8 (unregistering): Released all slaves [ 1486.300694][T16380] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x138, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1486.406438][T16380] device bond76 entered promiscuous mode [ 1486.413430][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1486.437585][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x8000}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000000000000005eb48ea7997cb2ae81f21e1ef711afae1dd60524e90ab7d773868ce827b3465f0798f518228956bf986fd7c9e9f471d78f665d83a6ef865e5c20af43f1d1cdae1acb0d302a8fee3af1b44ccf817c5bd3edc11a82b6f39cdbfbcc8abbf9da9ea12c375d6375f03ae9462d374de75ec89f56b4ba0a7599babf8e8c09b2ccd7cbf6634041d32bd85eca935dec48d66436ab4b123d4d914569123433bb4bdc076200"/184], 0x5f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, &(0x7f0000000300), 0xfffffe8c) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x4811}) 07:04:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x88a8ffff}}, 0x20}}, 0x0) 07:04:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x81000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x139, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1486.651379][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1486.736582][T16715] device bond69 entered promiscuous mode [ 1486.750882][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1486.843404][T16718] device bond8 entered promiscuous mode [ 1486.892706][T16717] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x13a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1486.996212][T16717] device bond77 entered promiscuous mode [ 1487.012912][T16719] bond69 (unregistering): Released all slaves 07:04:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x13b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1487.133231][T16728] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x13c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1487.244349][T16728] device bond68 entered promiscuous mode [ 1487.253203][T16757] bond77 (unregistering): Released all slaves [ 1487.354749][T16762] bond68 (unregistering): Released all slaves 07:04:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x13d, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1487.429131][T16758] bond8 (unregistering): Released all slaves [ 1487.511723][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1487.561483][T17000] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1487.593823][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x88a8ffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1487.641265][ T21] net_ratelimit: 16 callbacks suppressed [ 1487.641278][ T21] bond6: (slave bridge5): failed to get link speed/duplex 07:04:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x13e, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x9effffff}}, 0x20}}, 0x0) 07:04:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x10000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x13f, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x30, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1042}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040842}, 0x40088d6) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8081) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4cf800002cf0e07c295bdb7f1fc8303ce50598ea9f48ff54ec080acf2c8ed45d542b982fc2da0ed08fa0a3e5af4df3d901173cbbdb55e3d87decd194c2c40333dc8c3d4acf1b1c7aeacc6316aab0c3ed30947a803cc921a97c57fa021f3d47d6e65159a9", @ANYRES16, @ANYBLOB="000329bd7000fcdbdf25030000000900030073797a30000000000900030073797a310000000014000200626f6e64300000000000000000000000090001007379783200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x28000001) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r7, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 1487.889439][T17023] device bond69 entered promiscuous mode 07:04:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x140, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1487.975833][T17024] device bond8 entered promiscuous mode [ 1488.014894][T17027] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x141, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1488.118411][T17027] device bond77 entered promiscuous mode [ 1488.143542][T17049] bond69 (unregistering): Released all slaves [ 1488.191022][T17050] bond8 (unregistering): Released all slaves 07:04:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x142, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1488.267206][T17057] bond77 (unregistering): Released all slaves 07:04:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x143, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1488.420621][T17051] device bond68 entered promiscuous mode [ 1488.453909][T17079] bond68 (unregistering): Released all slaves 07:04:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x144, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1488.923410][T17324] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1488.972922][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:04:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x9effffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x145, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) r3 = accept4(r1, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f0000000200)=0x80, 0x40000) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="9f820000000000000000000c0007800500020000000000000000a69c76"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa3ae628eb8349162}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0104f93ccae4178f51c235feef63116e0d5c4241", @ANYRES16=r7, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x40020}, 0x48040) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="45000000e55590c336f21945f650239ccc109c8b153cf408b05ab92acde6f724b600dc85fff6ed07842b762921950536d982664f6501c2b718cf6a91368982582c5f36ab160174f99425c6e7e502f4a5f1b10c748981527363279ca3e0e03c8222cb53da9a9bc19f8dde4477b4a53fb00021dc36626dc3063ebfe75364f2cc4cc0a2655034c1", @ANYRES16=r5, @ANYBLOB="000229bd7000fddbdf250500000014000200fe8000000000000000000000000000bb0500010001000000080005006401010214000300fe80000000000000000000000000003d"], 0x4c}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 07:04:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xb0bae83d}}, 0x20}}, 0x0) 07:04:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x20000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1489.091322][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1489.119223][T17349] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1489.179599][T17349] device bond77 entered promiscuous mode [ 1489.215041][T17353] device bond69 entered promiscuous mode 07:04:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x146, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1489.258783][T17354] device bond68 entered promiscuous mode [ 1489.268914][T17378] bond77 (unregistering): Released all slaves [ 1489.347345][T17392] bond68 (unregistering): Released all slaves [ 1489.729204][T17349] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1489.781587][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:04:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg2\x00', 0x420000015001}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x15, 0x4, 0x9) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000100)=[{{0x2, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000000000004600100200000008006c9078ac141400ac1414bb0d00907800"/50], 0x100c) 07:04:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x147, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xb6120000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x60000000}}, 0x20}}, 0x0) 07:04:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3f000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xf0ffffff}}, 0x20}}, 0x0) [ 1489.911112][T32578] bond6: (slave bridge5): failed to get link speed/duplex 07:04:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x148, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1490.010367][T17548] device bond70 entered promiscuous mode [ 1490.051654][T17554] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1490.132091][T17554] device bond8 entered promiscuous mode [ 1490.154180][T17574] bond70 (unregistering): Released all slaves 07:04:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x149, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1490.206689][T17580] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x14a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1490.409723][T17580] device bond77 entered promiscuous mode [ 1490.445933][T17583] bond8 (unregistering): Released all slaves [ 1490.579709][T17581] device bond68 entered promiscuous mode [ 1490.605940][T17593] bond77 (unregistering): Released all slaves 07:04:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x14b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1490.719142][T17596] bond68 (unregistering): Released all slaves 07:04:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x14c, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x149, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1490.821104][T17812] __nla_validate_parse: 11 callbacks suppressed [ 1490.821114][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1490.884705][T17580] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1490.918709][T17846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@dccp={{0x15, 0x4, 0x1, 0x0, 0x1064, 0x65, 0x0, 0x5, 0x21, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xd, 0x0, 0x9, [0x7, 0x1f, 0xf35, 0x6, 0x9]}, @rr={0x7, 0x27, 0x66, [@dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010102, @private=0xa010101, @empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @end]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, "3d9f5f", 0x2, "0d8770"}, "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"}}}}, 0x106e) 07:04:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe98fa92f, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1490.973255][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:04:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xffffa888}}, 0x20}}, 0x0) 07:04:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x40000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x14d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:30 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x7}, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {}, 0x1f}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000f80)=0x100, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0xf2c3}, &(0x7f0000000100)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000540)=""/233, 0xe9}], 0x4, &(0x7f0000000680)=""/244, 0xf4}, 0x8001}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000900)=""/236, 0xec}], 0x2}, 0x101}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/241, 0xf1}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000e00)=""/137, 0x89}], 0x5, &(0x7f0000000340)=""/193, 0xc1}, 0x2}, {{&(0x7f0000001000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000bc0)=""/12, 0xc}, {&(0x7f0000001080)=""/81, 0x51}, {&(0x7f0000000440)=""/8, 0x8}], 0x3, &(0x7f0000001140)=""/150, 0x96}, 0x8000}], 0x4, 0x12000, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="70000000000b01020000000000000000f7ff00060c0001006d616373656330000d000100776c616e302f6c6f0000000005000100000000000800034000000001080002400000000008000240000000000800034000000000160001006e6f646576232fa22f73656c696e75787d000000"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r5, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000c00)="480e003f0000007e5bc5795e8064", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000fc0)) [ 1491.081149][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1491.151580][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1491.283117][T17869] device bond70 entered promiscuous mode 07:04:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x14e, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1491.332603][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x14f, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1491.456793][T17873] device bond68 entered promiscuous mode [ 1491.486067][T17874] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x150, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1491.596933][T17874] device bond77 entered promiscuous mode 07:04:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x151, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1491.653827][T17888] bond70 (unregistering): Released all slaves [ 1491.722412][T17892] bond68 (unregistering): Released all slaves 07:04:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x152, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1491.788889][T17912] bond77 (unregistering): Released all slaves 07:04:31 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffeb9fcd66caa681f400cc000800010004000000060021006200000024002280080006000500000008000100ff030000080002000800000008000500090000000400cc0005009200ff000000050092000400000007002100616100003c0022800800020008000000080003000800000008000100840e000008000400c8ffffff080007001f000000080002000d090000080003000000010023ba7ad9706381ced96b0fbd76e32f7dbabc3ba54bba73f58e46ba9a113661a8da4ad2d2c92b099c90cd092b8ff32811cffa3804d0953553327903"], 0xa4}, 0x1, 0x0, 0x0, 0x40800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 1491.891722][ T8602] bond6: (slave bridge5): failed to get link speed/duplex [ 1492.267383][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1492.298132][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1492.321559][T18109] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1492.382119][T18109] device bond77 entered promiscuous mode [ 1492.390205][T18112] bond77 (unregistering): Released all slaves 07:04:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4c8000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x8000}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'caif0\x00', {0x7, 0x4e20, @empty}}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r4, 0x5411, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000000000004600100200220000006c9078ac141400ae1414530d00907800000000000000000080000000000000"], 0x100c) [ 1492.441999][ T8602] bond6: (slave bridge5): failed to get link speed/duplex 07:04:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x8000000000004) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, &(0x7f0000000300)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) sendmmsg$sock(r3, &(0x7f0000000440)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)="87c7273e6666d28589a5e0f36f92b70be059ebdd29308dfdaee8a8ee931a0bf4984d88aa48d1139dfe894cd9bbf2d90c5c64ab8711eb8f20635dcd998bfbf14b778e58399553a7e9277742908348ba9ce45b34c247c7f0209ba3a2cac04c7a3fd89be2d5aefe2dd59655229b7cdc412df80d49d0992e36d82746764575ebe8827df0e567fcc7a633e53841391a02c5e412dc92aa2de1944df1e55c11a9a4716307b00e3f6a79920042d08179dfbf2c724ad87a325194808986729698b6e177b837f0e2b73e4eba4e844bea1731bdff620e2690f63b3211544fb93e", 0xdb}, {&(0x7f0000000100)="3788232ac6c53be2440d9c68ac8b6e6cc7888f2fad43f6", 0x17}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xea}}, @timestamping={{0x14, 0x1, 0x25, 0x3f4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}}], 0x1, 0x20008000) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, 0x0, &(0x7f0000000300)) r6 = accept(r5, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000680)=0x80) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000006c0)=0x6, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000300)) splice(r2, &(0x7f0000000000)=0x3f, r4, &(0x7f0000000080)=0x6, 0x9, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x20, 0xfa7, 0x58, @dev={0xfe, 0x80, [], 0x35}, @mcast2, 0x8, 0x10, 0x7ff, 0x3f}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x60, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x16}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xeb81}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffc}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x94d}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0xc002000) 07:04:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xfffff000}}, 0x20}}, 0x0) 07:04:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x153, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0ffffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x44892efe, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1492.573189][T32578] bond6: (slave bridge5): failed to get link speed/duplex [ 1492.620381][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x154, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1492.754857][T18201] device bond68 entered promiscuous mode [ 1492.762010][T18202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1492.862602][T18202] device bond70 entered promiscuous mode [ 1492.879366][T18206] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:04:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x155, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1493.003198][T18206] device bond77 entered promiscuous mode [ 1493.016755][T18209] bond70 (unregistering): Released all slaves 07:04:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x156, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1493.069530][T18208] bond68 (unregistering): Released all slaves [ 1493.154513][T18222] bond77 (unregistering): Released all slaves 07:04:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x157, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1493.331859][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:04:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000002000000000078ac141400ac1414bb0d6e0c0090780000000000000000fffffffe00000000"], 0x32) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0x8001, @private2={0xfc, 0x2, [], 0x1}, 0x1}}, 0x40}, 0x90) 07:04:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x158, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1493.409445][T18209] device bond70 entered promiscuous mode [ 1493.416015][T18222] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1493.443466][T18420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x159, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1493.525315][T18425] bond70 (unregistering): Released all slaves 07:04:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xfffff000}}, 0x20}}, 0x0) 07:04:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xffffff7f}}, 0x20}}, 0x0) 07:04:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x48000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1493.670689][T18506] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1493.740228][T18506] device bond77 entered promiscuous mode 07:04:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xfa292f7c, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x15a, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1493.789100][T18513] device bond68 entered promiscuous mode [ 1493.834697][T18524] bond77 (unregistering): Released all slaves 07:04:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x15b, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1493.916623][T18545] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1494.008921][T18545] device bond8 entered promiscuous mode [ 1494.038035][T18550] bond68 (unregistering): Released all slaves 07:04:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x15c, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1494.129953][T18584] bond8 (unregistering): Released all slaves [ 1494.229989][T18604] device bond70 entered promiscuous mode [ 1494.254557][T18624] bond70 (unregistering): Released all slaves 07:04:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x15d, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4c8000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x8000}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'caif0\x00', {0x7, 0x4e20, @empty}}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r4, 0x5411, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000000000004600100200220000006c9078ac141400ae1414530d00907800000000000000000080000000000000"], 0x100c) [ 1494.467736][T18550] device bond68 entered promiscuous mode [ 1494.474950][T18524] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1494.539286][ T370] bond6: (slave bridge5): failed to get link speed/duplex 07:04:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8137}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@icmp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x2}, @end]}}, @timestamp}}}, 0x3e) 07:04:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0xffffff9e}}, 0x20}}, 0x0) [ 1494.695132][T18624] bond70 (unregistering): Released all slaves 07:04:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x15e, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xfeffffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 07:04:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x15f, &(0x7f0000000140)}}], 0x40007aa, 0x0) 07:04:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4c8000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x8000}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'caif0\x00', {0x7, 0x4e20, @empty}}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r4, 0x5411, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000002000000000000004600100200220000006c9078ac141400ae1414530d00907800000000000000000080000000000000"], 0x100c) [ 1494.990465][T18885] ================================================================== [ 1494.998961][T18885] BUG: KASAN: use-after-free in __list_add_valid+0x93/0xa0 [ 1495.006196][T18885] Read of size 8 at addr ffff88805f184570 by task syz-executor.0/18885 [ 1495.014442][T18885] [ 1495.016788][T18885] CPU: 0 PID: 18885 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 1495.025467][T18885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.036657][T18885] Call Trace: [ 1495.039958][T18885] dump_stack+0x18f/0x20d [ 1495.044301][T18885] ? __list_add_valid+0x93/0xa0 [ 1495.049156][T18885] ? __list_add_valid+0x93/0xa0 [ 1495.054017][T18885] print_address_description.constprop.0.cold+0xae/0x436 [ 1495.061071][T18885] ? lockdep_hardirqs_off+0x66/0xa0 [ 1495.066297][T18885] ? vprintk_func+0x97/0x1a6 [ 1495.070900][T18885] ? __list_add_valid+0x93/0xa0 [ 1495.075792][T18885] kasan_report.cold+0x1f/0x37 [ 1495.080568][T18885] ? __list_add_valid+0x93/0xa0 [ 1495.085440][T18885] __list_add_valid+0x93/0xa0 [ 1495.090128][T18885] linkwatch_fire_event+0xea/0x1d0 [ 1495.095280][T18885] netif_carrier_off+0x96/0xb0 [ 1495.100074][T18885] bond_newlink+0x52/0xa0 [ 1495.104413][T18885] ? bond_changelink+0x1bf0/0x1bf0 [ 1495.109541][T18885] __rtnl_newlink+0x1090/0x1750 [ 1495.114411][T18885] ? rtnl_setlink+0x3c0/0x3c0 [ 1495.119124][T18885] ? lock_downgrade+0x820/0x820 [ 1495.124007][T18885] ? is_bpf_text_address+0xcb/0x160 [ 1495.129245][T18885] ? kernel_text_address+0xbd/0xf0 [ 1495.134397][T18885] ? __kernel_text_address+0x9/0x30 [ 1495.143003][T18885] ? unwind_get_return_address+0x51/0x90 [ 1495.148652][T18885] ? profile_setup.cold+0xc1/0xc1 [ 1495.154323][T18885] ? arch_stack_walk+0x97/0xf0 [ 1495.159107][T18885] ? stack_trace_save+0x8c/0xc0 [ 1495.163965][T18885] ? stack_trace_consume_entry+0x160/0x160 [ 1495.169825][T18885] ? mark_lock+0xbc/0x1710 [ 1495.174255][T18885] ? lock_is_held_type+0xb0/0xe0 [ 1495.179208][T18885] ? trace_kmalloc+0xfd/0x130 [ 1495.183903][T18885] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 1495.189476][T18885] rtnl_newlink+0x64/0xa0 [ 1495.193815][T18885] ? __rtnl_newlink+0x1750/0x1750 [ 1495.198881][T18885] rtnetlink_rcv_msg+0x44e/0xad0 [ 1495.203872][T18885] ? rtnetlink_put_metrics+0x510/0x510 [ 1495.209362][T18885] ? lock_acquire+0x1f1/0xad0 [ 1495.214049][T18885] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1495.219352][T18885] netlink_rcv_skb+0x15a/0x430 [ 1495.224130][T18885] ? rtnetlink_put_metrics+0x510/0x510 [ 1495.229866][T18885] ? netlink_ack+0xa10/0xa10 [ 1495.239360][T18885] netlink_unicast+0x533/0x7d0 [ 1495.244152][T18885] ? netlink_attachskb+0x810/0x810 [ 1495.249329][T18885] ? _copy_from_iter_full+0x247/0x890 [ 1495.254716][T18885] ? __phys_addr+0x9a/0x110 [ 1495.259223][T18885] ? __phys_addr_symbol+0x2c/0x70 [ 1495.264273][T18885] ? __check_object_size+0x171/0x3e4 [ 1495.269574][T18885] netlink_sendmsg+0x856/0xd90 [ 1495.274353][T18885] ? netlink_unicast+0x7d0/0x7d0 [ 1495.279309][T18885] ? netlink_unicast+0x7d0/0x7d0 [ 1495.284256][T18885] sock_sendmsg+0xcf/0x120 [ 1495.288679][T18885] ____sys_sendmsg+0x6e8/0x810 [ 1495.293510][T18885] ? kernel_sendmsg+0x50/0x50 [ 1495.298188][T18885] ? do_recvmmsg+0x6d0/0x6d0 [ 1495.302786][T18885] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1495.308779][T18885] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1495.314767][T18885] ___sys_sendmsg+0xf3/0x170 [ 1495.319365][T18885] ? sendmsg_copy_msghdr+0x160/0x160 [ 1495.324682][T18885] ? __fget_files+0x272/0x400 [ 1495.329369][T18885] ? lock_downgrade+0x820/0x820 [ 1495.334221][T18885] ? find_held_lock+0x2d/0x110 [ 1495.338988][T18885] ? __might_fault+0x11f/0x1d0 [ 1495.343764][T18885] ? __fget_files+0x294/0x400 [ 1495.348463][T18885] ? __fget_light+0xea/0x280 [ 1495.353080][T18885] __sys_sendmsg+0xe5/0x1b0 [ 1495.357588][T18885] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1495.362795][T18885] ? __x64_sys_futex+0x382/0x4e0 [ 1495.367751][T18885] ? do_syscall_64+0x1c/0xe0 [ 1495.372348][T18885] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1495.378345][T18885] do_syscall_64+0x60/0xe0 [ 1495.382775][T18885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1495.388672][T18885] RIP: 0033:0x45c1d9 [ 1495.392561][T18885] Code: Bad RIP value. [ 1495.396638][T18885] RSP: 002b:00007f3bafb32c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.405492][T18885] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1d9 [ 1495.413475][T18885] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1495.421542][T18885] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 1495.429522][T18885] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 1495.437511][T18885] R13: 00007fff6b11a8cf R14: 00007f3bafb339c0 R15: 000000000078bf0c [ 1495.445509][T18885] [ 1495.447911][T18885] Allocated by task 18624: [ 1495.452375][T18885] save_stack+0x1b/0x40 [ 1495.456574][T18885] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1495.462224][T18885] kvmalloc_node+0xb4/0xf0 [ 1495.466655][T18885] alloc_netdev_mqs+0x97/0xdc0 [ 1495.471434][T18885] rtnl_create_link+0x219/0xad0 [ 1495.476310][T18885] __rtnl_newlink+0xfa0/0x1750 [ 1495.481084][T18885] rtnl_newlink+0x64/0xa0 [ 1495.485596][T18885] rtnetlink_rcv_msg+0x44e/0xad0 [ 1495.490546][T18885] netlink_rcv_skb+0x15a/0x430 [ 1495.495319][T18885] netlink_unicast+0x533/0x7d0 [ 1495.500095][T18885] netlink_sendmsg+0x856/0xd90 [ 1495.504885][T18885] sock_sendmsg+0xcf/0x120 [ 1495.509310][T18885] ____sys_sendmsg+0x6e8/0x810 [ 1495.514084][T18885] ___sys_sendmsg+0xf3/0x170 [ 1495.518682][T18885] __sys_sendmsg+0xe5/0x1b0 [ 1495.523189][T18885] do_syscall_64+0x60/0xe0 [ 1495.527624][T18885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1495.533511][T18885] [ 1495.535841][T18885] Freed by task 18624: [ 1495.539925][T18885] save_stack+0x1b/0x40 [ 1495.544091][T18885] __kasan_slab_free+0xf5/0x140 [ 1495.548948][T18885] kfree+0x103/0x2c0 [ 1495.552850][T18885] kvfree+0x42/0x50 [ 1495.556671][T18885] device_release+0x71/0x200 [ 1495.561268][T18885] kobject_put+0x1c0/0x270 [ 1495.565685][T18885] put_device+0x1b/0x30 [ 1495.569844][T18885] free_netdev+0x35d/0x480 [ 1495.574288][T18885] __rtnl_newlink+0x14d8/0x1750 [ 1495.579138][T18885] rtnl_newlink+0x64/0xa0 [ 1495.583472][T18885] rtnetlink_rcv_msg+0x44e/0xad0 [ 1495.588420][T18885] netlink_rcv_skb+0x15a/0x430 [ 1495.593189][T18885] netlink_unicast+0x533/0x7d0 [ 1495.597956][T18885] netlink_sendmsg+0x856/0xd90 [ 1495.602724][T18885] sock_sendmsg+0xcf/0x120 [ 1495.607158][T18885] ____sys_sendmsg+0x6e8/0x810 [ 1495.611948][T18885] ___sys_sendmsg+0xf3/0x170 [ 1495.616544][T18885] __sys_sendmsg+0xe5/0x1b0 [ 1495.621065][T18885] do_syscall_64+0x60/0xe0 [ 1495.625508][T18885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1495.631401][T18885] [ 1495.633731][T18885] The buggy address belongs to the object at ffff88805f184000 [ 1495.633731][T18885] which belongs to the cache kmalloc-8k of size 8192 [ 1495.647792][T18885] The buggy address is located 1392 bytes inside of [ 1495.647792][T18885] 8192-byte region [ffff88805f184000, ffff88805f186000) [ 1495.661241][T18885] The buggy address belongs to the page: [ 1495.666907][T18885] page:ffffea00017c6100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea00017c6100 order:2 compound_mapcount:0 compound_pincount:0 [ 1495.682400][T18885] flags: 0xfffe0000010200(slab|head) [ 1495.687723][T18885] raw: 00fffe0000010200 ffffea00017a8708 ffffea0001640208 ffff8880aa0021c0 [ 1495.696324][T18885] raw: 0000000000000000 ffff88805f184000 0000000100000001 0000000000000000 [ 1495.704912][T18885] page dumped because: kasan: bad access detected [ 1495.711357][T18885] [ 1495.713685][T18885] Memory state around the buggy address: [ 1495.719414][T18885] ffff88805f184400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1495.727500][T18885] ffff88805f184480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1495.735593][T18885] >ffff88805f184500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1495.743662][T18885] ^ [ 1495.751386][T18885] ffff88805f184580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1495.759458][T18885] ffff88805f184600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1495.767553][T18885] ================================================================== [ 1495.775618][T18885] Disabling lock debugging due to kernel taint [ 1495.781763][T18885] Kernel panic - not syncing: panic_on_warn set ... [ 1495.788372][T18885] CPU: 0 PID: 18885 Comm: syz-executor.0 Tainted: G B 5.8.0-rc4-syzkaller #0 [ 1495.798443][T18885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.808492][T18885] Call Trace: [ 1495.811784][T18885] dump_stack+0x18f/0x20d [ 1495.816115][T18885] ? __list_add_valid+0x40/0xa0 [ 1495.820972][T18885] panic+0x2e3/0x75c [ 1495.824868][T18885] ? __warn_printk+0xf3/0xf3 [ 1495.829493][T18885] ? _raw_spin_unlock_irqrestore+0x5b/0xe0 [ 1495.835303][T18885] ? __list_add_valid+0x93/0xa0 [ 1495.840148][T18885] ? __list_add_valid+0x93/0xa0 [ 1495.845171][T18885] end_report+0x4d/0x53 [ 1495.849328][T18885] kasan_report.cold+0xd/0x37 [ 1495.854008][T18885] ? __list_add_valid+0x93/0xa0 [ 1495.858859][T18885] __list_add_valid+0x93/0xa0 [ 1495.863534][T18885] linkwatch_fire_event+0xea/0x1d0 [ 1495.868652][T18885] netif_carrier_off+0x96/0xb0 [ 1495.873413][T18885] bond_newlink+0x52/0xa0 [ 1495.877741][T18885] ? bond_changelink+0x1bf0/0x1bf0 [ 1495.882845][T18885] __rtnl_newlink+0x1090/0x1750 [ 1495.887696][T18885] ? rtnl_setlink+0x3c0/0x3c0 [ 1495.892371][T18885] ? lock_downgrade+0x820/0x820 [ 1495.897223][T18885] ? is_bpf_text_address+0xcb/0x160 [ 1495.902427][T18885] ? kernel_text_address+0xbd/0xf0 [ 1495.907528][T18885] ? __kernel_text_address+0x9/0x30 [ 1495.912748][T18885] ? unwind_get_return_address+0x51/0x90 [ 1495.918377][T18885] ? profile_setup.cold+0xc1/0xc1 [ 1495.923401][T18885] ? arch_stack_walk+0x97/0xf0 [ 1495.928165][T18885] ? stack_trace_save+0x8c/0xc0 [ 1495.933018][T18885] ? stack_trace_consume_entry+0x160/0x160 [ 1495.938841][T18885] ? mark_lock+0xbc/0x1710 07:04:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x160, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1495.943260][T18885] ? lock_is_held_type+0xb0/0xe0 [ 1495.948633][T18885] ? trace_kmalloc+0xfd/0x130 [ 1495.953746][T18885] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 1495.959297][T18885] rtnl_newlink+0x64/0xa0 [ 1495.963626][T18885] ? __rtnl_newlink+0x1750/0x1750 [ 1495.968644][T18885] rtnetlink_rcv_msg+0x44e/0xad0 [ 1495.973584][T18885] ? rtnetlink_put_metrics+0x510/0x510 [ 1495.979049][T18885] ? lock_acquire+0x1f1/0xad0 [ 1495.983729][T18885] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1495.989033][T18885] netlink_rcv_skb+0x15a/0x430 07:04:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x161, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1495.993792][T18885] ? rtnetlink_put_metrics+0x510/0x510 [ 1495.999253][T18885] ? netlink_ack+0xa10/0xa10 [ 1496.003851][T18885] netlink_unicast+0x533/0x7d0 [ 1496.008636][T18885] ? netlink_attachskb+0x810/0x810 [ 1496.013747][T18885] ? _copy_from_iter_full+0x247/0x890 [ 1496.019119][T18885] ? __phys_addr+0x9a/0x110 [ 1496.023621][T18885] ? __phys_addr_symbol+0x2c/0x70 [ 1496.028642][T18885] ? __check_object_size+0x171/0x3e4 [ 1496.033922][T18885] netlink_sendmsg+0x856/0xd90 [ 1496.038717][T18885] ? netlink_unicast+0x7d0/0x7d0 [ 1496.043658][T18885] ? netlink_unicast+0x7d0/0x7d0 [ 1496.048598][T18885] sock_sendmsg+0xcf/0x120 [ 1496.053018][T18885] ____sys_sendmsg+0x6e8/0x810 [ 1496.057784][T18885] ? kernel_sendmsg+0x50/0x50 [ 1496.062455][T18885] ? do_recvmmsg+0x6d0/0x6d0 [ 1496.067050][T18885] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1496.073221][T18885] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1496.079210][T18885] ___sys_sendmsg+0xf3/0x170 [ 1496.083841][T18885] ? sendmsg_copy_msghdr+0x160/0x160 [ 1496.089136][T18885] ? __fget_files+0x272/0x400 [ 1496.093820][T18885] ? lock_downgrade+0x820/0x820 [ 1496.098699][T18885] ? find_held_lock+0x2d/0x110 [ 1496.103906][T18885] ? __might_fault+0x11f/0x1d0 [ 1496.108716][T18885] ? __fget_files+0x294/0x400 [ 1496.113492][T18885] ? __fget_light+0xea/0x280 [ 1496.118114][T18885] __sys_sendmsg+0xe5/0x1b0 [ 1496.122742][T18885] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1496.127774][T18885] ? __x64_sys_futex+0x382/0x4e0 [ 1496.132733][T18885] ? do_syscall_64+0x1c/0xe0 [ 1496.137340][T18885] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 07:04:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x162, &(0x7f0000000140)}}], 0x40007aa, 0x0) [ 1496.143334][T18885] do_syscall_64+0x60/0xe0 [ 1496.147934][T18885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1496.153824][T18885] RIP: 0033:0x45c1d9 [ 1496.157722][T18885] Code: Bad RIP value. [ 1496.161781][T18885] RSP: 002b:00007f3bafb32c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1496.170215][T18885] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1d9 [ 1496.178202][T18885] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1496.186203][T18885] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 1496.194179][T18885] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 1496.202151][T18885] R13: 00007fff6b11a8cf R14: 00007f3bafb339c0 R15: 000000000078bf0c [ 1496.211301][T18885] Kernel Offset: disabled [ 1496.215629][T18885] Rebooting in 86400 seconds..