60ac5b849d43fbc0ae9fc5b44aca2d48da945c5d7bb2f36802dc90b948244a511dd2ba69df2799c8e040a4512a6a660ee6b24ffeab0c84c7bc1a1bb5d169376cfbe42849982e20428b2014591d4d8901931fff67c6a5b39fa72563a80ada336df515ec60c8a702a75402cd2bb9fa22e7ca975dbd77f13312e8785483e8cfe9ac22c02d28501029b6e5c84970e03b316600aa48e5b1d20de2c83ef6f03471e84805196907168237b5a089bfd1bf29c4321f57aed6b3d054b9d3105256cb098943deef9c746bd38ee89cfad8e06424577635cec8e83786a6ad09d4097fbb0e1a65", 0x1000}], 0x1000000000000107, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/448], 0xf0}, 0x4000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) prctl$PR_GET_FP_MODE(0x2e) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) finit_module(r4, &(0x7f0000000400)='/*/cgroupem1$}0GPLvmnet0', 0x7) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000580)={0x8, 'virt_wifi0\x00', {'rose0\x00'}, 0xea}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x1000000, &(0x7f0000002840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6fc6b090fd755194a5888b42063d", @ANYRESHEX=r3, @ANYBLOB=',cache=loose,access=any,version=9p2000,posixacl,dont_hash,\x00']) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0x3, 0x2}, 0x1, 0x7, 0xbe77, {0x40, 0x3f}, 0x1, 0x1}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) write$binfmt_script(r8, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/4154], 0x103a) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) timerfd_gettime(r1, &(0x7f00000001c0)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376860668fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x2a}], 0x1}, 0x0) 00:32:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x1000000000000000) 00:32:11 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:11 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180), 0x10}}, 0x0) [ 912.452503][ T6504] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 912.523271][ T6505] 9pnet: Insufficient options for proto=fd [ 912.565868][ T6505] net_ratelimit: 1 callbacks suppressed [ 912.565876][ T6505] Dead loop on virtual device ip6_vti0, fix it urgently! [ 912.688118][ T6505] 9pnet: Insufficient options for proto=fd 00:32:11 executing program 4: [ 912.755450][ T6525] Dead loop on virtual device ip6_vti0, fix it urgently! 00:32:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:11 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x166) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x1a, "03e3f839a02f4cba9128b674034e91ca4f2ebc1c339b474ddd33a33fb093e0ab5890ece8543f44a5bd11194e4564e1b6de34a93c7f636f023466355d8de611254dcffa05a8101ac9f9555ee03dcdd290a20075734abac308419844b9ded594af9e0857640aa642bc373ed5796ed18788308af7850ed4a04c4c56ffbb7639"}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376860668fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x29}], 0x1}, 0x0) 00:32:11 executing program 4: 00:32:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x1c00000000000000) [ 913.320068][ T6546] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:12 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:12 executing program 4: 00:32:12 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x166) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376860668fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x2a}], 0x1}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) ioctl$void(r3, 0xfcf3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000140)=0xd20d) 00:32:12 executing program 3: 00:32:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 913.550371][ T6557] Dead loop on virtual device ip6_vti0, fix it urgently! 00:32:12 executing program 3: [ 913.630765][ T6557] Dead loop on virtual device ip6_vti0, fix it urgently! 00:32:12 executing program 4: 00:32:12 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x166) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x20400) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x3}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000100)=0x100, 0x4) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x101000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376860668fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x2a}], 0x1}, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x2000, 0x5000, 0xf9, 0xff, 0x40}) 00:32:12 executing program 3: [ 913.821282][ T140] tipc: TX() has been purged, node left! 00:32:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x2000000000000000) 00:32:12 executing program 4: 00:32:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 913.991231][ T140] tipc: TX() has been purged, node left! [ 914.095346][ T6581] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 914.138797][ T6580] Dead loop on virtual device ip6_vti0, fix it urgently! [ 914.191996][ T140] tipc: TX() has been purged, node left! [ 914.276788][ T6580] Dead loop on virtual device ip6_vti0, fix it urgently! [ 914.361026][ T140] tipc: TX() has been purged, node left! 00:32:13 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:13 executing program 3: 00:32:13 executing program 4: 00:32:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:13 executing program 2: 00:32:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x4000000000000000) [ 914.531173][ T140] tipc: TX() has been purged, node left! [ 914.606463][ T6598] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:13 executing program 3: 00:32:13 executing program 4: [ 914.681098][ T140] tipc: TX() has been purged, node left! 00:32:13 executing program 2: 00:32:13 executing program 3: [ 914.881642][ T140] tipc: TX() has been purged, node left! 00:32:13 executing program 4: 00:32:13 executing program 2: [ 915.051037][ T140] tipc: TX() has been purged, node left! [ 915.211752][ T140] tipc: TX() has been purged, node left! 00:32:14 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:14 executing program 3: 00:32:14 executing program 2: unshare(0x8020000) perf_event_open(&(0x7f0000000300)={0x1, 0x17d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x0, 0x0) 00:32:14 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x206080) open(0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:32:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x4800000000000000) [ 915.361114][ T140] tipc: TX() has been purged, node left! 00:32:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/787], &(0x7f00000001c0)='GPL\x00'}, 0x48) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 915.468897][ T6629] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 915.541413][ T140] tipc: TX() has been purged, node left! 00:32:14 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x206080) open(0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 915.711875][ T140] tipc: TX() has been purged, node left! [ 915.861447][ T140] tipc: TX() has been purged, node left! 00:32:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x4c00000000000000) 00:32:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:14 executing program 4: unshare(0x8020000) perf_event_open(&(0x7f0000000300)={0x1, 0x17d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) pipe(0x0) socket(0x0, 0x0, 0x0) [ 916.032267][ T140] tipc: TX() has been purged, node left! [ 916.181455][ T140] tipc: TX() has been purged, node left! [ 916.351296][ T140] tipc: TX() has been purged, node left! [ 916.368115][ T6661] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 916.527686][ T140] tipc: TX() has been purged, node left! 00:32:15 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:32:15 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x166) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40a00, 0x0) r2 = mq_open(&(0x7f0000000140)=':*)(,cgroup\x00', 0x1, 0x2cf7b28b99888a40, &(0x7f0000000180)={0x4, 0x4, 0x3e, 0x1f}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376860668fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x2a}], 0x1}, 0x0) 00:32:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socket$inet(0x10, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:15 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x166) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast2, 0x4}}, [0x2, 0x7fff, 0xffff, 0xd38, 0x9, 0x100, 0x7, 0x2, 0x2, 0x1, 0xffffffff00000001, 0x7fffffff, 0x100000000, 0x10000]}, &(0x7f0000000140)=0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x40400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x453a}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r6, 0xfffd}, 0x8) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0x5) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376860668fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x2a}], 0x1}, 0x0) [ 916.681225][ T140] tipc: TX() has been purged, node left! [ 916.739408][ T6673] Dead loop on virtual device ip6_vti0, fix it urgently! 00:32:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socket$inet(0x10, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 916.841156][ T140] tipc: TX() has been purged, node left! [ 916.843726][ T6678] Dead loop on virtual device ip6_vti0, fix it urgently! 00:32:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) io_setup(0x40, &(0x7f0000000480)=0x0) io_submit(r5, 0x2d3, &(0x7f0000000040)=[&(0x7f0000000200)={0xe9000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0x2}]) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) read(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, 0x0) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) [ 916.894805][ T6661] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) io_setup(0x40, &(0x7f0000000480)=0x0) io_submit(r5, 0x2d3, &(0x7f0000000040)=[&(0x7f0000000200)={0xe9000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0x2}]) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) read(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, 0x0) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) 00:32:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socket$inet(0x10, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:15 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, 0x0, 0x0, 0x5}, 0x9) r1 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r4}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = gettid() r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) r8 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r8) r9 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a00000000000000000", 0x23}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r9, 0x227d, 0x0) kcmp(r8, r6, 0x0, 0xffffffffffffffff, r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x4, 0x4, 0x0, 0x10002}, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x79c9e9235c799199) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r6, r7, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r10}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r5, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r3, 0x0, 0x9, &(0x7f0000000100)='@selinux\x00', r10}, 0x30) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376863a68fe806c00000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x2a}], 0x1}, 0x0) [ 917.070955][ T140] tipc: TX() has been purged, node left! [ 917.281443][ T140] tipc: TX() has been purged, node left! 00:32:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x6000000000000000) 00:32:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r2, 0x5603, &(0x7f0000000500)) ioctl$GIO_CMAP(r2, 0x5603, &(0x7f0000000540)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) [ 917.450945][ T140] tipc: TX() has been purged, node left! [ 917.611113][ T140] tipc: TX() has been purged, node left! [ 917.630479][ T6708] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 917.801213][ T140] tipc: TX() has been purged, node left! 00:32:16 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:32:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) r1 = socket$alg(0x26, 0x5, 0x0) io_setup(0x6, &(0x7f0000000c40)=0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000e40)=""/126) io_cancel(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0x5, r3, &(0x7f0000000cc0), 0x0, 0x80000001, 0x0, 0x2}, &(0x7f0000000d40)) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0xc1c00) close(r5) write$binfmt_aout(r5, &(0x7f00000001c0)={{0x69, 0x80, 0x4, 0x4a, 0xe8, 0x9, 0x1e, 0x5}, "c7685882aee033e3eb287799ac85c0de16cb8cfc3f9748a5fbba980d0ee8640592a0a748d9bb14394a1d2989661911c61126ce", [[], [], [], [], [], [], [], [], [], []]}, 0xa53) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x1c, [@restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @typedef={0x1}]}, {0x0, [0x1e, 0x4f, 0x25b689fd0b4ced16, 0x2e, 0xb3, 0x0, 0x5f, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/157, 0x3b, 0x9d}, 0x20) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000d80)={0xa20000, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)={0x390004, 0x734a, [], @ptr=0xffff}}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r7, &(0x7f0000000e00)={0x11, 0x10, 0xfa00, {&(0x7f0000000dc0)}}, 0x18) fdatasync(r6) 00:32:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r2, 0x5603, &(0x7f0000000500)) ioctl$GIO_CMAP(r2, 0x5603, &(0x7f0000000540)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) 00:32:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 00:32:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x6558000000000000) [ 917.971070][ T140] tipc: TX() has been purged, node left! [ 917.997559][ T6723] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:16 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x166) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376863a68fe806c00000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x2a}], 0x1}, 0x7400000000000000) 00:32:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r2, 0x5603, &(0x7f0000000500)) ioctl$GIO_CMAP(r2, 0x5603, &(0x7f0000000540)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) [ 918.111051][ T140] tipc: TX() has been purged, node left! 00:32:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5603, &(0x7f0000000500)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]}) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) 00:32:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b3a, 0x0) [ 918.301001][ T140] tipc: TX() has been purged, node left! [ 918.481404][ T140] tipc: TX() has been purged, node left! [ 918.641215][ T140] tipc: TX() has been purged, node left! 00:32:17 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:32:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r2, 0x5603, &(0x7f0000000500)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) 00:32:17 executing program 3 (fault-call:9 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:17 executing program 2 (fault-call:1 fault-nth:0): unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x6800000000000000) [ 918.811384][ T6760] FAULT_INJECTION: forcing a failure. [ 918.811384][ T6760] name failslab, interval 1, probability 0, space 0, times 0 [ 918.828665][ T6761] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 918.831904][ T140] tipc: TX() has been purged, node left! [ 918.837767][ T6762] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 918.844745][ T6760] CPU: 0 PID: 6760 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 918.859325][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.859332][ T6760] Call Trace: [ 918.859354][ T6760] dump_stack+0x197/0x210 [ 918.859376][ T6760] should_fail.cold+0xa/0x15 [ 918.859394][ T6760] ? fault_create_debugfs_attr+0x180/0x180 [ 918.859413][ T6760] ? ___might_sleep+0x163/0x2c0 [ 918.859451][ T6760] __should_failslab+0x121/0x190 [ 918.859473][ T6760] should_failslab+0x9/0x14 [ 918.859486][ T6760] kmem_cache_alloc_node+0x268/0x740 [ 918.859498][ T6760] ? lockdep_hardirqs_on+0x421/0x5e0 [ 918.859512][ T6760] ? trace_hardirqs_on+0x67/0x240 [ 918.859615][ T6760] copy_process+0x3be/0x7230 [ 918.859636][ T6760] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 918.859666][ T6760] ? kstrtouint+0x142/0x1a0 [ 918.859695][ T6760] ? __cleanup_sighand+0xc0/0xc0 [ 918.859708][ T6760] ? find_held_lock+0x35/0x130 [ 918.859740][ T6760] _do_fork+0x146/0x1090 [ 918.859759][ T6760] ? copy_init_mm+0x20/0x20 [ 918.859776][ T6760] ? __kasan_check_write+0x14/0x20 [ 918.859793][ T6760] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 918.859814][ T6760] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 918.859832][ T6760] ? wait_for_completion+0x440/0x440 [ 918.859856][ T6760] __x64_sys_clone+0x19a/0x260 [ 918.859873][ T6760] ? __ia32_sys_vfork+0xd0/0xd0 [ 918.859888][ T6760] ? ksys_write+0x1cf/0x290 [ 918.859912][ T6760] ? lockdep_hardirqs_on+0x421/0x5e0 [ 918.859930][ T6760] ? trace_hardirqs_on+0x67/0x240 [ 918.859955][ T6760] do_syscall_64+0xfa/0x790 [ 918.859973][ T6760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.859984][ T6760] RIP: 0033:0x45af49 [ 918.860000][ T6760] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.860008][ T6760] RSP: 002b:00007f0616ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 918.860024][ T6760] RAX: ffffffffffffffda RBX: 00007f0616ac4c90 RCX: 000000000045af49 [ 918.860033][ T6760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010062101 [ 918.860043][ T6760] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 918.860053][ T6760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0616ac56d4 [ 918.860062][ T6760] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000003 [ 918.882243][ T140] tipc: TX() has been purged, node left! [ 918.886700][ T140] tipc: TX() has been purged, node left! [ 918.887214][ T140] tipc: TX() has been purged, node left! [ 918.889037][ T140] tipc: TX() has been purged, node left! [ 918.898315][ T140] tipc: TX() has been purged, node left! [ 918.898733][ T140] tipc: TX() has been purged, node left! [ 918.899327][ T140] tipc: TX() has been purged, node left! [ 918.904499][ T140] tipc: TX() has been purged, node left! [ 918.915825][ T6765] FAULT_INJECTION: forcing a failure. [ 918.915825][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 918.915846][ T6765] CPU: 1 PID: 6765 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 918.915856][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.915862][ T6765] Call Trace: [ 918.915883][ T6765] dump_stack+0x197/0x210 [ 918.915907][ T6765] should_fail.cold+0xa/0x15 [ 918.915925][ T6765] ? release_sock+0x156/0x1c0 [ 918.915945][ T6765] ? fault_create_debugfs_attr+0x180/0x180 [ 918.915965][ T6765] ? ___might_sleep+0x163/0x2c0 [ 918.915985][ T6765] __should_failslab+0x121/0x190 [ 918.916003][ T6765] should_failslab+0x9/0x14 [ 918.916016][ T6765] kmem_cache_alloc_node+0x268/0x740 [ 918.916043][ T6765] __alloc_skb+0xd5/0x5e0 [ 918.916062][ T6765] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 918.916081][ T6765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 918.916098][ T6765] ? netlink_autobind.isra.0+0x223/0x300 [ 918.916119][ T6765] netlink_sendmsg+0xa1b/0xea0 [ 918.916144][ T6765] ? netlink_unicast+0x7d0/0x7d0 [ 918.916159][ T6765] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 918.916175][ T6765] ? apparmor_socket_sendmsg+0x2a/0x30 [ 918.916191][ T6765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 918.916227][ T6765] ? security_socket_sendmsg+0x8d/0xc0 [ 918.916245][ T6765] ? netlink_unicast+0x7d0/0x7d0 [ 918.916266][ T6765] sock_sendmsg+0xd7/0x130 [ 918.916286][ T6765] ____sys_sendmsg+0x753/0x880 [ 918.916307][ T6765] ? kernel_sendmsg+0x50/0x50 [ 918.916322][ T6765] ? __fget+0x35d/0x550 [ 918.916337][ T6765] ? find_held_lock+0x35/0x130 [ 918.916364][ T6765] ___sys_sendmsg+0x100/0x170 [ 918.916383][ T6765] ? sendmsg_copy_msghdr+0x70/0x70 [ 918.916398][ T6765] ? __kasan_check_read+0x11/0x20 [ 918.916416][ T6765] ? __fget+0x37f/0x550 [ 918.916436][ T6765] ? ksys_dup3+0x3e0/0x3e0 [ 918.916459][ T6765] ? __fget_light+0x1a9/0x230 [ 918.916475][ T6765] ? __fdget+0x1b/0x20 [ 918.916491][ T6765] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 918.916511][ T6765] __sys_sendmsg+0x105/0x1d0 [ 918.916534][ T6765] ? __sys_sendmsg_sock+0xc0/0xc0 [ 918.916563][ T6765] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 918.916579][ T6765] ? do_syscall_64+0x26/0x790 [ 918.916600][ T6765] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.916613][ T6765] ? do_syscall_64+0x26/0x790 [ 918.916634][ T6765] __x64_sys_sendmsg+0x78/0xb0 [ 918.916650][ T6765] do_syscall_64+0xfa/0x790 [ 918.916668][ T6765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.916679][ T6765] RIP: 0033:0x45af49 [ 918.916692][ T6765] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.916699][ T6765] RSP: 002b:00007f91163d0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.916713][ T6765] RAX: ffffffffffffffda RBX: 00007f91163d0c90 RCX: 000000000045af49 [ 918.916721][ T6765] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 918.916728][ T6765] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 918.916736][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91163d16d4 [ 918.916743][ T6765] R13: 00000000004ca9ed R14: 00000000004e3e60 R15: 0000000000000009 00:32:18 executing program 2 (fault-call:1 fault-nth:1): unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) 00:32:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x6c00000000000000) 00:32:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:18 executing program 3 (fault-call:9 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 919.732274][ T6783] FAULT_INJECTION: forcing a failure. [ 919.732274][ T6783] name failslab, interval 1, probability 0, space 0, times 0 [ 919.750409][ T6785] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 919.797849][ T6783] CPU: 1 PID: 6783 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 919.806479][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.816547][ T6783] Call Trace: [ 919.819860][ T6783] dump_stack+0x197/0x210 [ 919.824222][ T6783] should_fail.cold+0xa/0x15 [ 919.828833][ T6783] ? fault_create_debugfs_attr+0x180/0x180 [ 919.834656][ T6783] ? ___might_sleep+0x163/0x2c0 [ 919.839517][ T6783] __should_failslab+0x121/0x190 [ 919.844467][ T6783] should_failslab+0x9/0x14 [ 919.848987][ T6783] kmem_cache_alloc_node_trace+0x274/0x750 [ 919.854813][ T6783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 919.861098][ T6783] ? debug_smp_processor_id+0x33/0x18a [ 919.866569][ T6783] __get_vm_area_node+0x12f/0x3b0 [ 919.871611][ T6783] __vmalloc_node_range+0xce/0x790 [ 919.876731][ T6783] ? _do_fork+0x146/0x1090 [ 919.881162][ T6783] ? kmem_cache_alloc_node+0x385/0x740 [ 919.886635][ T6783] ? _do_fork+0x146/0x1090 [ 919.891067][ T6783] copy_process+0x9aa/0x7230 [ 919.895665][ T6783] ? _do_fork+0x146/0x1090 [ 919.900100][ T6783] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 919.905840][ T6783] ? kstrtouint+0x142/0x1a0 [ 919.910369][ T6783] ? __cleanup_sighand+0xc0/0xc0 [ 919.915319][ T6783] ? find_held_lock+0x35/0x130 [ 919.920115][ T6783] _do_fork+0x146/0x1090 [ 919.924374][ T6783] ? copy_init_mm+0x20/0x20 [ 919.928893][ T6783] ? __kasan_check_write+0x14/0x20 [ 919.934022][ T6783] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 919.939584][ T6783] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 919.944884][ T6783] ? wait_for_completion+0x440/0x440 [ 919.950194][ T6783] __x64_sys_clone+0x19a/0x260 [ 919.954983][ T6783] ? __ia32_sys_vfork+0xd0/0xd0 [ 919.959848][ T6783] ? ksys_write+0x1cf/0x290 [ 919.964371][ T6783] ? lockdep_hardirqs_on+0x421/0x5e0 [ 919.969671][ T6783] ? trace_hardirqs_on+0x67/0x240 [ 919.974715][ T6783] do_syscall_64+0xfa/0x790 [ 919.979229][ T6783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.985130][ T6783] RIP: 0033:0x45af49 00:32:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 919.989032][ T6783] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.009254][ T6783] RSP: 002b:00007f0616ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 920.017688][ T6783] RAX: ffffffffffffffda RBX: 00007f0616ac4c90 RCX: 000000000045af49 [ 920.025674][ T6783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010062101 [ 920.033662][ T6783] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 920.041649][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0616ac56d4 [ 920.049649][ T6783] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000003 [ 920.081571][ T6783] syz-executor.2: vmalloc: allocation failure: 32768 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 920.140365][ T6789] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 920.189759][ T6792] FAULT_INJECTION: forcing a failure. [ 920.189759][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 920.230996][ T6783] CPU: 1 PID: 6783 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 920.239625][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.249701][ T6783] Call Trace: [ 920.249726][ T6783] dump_stack+0x197/0x210 [ 920.249745][ T6783] warn_alloc.cold+0x87/0x164 [ 920.249767][ T6783] ? zone_watermark_ok_safe+0x260/0x260 [ 920.268152][ T6783] ? kmem_cache_alloc_node_trace+0x398/0x750 [ 920.274260][ T6783] ? __get_vm_area_node+0x2e7/0x3b0 [ 920.279479][ T6783] __vmalloc_node_range+0x44c/0x790 [ 920.284680][ T6783] ? kmem_cache_alloc_node+0x385/0x740 [ 920.284698][ T6783] ? _do_fork+0x146/0x1090 [ 920.284713][ T6783] copy_process+0x9aa/0x7230 [ 920.284727][ T6783] ? _do_fork+0x146/0x1090 [ 920.284745][ T6783] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 920.284762][ T6783] ? kstrtouint+0x142/0x1a0 [ 920.284786][ T6783] ? __cleanup_sighand+0xc0/0xc0 [ 920.284798][ T6783] ? find_held_lock+0x35/0x130 [ 920.284825][ T6783] _do_fork+0x146/0x1090 [ 920.284843][ T6783] ? copy_init_mm+0x20/0x20 [ 920.284858][ T6783] ? __kasan_check_write+0x14/0x20 [ 920.284874][ T6783] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 920.284890][ T6783] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 920.284906][ T6783] ? wait_for_completion+0x440/0x440 [ 920.284930][ T6783] __x64_sys_clone+0x19a/0x260 [ 920.284946][ T6783] ? __ia32_sys_vfork+0xd0/0xd0 [ 920.284960][ T6783] ? ksys_write+0x1cf/0x290 [ 920.284984][ T6783] ? lockdep_hardirqs_on+0x421/0x5e0 [ 920.285002][ T6783] ? trace_hardirqs_on+0x67/0x240 [ 920.285022][ T6783] do_syscall_64+0xfa/0x790 [ 920.285041][ T6783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.285053][ T6783] RIP: 0033:0x45af49 [ 920.285069][ T6783] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.285077][ T6783] RSP: 002b:00007f0616ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 920.285093][ T6783] RAX: ffffffffffffffda RBX: 00007f0616ac4c90 RCX: 000000000045af49 [ 920.285102][ T6783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010062101 [ 920.285111][ T6783] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 920.285120][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0616ac56d4 [ 920.285129][ T6783] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000003 [ 920.311015][ T6792] CPU: 1 PID: 6792 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 920.319729][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:32:19 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) [ 920.319736][ T6792] Call Trace: [ 920.319760][ T6792] dump_stack+0x197/0x210 [ 920.319785][ T6792] should_fail.cold+0xa/0x15 [ 920.328776][ T6792] ? fault_create_debugfs_attr+0x180/0x180 [ 920.328795][ T6792] ? ___might_sleep+0x163/0x2c0 [ 920.328818][ T6792] __should_failslab+0x121/0x190 [ 920.338508][ T6792] should_failslab+0x9/0x14 [ 920.338532][ T6792] kmem_cache_alloc_node_trace+0x274/0x750 [ 920.349384][ T6792] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 920.349401][ T6792] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 920.349422][ T6792] __kmalloc_node_track_caller+0x3d/0x70 [ 920.359605][ T6792] __kmalloc_reserve.isra.0+0x40/0xf0 [ 920.359625][ T6792] __alloc_skb+0x10b/0x5e0 [ 920.359650][ T6792] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 920.359670][ T6792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 920.359687][ T6792] ? netlink_autobind.isra.0+0x223/0x300 [ 920.359715][ T6792] netlink_sendmsg+0xa1b/0xea0 [ 920.369074][ T6792] ? netlink_unicast+0x7d0/0x7d0 [ 920.369091][ T6792] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 920.369109][ T6792] ? apparmor_socket_sendmsg+0x2a/0x30 [ 920.369127][ T6792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 920.369143][ T6792] ? security_socket_sendmsg+0x8d/0xc0 [ 920.369156][ T6792] ? netlink_unicast+0x7d0/0x7d0 [ 920.369178][ T6792] sock_sendmsg+0xd7/0x130 [ 920.379485][ T6792] ____sys_sendmsg+0x753/0x880 [ 920.379508][ T6792] ? kernel_sendmsg+0x50/0x50 [ 920.379525][ T6792] ? __fget+0x35d/0x550 [ 920.379540][ T6792] ? find_held_lock+0x35/0x130 [ 920.379567][ T6792] ___sys_sendmsg+0x100/0x170 [ 920.389960][ T6792] ? sendmsg_copy_msghdr+0x70/0x70 [ 920.389979][ T6792] ? __kasan_check_read+0x11/0x20 [ 920.390000][ T6792] ? __fget+0x37f/0x550 [ 920.390020][ T6792] ? ksys_dup3+0x3e0/0x3e0 [ 920.390043][ T6792] ? __fget_light+0x1a9/0x230 [ 920.413539][ T6792] ? __fdget+0x1b/0x20 [ 920.413558][ T6792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 920.413584][ T6792] __sys_sendmsg+0x105/0x1d0 [ 920.413603][ T6792] ? __sys_sendmsg_sock+0xc0/0xc0 [ 920.413629][ T6792] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 920.413644][ T6792] ? do_syscall_64+0x26/0x790 [ 920.413657][ T6792] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.413671][ T6792] ? do_syscall_64+0x26/0x790 [ 920.413692][ T6792] __x64_sys_sendmsg+0x78/0xb0 [ 920.413709][ T6792] do_syscall_64+0xfa/0x790 [ 920.413728][ T6792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.413740][ T6792] RIP: 0033:0x45af49 [ 920.413756][ T6792] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.413763][ T6792] RSP: 002b:00007f91163d0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.422583][ T6783] Mem-Info: [ 920.430274][ T6792] RAX: ffffffffffffffda RBX: 00007f91163d0c90 RCX: 000000000045af49 [ 920.430283][ T6792] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 920.430291][ T6792] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 920.430299][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91163d16d4 [ 920.430309][ T6792] R13: 00000000004ca9ed R14: 00000000004e3e60 R15: 0000000000000009 [ 920.611013][ T6783] active_anon:114387 inactive_anon:3073 isolated_anon:0 [ 920.611013][ T6783] active_file:7949 inactive_file:125229 isolated_file:0 [ 920.611013][ T6783] unevictable:0 dirty:168 writeback:0 unstable:0 [ 920.611013][ T6783] slab_reclaimable:16100 slab_unreclaimable:121319 [ 920.611013][ T6783] mapped:63194 shmem:3183 pagetables:1595 bounce:0 [ 920.611013][ T6783] free:1127767 free_pcp:770 free_cma:0 [ 920.726106][ T6783] Node 0 active_anon:455456kB inactive_anon:15492kB active_file:31656kB inactive_file:500916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:255976kB dirty:672kB writeback:0kB shmem:15932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 268288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 920.800213][ T6783] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 00:32:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) [ 920.921067][ T6783] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:32:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x7400000000000000) 00:32:19 executing program 3 (fault-call:9 fault-nth:2): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 921.027161][ T6783] lowmem_reserve[]: 0 2535 2535 2535 2535 [ 921.046158][ T6783] Node 0 DMA32 free:731124kB min:36088kB low:45108kB high:54128kB reserved_highatomic:0KB active_anon:446800kB inactive_anon:22220kB active_file:31656kB inactive_file:500968kB unevictable:0kB writepending:672kB present:3129332kB managed:2599256kB mlocked:0kB kernel_stack:11512kB pagetables:5956kB bounce:0kB free_pcp:2348kB local_pcp:1072kB free_cma:0kB [ 921.191787][ T6817] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 921.213256][ T6818] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 921.233419][ T6783] lowmem_reserve[]: 0 0 0 0 0 [ 921.246024][ T6783] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.289675][ T6820] FAULT_INJECTION: forcing a failure. [ 921.289675][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 921.378142][ T6783] lowmem_reserve[]: 0 0 0 0 0 [ 921.403161][ T6783] Node 1 Normal free:3766432kB min:53800kB low:67248kB high:80696kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.448401][ T6820] CPU: 1 PID: 6820 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 921.457104][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.467157][ T6820] Call Trace: [ 921.470438][ T6820] dump_stack+0x197/0x210 [ 921.474772][ T6820] should_fail.cold+0xa/0x15 [ 921.479380][ T6820] ? fault_create_debugfs_attr+0x180/0x180 [ 921.485214][ T6820] __should_failslab+0x121/0x190 [ 921.490160][ T6820] should_failslab+0x9/0x14 [ 921.494669][ T6820] kmem_cache_alloc+0x47/0x710 [ 921.499444][ T6820] ? lock_acquire+0x190/0x410 [ 921.504126][ T6820] ? netlink_deliver_tap+0x146/0xbe0 [ 921.509407][ T6820] skb_clone+0x154/0x3d0 [ 921.513651][ T6820] netlink_deliver_tap+0x943/0xbe0 [ 921.513679][ T6820] netlink_unicast+0x643/0x7d0 [ 921.513700][ T6820] ? netlink_attachskb+0x870/0x870 [ 921.513717][ T6820] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 921.513734][ T6820] ? __check_object_size+0x3d/0x437 [ 921.513756][ T6820] netlink_sendmsg+0x91c/0xea0 [ 921.513782][ T6820] ? netlink_unicast+0x7d0/0x7d0 [ 921.513797][ T6820] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 921.513814][ T6820] ? apparmor_socket_sendmsg+0x2a/0x30 [ 921.513830][ T6820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 921.513847][ T6820] ? security_socket_sendmsg+0x8d/0xc0 [ 921.513860][ T6820] ? netlink_unicast+0x7d0/0x7d0 [ 921.513880][ T6820] sock_sendmsg+0xd7/0x130 [ 921.528817][ T6820] ____sys_sendmsg+0x753/0x880 [ 921.528837][ T6820] ? kernel_sendmsg+0x50/0x50 [ 921.528856][ T6820] ? __fget+0x35d/0x550 [ 921.539767][ T6820] ? find_held_lock+0x35/0x130 [ 921.554999][ T6820] ___sys_sendmsg+0x100/0x170 [ 921.555020][ T6820] ? sendmsg_copy_msghdr+0x70/0x70 [ 921.555038][ T6820] ? __kasan_check_read+0x11/0x20 [ 921.555058][ T6820] ? __fget+0x37f/0x550 [ 921.555078][ T6820] ? ksys_dup3+0x3e0/0x3e0 [ 921.555103][ T6820] ? __fget_light+0x1a9/0x230 [ 921.555119][ T6820] ? __fdget+0x1b/0x20 [ 921.555135][ T6820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 921.555156][ T6820] __sys_sendmsg+0x105/0x1d0 [ 921.555178][ T6820] ? __sys_sendmsg_sock+0xc0/0xc0 [ 921.572319][ T6820] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.572336][ T6820] ? do_syscall_64+0x26/0x790 [ 921.572352][ T6820] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.572365][ T6820] ? do_syscall_64+0x26/0x790 [ 921.572389][ T6820] __x64_sys_sendmsg+0x78/0xb0 [ 921.572406][ T6820] do_syscall_64+0xfa/0x790 [ 921.572425][ T6820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.572436][ T6820] RIP: 0033:0x45af49 [ 921.572452][ T6820] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.572464][ T6820] RSP: 002b:00007f91163d0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.581894][ T6820] RAX: ffffffffffffffda RBX: 00007f91163d0c90 RCX: 000000000045af49 [ 921.581903][ T6820] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 921.581911][ T6820] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 921.581918][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91163d16d4 [ 921.581928][ T6820] R13: 00000000004ca9ed R14: 00000000004e3e60 R15: 0000000000000009 [ 921.596960][ T6783] lowmem_reserve[]: 0 0 0 0 0 [ 921.621755][ T6783] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 921.640060][ T6783] Node 0 DMA32: 1042*4kB (UME) 316*8kB (UME) 980*16kB (UME) 431*32kB (UME) 137*64kB (UME) 19*128kB (UME) 6*256kB (UME) 2*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 166*4096kB (UM) = 736008kB [ 921.655753][ T6783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 921.720076][ T6783] Node 1 Normal: 8*4kB (U) 32*8kB (UE) 190*16kB (UME) 83*32kB (UM) 39*64kB (UME) 23*128kB (UE) 6*256kB (UM) 3*512kB (U) 2*1024kB (UM) 1*2048kB (M) 915*4096kB (ME) = 3766432kB [ 921.826778][ T6783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.836570][ T6783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 921.846155][ T6783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.846166][ T6783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 921.846177][ T6783] 57571 total pagecache pages [ 921.870660][ T6783] 0 pages in swap cache [ 921.875168][ T6783] Swap cache stats: add 0, delete 0, find 0/0 [ 921.881923][ T6783] Free swap = 0kB [ 921.881935][ T6783] Total swap = 0kB [ 921.889653][ T6783] 1965979 pages RAM [ 921.893776][ T6783] 0 pages HighMem/MovableOnly [ 921.898879][ T6783] 344638 pages reserved [ 921.903842][ T6783] 0 pages cma reserved [ 921.924518][ T6820] device bond70 entered promiscuous mode [ 921.937734][ T6820] 8021q: adding VLAN 0 to HW filter on device bond70 00:32:20 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) 00:32:20 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x7a00000000000000) 00:32:20 executing program 3 (fault-call:9 fault-nth:3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b68, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) [ 922.153331][ T6843] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:21 executing program 2: unshare(0x8020000) clone(0x10062102, 0x0, 0x0, 0x0, 0x0) [ 922.277098][ T6851] FAULT_INJECTION: forcing a failure. [ 922.277098][ T6851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 922.290336][ T6851] CPU: 1 PID: 6851 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 922.298930][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.308999][ T6851] Call Trace: [ 922.312307][ T6851] dump_stack+0x197/0x210 [ 922.316659][ T6851] should_fail.cold+0xa/0x15 [ 922.321281][ T6851] ? fault_create_debugfs_attr+0x180/0x180 [ 922.327101][ T6851] ? __kasan_check_read+0x11/0x20 [ 922.332137][ T6851] ? __lock_acquire+0x8a0/0x4a00 [ 922.337090][ T6851] should_fail_alloc_page+0x50/0x60 [ 922.342303][ T6851] __alloc_pages_nodemask+0x1a1/0x910 [ 922.347771][ T6851] ? __kasan_check_read+0x11/0x20 [ 922.354286][ T6851] ? mark_lock+0xc2/0x1220 [ 922.358731][ T6851] ? __alloc_pages_slowpath+0x2920/0x2920 [ 922.364471][ T6851] ? fault_create_debugfs_attr+0x180/0x180 [ 922.370300][ T6851] cache_grow_begin+0x90/0xc60 [ 922.375070][ T6851] ? skb_clone+0x154/0x3d0 [ 922.379488][ T6851] ? trace_hardirqs_off+0x62/0x240 [ 922.384617][ T6851] kmem_cache_alloc+0x64e/0x710 [ 922.389489][ T6851] skb_clone+0x154/0x3d0 [ 922.393745][ T6851] netlink_deliver_tap+0x943/0xbe0 [ 922.398903][ T6851] netlink_unicast+0x643/0x7d0 [ 922.403716][ T6851] ? netlink_attachskb+0x870/0x870 [ 922.408891][ T6851] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 922.414623][ T6851] ? __check_object_size+0x3d/0x437 [ 922.419841][ T6851] netlink_sendmsg+0x91c/0xea0 [ 922.424625][ T6851] ? netlink_unicast+0x7d0/0x7d0 [ 922.429567][ T6851] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 922.435124][ T6851] ? apparmor_socket_sendmsg+0x2a/0x30 [ 922.440590][ T6851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 922.446841][ T6851] ? security_socket_sendmsg+0x8d/0xc0 [ 922.452309][ T6851] ? netlink_unicast+0x7d0/0x7d0 [ 922.457256][ T6851] sock_sendmsg+0xd7/0x130 [ 922.461686][ T6851] ____sys_sendmsg+0x753/0x880 [ 922.466469][ T6851] ? kernel_sendmsg+0x50/0x50 [ 922.471244][ T6851] ? __fget+0x35d/0x550 [ 922.480807][ T6851] ? find_held_lock+0x35/0x130 [ 922.485601][ T6851] ___sys_sendmsg+0x100/0x170 [ 922.490294][ T6851] ? sendmsg_copy_msghdr+0x70/0x70 [ 922.495415][ T6851] ? __kasan_check_read+0x11/0x20 [ 922.500472][ T6851] ? __fget+0x37f/0x550 [ 922.504640][ T6851] ? ksys_dup3+0x3e0/0x3e0 [ 922.509075][ T6851] ? __fget_light+0x1a9/0x230 [ 922.513764][ T6851] ? __fdget+0x1b/0x20 [ 922.517843][ T6851] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 922.524099][ T6851] __sys_sendmsg+0x105/0x1d0 [ 922.528700][ T6851] ? __sys_sendmsg_sock+0xc0/0xc0 [ 922.533851][ T6851] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 922.539322][ T6851] ? do_syscall_64+0x26/0x790 [ 922.544015][ T6851] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.550186][ T6851] ? do_syscall_64+0x26/0x790 [ 922.554884][ T6851] __x64_sys_sendmsg+0x78/0xb0 [ 922.559673][ T6851] do_syscall_64+0xfa/0x790 [ 922.564193][ T6851] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.570200][ T6851] RIP: 0033:0x45af49 [ 922.574111][ T6851] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.593823][ T6851] RSP: 002b:00007f91163afc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.602336][ T6851] RAX: ffffffffffffffda RBX: 00007f91163afc90 RCX: 000000000045af49 [ 922.610433][ T6851] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 922.618447][ T6851] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 00:32:21 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) [ 922.626477][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91163b06d4 [ 922.634581][ T6851] R13: 00000000004ca9ed R14: 00000000004e3e60 R15: 0000000000000009 00:32:21 executing program 2: unshare(0x8020000) clone(0x10062103, 0x0, 0x0, 0x0, 0x0) 00:32:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) 00:32:21 executing program 2: unshare(0x8020000) clone(0x10062104, 0x0, 0x0, 0x0, 0x0) 00:32:21 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 922.950769][ T6843] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) 00:32:22 executing program 2: unshare(0x8020000) clone(0x10062105, 0x0, 0x0, 0x0, 0x0) [ 923.427121][ T6849] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x8001000000000000) 00:32:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:22 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) 00:32:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:22 executing program 2: unshare(0x8020000) clone(0x10062108, 0x0, 0x0, 0x0, 0x0) 00:32:22 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) 00:32:22 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 923.792894][ T6894] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:22 executing program 2: unshare(0x8020000) clone(0x10062109, 0x0, 0x0, 0x0, 0x0) [ 923.906722][ T6902] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:22 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x18, 0x14, 0x1fe}) [ 924.047669][ T6909] device bond71 entered promiscuous mode 00:32:22 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 924.164588][ T6909] 8021q: adding VLAN 0 to HW filter on device bond71 00:32:23 executing program 2: unshare(0x8020000) clone(0x1006210c, 0x0, 0x0, 0x0, 0x0) 00:32:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x8100000000000000) 00:32:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 00:32:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:23 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:23 executing program 2: unshare(0x8020000) clone(0x1006210d, 0x0, 0x0, 0x0, 0x0) 00:32:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:23 executing program 2: unshare(0x8020000) clone(0x1006210f, 0x0, 0x0, 0x0, 0x0) [ 924.627008][ T6952] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:23 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) [ 924.711346][ T6958] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 924.830741][ T6957] device bond72 entered promiscuous mode 00:32:23 executing program 2: unshare(0x8020000) clone(0x10062111, 0x0, 0x0, 0x0, 0x0) [ 924.894557][ T6957] 8021q: adding VLAN 0 to HW filter on device bond72 00:32:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) [ 924.986476][ T6957] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x88a8ffff00000000) 00:32:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:23 executing program 2: unshare(0x8020000) clone(0x10062114, 0x0, 0x0, 0x0, 0x0) 00:32:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe}) [ 925.233346][ T6988] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 925.288218][ T6995] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:24 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x741781, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r2, 0x5603, &(0x7f0000000500)) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000100)) r3 = geteuid() r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) getdents(r4, &(0x7f00000003c0)=""/183, 0xb0) statx(r4, &(0x7f0000000380)='./file0\x00', 0x4000, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f00000004c0)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x5}}, {@common=@access_uid={'access', 0x3d, r3}}, {@rq={'rq', 0x3d, 0xfffffffffffffffb}}, {@common=@mmap='mmap'}, {@common=@uname={'uname', 0x3d, 'syz'}}, {@timeout={'timeout', 0x3d, 0x1}}], [{@fowner_gt={'fowner>'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r5}}]}}) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r6) write$FUSE_ENTRY(r1, &(0x7f0000000040)={0x90, 0x0, 0x8, {0x5, 0x1, 0x100000000, 0x0, 0xfff, 0x6, {0x0, 0x8674, 0x0, 0x7, 0x1ff, 0x100, 0xdc9e, 0x8, 0x0, 0xe9, 0x80000000, r3, r6, 0xa42, 0x5}}}, 0x90) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84000, 0x0) r8 = geteuid() r9 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r9, 0x0, 0x0) getdents(r9, &(0x7f00000003c0)=""/183, 0xb0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r10, 0x400, 0x2) statx(r10, &(0x7f0000000380)='./file0\x00', 0x4000, 0x150, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d7264303030303030303030302c74696d656f75743d3078303070303030303030303030303030352c6163630000000000000000a400612e7b214cab1e60e4e2d9582adc1d539593ad954b5b1f03628f034b3ac0a7c85a856c239d627731d031ec49c625fa2b23292f29000000000000", @ANYRESDEC=r8, @ANYBLOB=',rq=0xfffffffffffffffb,mmap,uname=syz,timeout=0x0000000000000001,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',dont_appraise,uid=', @ANYRESDEC=r11, @ANYBLOB="68dd"]) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r12) write$FUSE_ENTRY(r7, &(0x7f0000000040)={0x90, 0x0, 0x8, {0x5, 0x1, 0x100000000, 0x0, 0xfff, 0x6, {0x0, 0x8674, 0x0, 0x7, 0x1ff, 0x100, 0xdc9e, 0x8, 0x0, 0xe9, 0x80000000, r8, r12, 0xa42, 0x5}}}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x8, {0x0, 0x2, 0x6, 0x7, 0x8, 0x2, {0x2, 0x81, 0x100000001, 0x39, 0x0, 0xdad27c0800000000, 0x0, 0x1, 0x0, 0x40000000, 0x1, r3, r12, 0xffffff97, 0x9}}}, 0x90) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) [ 925.351835][ T6993] device bond73 entered promiscuous mode [ 925.357813][ T6993] 8021q: adding VLAN 0 to HW filter on device bond73 [ 925.415294][ T6993] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1], 0x2}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x9effffff00000000) 00:32:24 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x14, 0x1fe}) 00:32:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1], 0x2}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:24 executing program 2: unshare(0xdadaf0d505245f38) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0xc000000000000000) 00:32:24 executing program 2: unshare(0x33020300) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) [ 926.147033][ T7027] device bond74 entered promiscuous mode [ 926.160007][ T7027] 8021q: adding VLAN 0 to HW filter on device bond74 00:32:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x14, 0x1fe}) 00:32:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1], 0x2}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:25 executing program 2: unshare(0x8020000) clone(0x200, 0x0, 0x0, 0x0, 0x0) 00:32:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0xc00e000000000000) [ 926.512263][ T7054] device bond75 entered promiscuous mode [ 926.558359][ T7054] 8021q: adding VLAN 0 to HW filter on device bond75 00:32:25 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x14, 0x1fe}) 00:32:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:25 executing program 2: unshare(0x8020000) r0 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) 00:32:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0xe03f030000000000) [ 927.206848][ T7077] QAT: Invalid ioctl 00:32:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x0, 0x1fe}) [ 927.230470][ T7085] device bond76 entered promiscuous mode [ 927.245507][ T7085] 8021q: adding VLAN 0 to HW filter on device bond76 00:32:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:26 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5ead3b11f3fe5696, 0x110, r0, 0x8000000) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="7d9a203197543f5686550054584f0be18eda3dbda001870eb74b2594aa7566d05cb831b9e0b9537c348c6a022f769e85491f9fefdf996a8c2bed5044363ab8722a95851e5fb2c75780ff9ac3aa70c8f22cb02dc54b6bbde8e24a3364851a5f57b8a564e4568baa79af18a4b13f7b65eb7f4e438b1762b5f37457ab2de2be5327f9f7e3f47b6efd93096604958d78ecff689acf37c0d78ab4a5d7cf96f72b61bf2adc69c444957da0054671c74ac5188ad5ecfe794a5a0f28aedb0e2afdb51d0a10669174a3bba8730592938f030000000000"], 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000480)={r4, &(0x7f00000003c0)=""/141}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r4}) getsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000040)=""/123, &(0x7f00000000c0)=0x7b) 00:32:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0xeffdffff00000000) [ 927.547727][ T7100] device bond77 entered promiscuous mode [ 927.554412][ T7100] 8021q: adding VLAN 0 to HW filter on device bond77 00:32:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:26 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x0, 0x1fe}) 00:32:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00', @ANYRES16=r2, @ANYBLOB="010400000000000000000c0000001800000000000000006200000c00020008000400fa0c0000"], 0x2c}}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xa5e) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x9082c3842f39c7cc, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20001000}, 0x0) unshare(0x8020000) acct(&(0x7f0000000000)='./file0\x00') clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0xf0ffffff00000000) [ 928.224674][ T7125] validate_nla: 15 callbacks suppressed [ 928.224684][ T7125] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 928.283506][ T7138] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 928.319943][ T7135] device bond78 entered promiscuous mode 00:32:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 928.340611][ T7135] 8021q: adding VLAN 0 to HW filter on device bond78 [ 928.361510][ T7135] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x0, 0x1fe}) 00:32:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:27 executing program 2: unshare(0x8020000) clone(0x10062901, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) r2 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x2, 0x80) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000003c0)=""/138) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r4 = socket$alg(0x26, 0x5, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000480)={0x3, 0x1, @stop_pts=0x6}) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) close(r12) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x0, 0x0, 0x80000000}, &(0x7f0000000340)=0x10) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) close(r14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r14, 0x84, 0x6, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}, &(0x7f0000000300)=0x95) ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, &(0x7f0000000200)={0xa9, 0x81}) r15 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x140, 0x0) write$FUSE_NOTIFY_POLL(r15, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0xe2e}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000000)={0xd333, 0x80000001, 0x1151}) [ 928.594622][ T7145] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 928.728845][ T7149] device bond79 entered promiscuous mode 00:32:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 928.783857][ T7149] 8021q: adding VLAN 0 to HW filter on device bond79 [ 928.844051][ T7145] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:27 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b7"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:27 executing program 2: unshare(0x10000) clone(0x31462101, 0x0, 0x0, 0x0, 0x0) 00:32:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0xff03000000000000) 00:32:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:27 executing program 2: unshare(0x8030a00) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x1a2, 0xce99, 0x0, 'queue0\x00', 0xa0000}) [ 929.206718][ T7176] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b7"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 929.257587][ T7182] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 929.404866][ T7183] device bond80 entered promiscuous mode [ 929.412404][ T7183] 8021q: adding VLAN 0 to HW filter on device bond80 00:32:28 executing program 2: unshare(0x8020000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) [ 929.447703][ T7183] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b7"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 929.776754][ T7178] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 929.829314][ T7210] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 929.951996][ T7212] device bond81 entered promiscuous mode [ 929.965274][ T7212] 8021q: adding VLAN 0 to HW filter on device bond81 00:32:28 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:32:28 executing program 2: r0 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84080}, 0x40) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000000)) unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0xffffff7f00000000) 00:32:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:29 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 930.284341][ T7234] device bond82 entered promiscuous mode [ 930.290438][ T7234] 8021q: adding VLAN 0 to HW filter on device bond82 00:32:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:29 executing program 2: unshare(0x8020000) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', '{GPL\x00'}, &(0x7f0000000040)=""/73, 0x49) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0xfffffffffffff000) [ 930.781710][ T7252] device bond83 entered promiscuous mode [ 930.813743][ T7252] 8021q: adding VLAN 0 to HW filter on device bond83 00:32:29 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) 00:32:29 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4(r1, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) 00:32:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) fcntl$addseals(r3, 0x409, 0x8) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) accept$packet(r1, &(0x7f0000003a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003ac0)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000003b00)={r4, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 931.289688][ T7275] device bond84 entered promiscuous mode 00:32:30 executing program 2: unshare(0x8020000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x5}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+30000000}, 0x8) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 931.347534][ T7275] 8021q: adding VLAN 0 to HW filter on device bond84 00:32:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:30 executing program 2: unshare(0x8020000) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x80, 0xeca9ec4571084d32}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:30 executing program 2: unshare(0x200) clone(0x800000, 0x0, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 00:32:30 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) 00:32:30 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:30 executing program 2: unshare(0x8020000) clone(0x1c2da101, 0x0, 0x0, 0x0, 0x0) 00:32:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @empty}, 0x6, 0x0, 0x3, 0x6, 0x2, 0xff7f}, &(0x7f00000000c0)=0x20) 00:32:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:31 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:31 executing program 2: unshare(0xe5b8f5a307ee2b68) clone(0x4000, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/40) 00:32:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9d"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:31 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:31 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) [ 932.906797][ T7348] device bond85 entered promiscuous mode [ 932.928310][ T7348] 8021q: adding VLAN 0 to HW filter on device bond85 00:32:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9d"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x68, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9d"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 933.255536][ T7367] validate_nla: 14 callbacks suppressed [ 933.255546][ T7367] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 933.447344][ T7370] device bond86 entered promiscuous mode [ 933.487686][ T7370] 8021q: adding VLAN 0 to HW filter on device bond86 00:32:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x67b}], 0x10000000000001e6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x500, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @multicast2}, 0x10002}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x20, @loopback, 0x80}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x8000, @mcast2, 0x8000}], 0x94) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:32 executing program 2: unshare(0x7c5d7bcbbf919c1e) socketpair(0x2b, 0x2, 0x40, &(0x7f0000000000)) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x100, @rand_addr="2baea0fe2b05fc2a3b7c3e825154e7bf", 0x58f9d6c3}, 0x1c) 00:32:32 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 933.542157][ T7370] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:32 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x4) fdatasync(r0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000000)) [ 933.860099][ T7397] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[&(0x7f0000000040)="7cf1fe7208bf7370399e95f503c53f4d", &(0x7f00000000c0)="4ff1d259e8b9d7c92136cc012a1bf0f9f177ee788145ca5707db7c28e54987253b7026ae73351de97ddc08922a09acda9b27da428c48e80d8bd9179993bd307bc2634844072d9704bfa3fb39385ed019a6c137b3d05197dc0071934e678020", &(0x7f0000000240)="8887fc4e1b47cd11a755e9abeb5693210c240eb7aa27ce71f2f25cef5ca81b6efbbaeb0a8d459f7de3708f25f1f28fe36bab73c8da09c0a687eb319e55e4f886f7a8bac4d5c1c9b754517c18659e0bd6055d06b9b61a02e01758f6487543e84fe6e3f635acacf7de44349ec7c13fb32c64066de5b40c3d0fdf952a17976b6a264750c93dddd729b3ef5f311b39a32507d319f9335fe61edaf5fbbb7b1bf6d8631f6c5093ab22f9c4d70c000ddd0a482d9de69e6961919d328cdef2623d87253f8382aba01fd73c7d3c7fe0b9366fba467d18bcde55ef16388d8bd8a21d0ae8cc84f25100caf35f1b20f60181"]}) 00:32:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 933.986636][ T7405] device bond87 entered promiscuous mode [ 933.993648][ T7405] 8021q: adding VLAN 0 to HW filter on device bond87 [ 934.016496][ T7405] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 934.174452][ T7415] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:33 executing program 2: unshare(0x28000000) clone(0x81882000, 0x0, 0x0, 0x0, 0x0) 00:32:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) [ 934.291137][ T7422] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 934.433425][ T7425] device bond88 entered promiscuous mode [ 934.504353][ T7425] 8021q: adding VLAN 0 to HW filter on device bond88 [ 934.579665][ T7425] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:33 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 00:32:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:33 executing program 2: unshare(0x8020000) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) clone(0x10840200, 0x0, 0x0, 0x0, 0x0) 00:32:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 934.866892][ T7451] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 934.871906][ T7450] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 00:32:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 934.937592][ T7457] device bond89 entered promiscuous mode [ 934.956006][ T7457] 8021q: adding VLAN 0 to HW filter on device bond89 00:32:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 935.005503][ T7457] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:33 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080088}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9d4b908df3567f4d}, 0x10000040) 00:32:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x14}) [ 935.262211][ T7473] device bond90 entered promiscuous mode 00:32:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 935.318040][ T7473] 8021q: adding VLAN 0 to HW filter on device bond90 00:32:34 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:34 executing program 2: unshare(0x2c000a00) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x14}) 00:32:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001000001001419002500", 0xffffffffffffff5e}], 0x1) connect(r0, &(0x7f00000000c0)=@rc={0x1f, {0x0, 0x5d, 0x1f, 0x3, 0xa6, 0xd8}, 0x8}, 0x80) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x21, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:34 executing program 2: unshare(0x8020000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ae3c28af2fbcc19dc4187366356bde545398b0b12db921d629775e842f235e7b88ddbcc327451f59d20d36dd7f91e183bca7440620120b04174bd88070152447e8bb699c7e2a694df64bf430aecf6e97717c0d55eb319f3ec30a13290bc23a4e3061a92c0e6f552f", 0x68, 0x40000014, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x20000, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000000140)=0x3f, 0x4) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) setpgid(r1, r3) 00:32:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@swidth={'swidth', 0x3d, 0x993d}}, {@sunit={'sunit', 0x3d, 0x4}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 935.831917][ T7506] device bond91 entered promiscuous mode 00:32:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x14}) 00:32:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 935.956184][ T7506] 8021q: adding VLAN 0 to HW filter on device bond91 00:32:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 936.016378][ T7512] XFS (loop5): stripe width (39229) must be a multiple of the stripe unit (4) 00:32:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18}) [ 936.445449][ T7522] XFS (loop5): stripe width (39229) must be a multiple of the stripe unit (4) [ 936.462537][ T7532] device bond92 entered promiscuous mode [ 936.468509][ T7532] 8021q: adding VLAN 0 to HW filter on device bond92 00:32:35 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:35 executing program 2: r0 = msgget(0x1, 0xe) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000004c0)=""/110) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/73) unshare(0x8020000) r1 = geteuid() r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) getdents(r2, &(0x7f00000003c0)=""/183, 0xb0) statx(r2, &(0x7f0000000380)='./file0\x00', 0x4000, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f00000004c0)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x5}}, {@common=@access_uid={'access', 0x3d, r1}}, {@rq={'rq', 0x3d, 0xfffffffffffffffb}}, {@common=@mmap='mmap'}, {@common=@uname={'uname', 0x3d, 'syz'}}, {@timeout={'timeout', 0x3d, 0x1}}], [{@fowner_gt={'fowner>'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r3}}]}}) r4 = getgid() chown(&(0x7f0000000080)='./file0\x00', r3, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f00000000c0)={{0x2, 0x0, @reserved="0186734f4623640e4323f240b58b6bfa4dc53bb4d75001aaa6ecfa18b861fc2e"}}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18}) 00:32:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x2}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:35 executing program 2: unshare(0x8020000) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/35) 00:32:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18}) [ 936.910479][ T7561] device bond93 entered promiscuous mode [ 936.925664][ T7561] 8021q: adding VLAN 0 to HW filter on device bond93 00:32:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x0, 0x0}) 00:32:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x2}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 937.323079][ T7582] device bond94 entered promiscuous mode [ 937.414865][ T7582] 8021q: adding VLAN 0 to HW filter on device bond94 00:32:36 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:36 executing program 2: unshare(0x8020000) clone(0x40a78900, 0x0, 0x0, 0x0, 0x0) 00:32:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x2}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x0, 0x0}) 00:32:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x29) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 937.828530][ T7600] IPVS: ftp: loaded support on port[0] = 21 00:32:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x0, 0x0}) 00:32:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:36 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x4) fdatasync(r0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000000)) [ 938.123723][ T7611] device bond95 entered promiscuous mode [ 938.129715][ T7611] 8021q: adding VLAN 0 to HW filter on device bond95 00:32:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xc00, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:37 executing program 2: unshare(0x8020000) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fdatasync(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0xf9d, 0x7fffffff}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) [ 938.380190][ T7628] validate_nla: 14 callbacks suppressed [ 938.380200][ T7628] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:37 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 938.550655][ T7631] device bond96 entered promiscuous mode 00:32:37 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x4) fdatasync(r0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000000)) 00:32:37 executing program 2: unshare(0xc1fc288a09abff5d) clone(0x6296b801, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x5603, &(0x7f0000000500)) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffff9, 0x7, 0x1, 0x6, 0x0, 0x0, 0x100}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) [ 938.618410][ T7631] 8021q: adding VLAN 0 to HW filter on device bond96 [ 938.670649][ T7631] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000240)=""/195, &(0x7f0000000040)=0xc3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dlm-monitor\x00', 0x1f9241, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000001540)=[{&(0x7f0000000180)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000001c0)="610dbeede2a4", 0x6}, {&(0x7f0000001340)="78e514065f7d8d26622a38c7e51ca018f80488897ae87c2445f19c5a4f981234b54f2f98e684173323b2636239b20155259ab0761ec21fc2700edd4fd216ecad8dcfb4ce6ce5333597e4a2c7b43a1c0c63124117d9cf7586ba94e03dc3464788f24852e5a70d8ea7998e92d41bd7a78aaa071dbd887b6ea2c450f778f58189d0474e4521a885a66db846e0eacc7c18a1ae33faa1de6348e9bf5331dcb04c9b03f6ab", 0xa2}, {&(0x7f0000001400)="cc75873b8e457aa4c29dda5d75de1ba7656792076a7f681acff65664e1ea139bcc327595db92286b417a666fdec44c94886942aa79ad34f619192f23663f438dbfa723dac4b19b5758c0d2aa0900c7164cb35f4143260b05a7f641a846016fd83405ffbf069ea2a0a9e8df74562f50d0e60eda24a7fd936a609abeda84a1f549793a4df9e93d8a480aba1ccb2642", 0x8e}], 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="3000000000000000840000000100000006000700000000009200000000080800000000000002000000", @ANYRES32=0x0], 0x30, 0x20000}], 0x1, 0x0) [ 939.002246][ T7654] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 939.144378][ T7657] device bond97 entered promiscuous mode [ 939.153606][ T7660] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 939.163079][ T7657] 8021q: adding VLAN 0 to HW filter on device bond97 [ 939.256906][ T7660] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 939.280838][ T7657] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = gettid() sched_getparam(r2, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:38 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x4) fdatasync(r0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000000)) 00:32:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 939.566802][ T7669] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 939.632119][ T7673] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:38 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 940.079275][ T7684] device bond98 entered promiscuous mode [ 940.138093][ T7691] FAULT_INJECTION: forcing a failure. [ 940.138093][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 940.147083][ T7684] 8021q: adding VLAN 0 to HW filter on device bond98 [ 940.183512][ T7691] CPU: 1 PID: 7691 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 940.192575][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.202663][ T7691] Call Trace: [ 940.205968][ T7691] dump_stack+0x197/0x210 [ 940.210321][ T7691] should_fail.cold+0xa/0x15 [ 940.214929][ T7691] ? fault_create_debugfs_attr+0x180/0x180 [ 940.216958][ T7684] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 940.220746][ T7691] ? ___might_sleep+0x163/0x2c0 [ 940.220768][ T7691] __should_failslab+0x121/0x190 [ 940.220788][ T7691] should_failslab+0x9/0x14 [ 940.243141][ T7691] __kmalloc+0x2e0/0x770 [ 940.247406][ T7691] ? mark_held_locks+0xf0/0xf0 [ 940.252181][ T7691] ? mark_lock+0xc2/0x1220 [ 940.256609][ T7691] ? _parse_integer+0x190/0x190 [ 940.261487][ T7691] ? tomoyo_realpath_from_path+0xc5/0x660 [ 940.267222][ T7691] tomoyo_realpath_from_path+0xc5/0x660 [ 940.272779][ T7691] ? tomoyo_path_number_perm+0x193/0x520 [ 940.278549][ T7691] tomoyo_path_number_perm+0x1dd/0x520 [ 940.284022][ T7691] ? tomoyo_path_number_perm+0x193/0x520 [ 940.289675][ T7691] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 940.295491][ T7691] ? __f_unlock_pos+0x19/0x20 [ 940.300215][ T7691] ? __fget+0x37f/0x550 [ 940.304923][ T7691] ? ksys_dup3+0x3e0/0x3e0 [ 940.309345][ T7691] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 940.315589][ T7691] ? fput_many+0x12c/0x1a0 [ 940.320023][ T7691] tomoyo_file_ioctl+0x23/0x30 [ 940.324795][ T7691] security_file_ioctl+0x77/0xc0 [ 940.329746][ T7691] ksys_ioctl+0x57/0xd0 00:32:39 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080), 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:39 executing program 2: unshare(0x8020000) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e24, 0xfff, @mcast2, 0x5}}}, &(0x7f0000000180)=0x84) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:39 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = fsopen(&(0x7f00000001c0)='proc\x00', 0x2) write(r2, &(0x7f0000000240)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x3a5) r3 = socket(0x10, 0x80002, 0x0) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000040)=0x80, 0x800) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 940.333910][ T7691] __x64_sys_ioctl+0x73/0xb0 [ 940.338512][ T7691] do_syscall_64+0xfa/0x790 [ 940.343031][ T7691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.348928][ T7691] RIP: 0033:0x45af49 [ 940.352864][ T7691] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 940.372468][ T7691] RSP: 002b:00007fcecdd35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:32:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 940.372485][ T7691] RAX: ffffffffffffffda RBX: 00007fcecdd35c90 RCX: 000000000045af49 [ 940.372493][ T7691] RDX: 0000000020000440 RSI: 0000000000004b72 RDI: 0000000000000003 [ 940.372501][ T7691] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 940.372509][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcecdd366d4 [ 940.372518][ T7691] R13: 00000000004c424b R14: 00000000004daad0 R15: 0000000000000004 [ 940.392594][ T7691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 940.493282][ T7698] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:39 executing program 2: unshare(0x8020000) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80840}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040001) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:39 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 940.703990][ T7711] device bond99 entered promiscuous mode [ 940.762112][ T7711] 8021q: adding VLAN 0 to HW filter on device bond99 [ 940.822971][ T7722] FAULT_INJECTION: forcing a failure. [ 940.822971][ T7722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 940.836217][ T7722] CPU: 1 PID: 7722 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 940.844808][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.854868][ T7722] Call Trace: [ 940.858174][ T7722] dump_stack+0x197/0x210 [ 940.862524][ T7722] should_fail.cold+0xa/0x15 [ 940.867159][ T7722] ? fault_create_debugfs_attr+0x180/0x180 [ 940.872982][ T7722] ? __kasan_check_read+0x11/0x20 [ 940.878015][ T7722] ? mark_lock+0xc2/0x1220 [ 940.882452][ T7722] should_fail_alloc_page+0x50/0x60 [ 940.887663][ T7722] __alloc_pages_nodemask+0x1a1/0x910 [ 940.893052][ T7722] ? __alloc_pages_slowpath+0x2920/0x2920 [ 940.898784][ T7722] ? __kasan_check_read+0x11/0x20 [ 940.903826][ T7722] ? fault_create_debugfs_attr+0x180/0x180 [ 940.909643][ T7722] cache_grow_begin+0x90/0xc60 [ 940.914440][ T7722] ? tomoyo_realpath_from_path+0xc5/0x660 [ 940.920164][ T7722] ? trace_hardirqs_off+0x62/0x240 [ 940.925286][ T7722] __kmalloc+0x6b2/0x770 [ 940.929531][ T7722] ? mark_held_locks+0xf0/0xf0 [ 940.934300][ T7722] ? mark_lock+0xc2/0x1220 [ 940.938909][ T7722] ? tomoyo_realpath_from_path+0xc5/0x660 [ 940.944646][ T7722] tomoyo_realpath_from_path+0xc5/0x660 [ 940.950205][ T7722] ? tomoyo_path_number_perm+0x193/0x520 [ 940.955868][ T7722] tomoyo_path_number_perm+0x1dd/0x520 [ 940.961338][ T7722] ? tomoyo_path_number_perm+0x193/0x520 [ 940.966982][ T7722] ? tomoyo_execute_permission+0x4a0/0x4a0 00:32:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xbf4e) r2 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x20, 0x0, 0x1, 0x8, 0x8, 0x18}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) pipe(&(0x7f0000000040)) r3 = socket(0x2, 0x80002, 0x5) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 940.972791][ T7722] ? __f_unlock_pos+0x19/0x20 [ 940.977504][ T7722] ? __fget+0x37f/0x550 [ 940.981670][ T7722] ? ksys_dup3+0x3e0/0x3e0 [ 940.986093][ T7722] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 940.992346][ T7722] ? fput_many+0x12c/0x1a0 [ 940.996781][ T7722] tomoyo_file_ioctl+0x23/0x30 [ 941.001553][ T7722] security_file_ioctl+0x77/0xc0 [ 941.006505][ T7722] ksys_ioctl+0x57/0xd0 [ 941.010672][ T7722] __x64_sys_ioctl+0x73/0xb0 [ 941.015274][ T7722] do_syscall_64+0xfa/0x790 [ 941.019785][ T7722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.025680][ T7722] RIP: 0033:0x45af49 [ 941.029583][ T7722] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 941.049196][ T7722] RSP: 002b:00007fcecdd35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 941.057622][ T7722] RAX: ffffffffffffffda RBX: 00007fcecdd35c90 RCX: 000000000045af49 [ 941.065703][ T7722] RDX: 0000000020000440 RSI: 0000000000004b72 RDI: 0000000000000003 00:32:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:39 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080), 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 941.073675][ T7722] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 941.081650][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcecdd366d4 [ 941.089615][ T7722] R13: 00000000004c424b R14: 00000000004daad0 R15: 0000000000000004 00:32:39 executing program 2: unshare(0x58010000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) 00:32:40 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:40 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r0}, &(0x7f0000000480)=""/83, 0x53, 0x0) r2 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x6000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000002c0)="baf80c66b8dc53d58866efbafc0cecf30fc77750d2f7f30fa312c4c2b5dc9200f0baf80c66b8e4aba98566efbafc0c66ed660f3817bcc80066b97d0900000f323ef20f5f410966b80ed600000f23d00f21f86635200000070f23f8", 0x5b}], 0x1, 0x1, &(0x7f0000000380)=[@dstype0={0x6, 0xf}], 0x1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r0, 0x9, 0xfb}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'tgr160-generic\x00'}}, &(0x7f00000000c0)="4c0411441af7a2bb9a", &(0x7f0000000100)=""/251) [ 941.482544][ T7742] device bond100 entered promiscuous mode [ 941.497459][ T7750] FAULT_INJECTION: forcing a failure. [ 941.497459][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 941.515547][ T7742] 8021q: adding VLAN 0 to HW filter on device bond100 [ 941.543629][ T7750] CPU: 0 PID: 7750 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 941.552265][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.562325][ T7750] Call Trace: [ 941.565621][ T7750] dump_stack+0x197/0x210 [ 941.569981][ T7750] should_fail.cold+0xa/0x15 [ 941.574603][ T7750] ? fault_create_debugfs_attr+0x180/0x180 [ 941.580434][ T7750] ? ___might_sleep+0x163/0x2c0 [ 941.585316][ T7750] __should_failslab+0x121/0x190 [ 941.590295][ T7750] should_failslab+0x9/0x14 [ 941.594810][ T7750] __kmalloc+0x2e0/0x770 [ 941.599290][ T7750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.605546][ T7750] ? d_absolute_path+0x11b/0x170 [ 941.610496][ T7750] ? __d_path+0x140/0x140 [ 941.614844][ T7750] ? tomoyo_encode2.part.0+0xf5/0x400 [ 941.620228][ T7750] tomoyo_encode2.part.0+0xf5/0x400 [ 941.625442][ T7750] tomoyo_encode+0x2b/0x50 [ 941.625460][ T7750] tomoyo_realpath_from_path+0x19c/0x660 [ 941.625482][ T7750] tomoyo_path_number_perm+0x1dd/0x520 [ 941.625502][ T7750] ? tomoyo_path_number_perm+0x193/0x520 [ 941.646720][ T7750] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 941.652544][ T7750] ? __f_unlock_pos+0x19/0x20 [ 941.657301][ T7750] ? __fget+0x37f/0x550 [ 941.661478][ T7750] ? ksys_dup3+0x3e0/0x3e0 [ 941.665908][ T7750] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 941.672170][ T7750] ? fput_many+0x12c/0x1a0 [ 941.676611][ T7750] tomoyo_file_ioctl+0x23/0x30 [ 941.681486][ T7750] security_file_ioctl+0x77/0xc0 [ 941.686446][ T7750] ksys_ioctl+0x57/0xd0 [ 941.690625][ T7750] __x64_sys_ioctl+0x73/0xb0 [ 941.695227][ T7750] do_syscall_64+0xfa/0x790 [ 941.699746][ T7750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.705643][ T7750] RIP: 0033:0x45af49 [ 941.709542][ T7750] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 941.729169][ T7750] RSP: 002b:00007fcecdd35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:32:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4800, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:40 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080), 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x100000000000012b) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 941.737598][ T7750] RAX: ffffffffffffffda RBX: 00007fcecdd35c90 RCX: 000000000045af49 [ 941.745601][ T7750] RDX: 0000000020000440 RSI: 0000000000004b72 RDI: 0000000000000003 [ 941.753583][ T7750] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 941.761562][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcecdd366d4 [ 941.769545][ T7750] R13: 00000000004c424b R14: 00000000004daad0 R15: 0000000000000004 [ 941.784981][ T7750] ERROR: Out of memory at tomoyo_realpath_from_path. 00:32:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 941.985765][ T7759] device bond101 entered promiscuous mode 00:32:40 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 942.043985][ T7759] 8021q: adding VLAN 0 to HW filter on device bond101 00:32:40 executing program 2: unshare(0x62000400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xd0a76d8044988f0f, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30e65f77a868ce5f}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x12) ioperm(0x1e, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000a40)={0x2c, r3, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcfa}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r3, 0x400, 0x401, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6e7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6804588e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb27}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @rand_addr="450d2bd233b292c2661f7b66222859d5", 0x4}}, 0x24) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0x9c0000, 0x0, 0x2c, r4, 0x0, &(0x7f0000000200)={0x9909ca, 0x8, [], @p_u32=&(0x7f00000001c0)=0x3}}) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000280)="cb9857b09c0d837de4c6a14338088bce6d832ccb49f410c930c774e6053ad8") 00:32:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 942.198337][ T7779] FAULT_INJECTION: forcing a failure. [ 942.198337][ T7779] name failslab, interval 1, probability 0, space 0, times 0 [ 942.291113][ T7779] CPU: 0 PID: 7779 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 942.299752][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.302228][ T7780] IPVS: ftp: loaded support on port[0] = 21 [ 942.309815][ T7779] Call Trace: [ 942.309839][ T7779] dump_stack+0x197/0x210 [ 942.309860][ T7779] should_fail.cold+0xa/0x15 [ 942.309881][ T7779] ? fault_create_debugfs_attr+0x180/0x180 [ 942.333752][ T7779] ? ___might_sleep+0x163/0x2c0 [ 942.338626][ T7779] __should_failslab+0x121/0x190 [ 942.343580][ T7779] should_failslab+0x9/0x14 [ 942.348098][ T7779] kmem_cache_alloc_trace+0x2d3/0x790 [ 942.353484][ T7779] ? __might_fault+0x12b/0x1e0 [ 942.358257][ T7779] ? find_held_lock+0x35/0x130 [ 942.363072][ T7779] con_font_op+0x138/0x1270 [ 942.367588][ T7779] ? lock_downgrade+0x920/0x920 [ 942.372455][ T7779] ? con_write+0xd0/0xd0 [ 942.372487][ T7779] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 942.372503][ T7779] ? _copy_from_user+0x12c/0x1a0 [ 942.372521][ T7779] vt_ioctl+0x181a/0x26d0 [ 942.372537][ T7779] ? complete_change_console+0x3a0/0x3a0 [ 942.372557][ T7779] ? lock_downgrade+0x920/0x920 [ 942.372570][ T7779] ? rwlock_bug.part.0+0x90/0x90 [ 942.372586][ T7779] ? tomoyo_path_number_perm+0x214/0x520 [ 942.383205][ T7779] ? find_held_lock+0x35/0x130 [ 942.383227][ T7779] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 942.383245][ T7779] ? tty_jobctrl_ioctl+0x50/0xd40 [ 942.383260][ T7779] ? complete_change_console+0x3a0/0x3a0 [ 942.383278][ T7779] tty_ioctl+0xa37/0x14f0 [ 942.383294][ T7779] ? tty_vhangup+0x30/0x30 [ 942.383315][ T7779] ? tomoyo_path_number_perm+0x454/0x520 [ 942.392569][ T7779] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 942.392589][ T7779] ? tomoyo_path_number_perm+0x25e/0x520 [ 942.392609][ T7779] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 942.392623][ T7779] ? __f_unlock_pos+0x19/0x20 [ 942.392656][ T7779] ? tty_vhangup+0x30/0x30 [ 942.392672][ T7779] do_vfs_ioctl+0x977/0x14e0 [ 942.392692][ T7779] ? compat_ioctl_preallocate+0x220/0x220 [ 942.403144][ T7779] ? __fget+0x37f/0x550 [ 942.403167][ T7779] ? ksys_dup3+0x3e0/0x3e0 [ 942.403184][ T7779] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 942.403200][ T7779] ? fput_many+0x12c/0x1a0 [ 942.403222][ T7779] ? tomoyo_file_ioctl+0x23/0x30 [ 942.403238][ T7779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 942.403258][ T7779] ? security_file_ioctl+0x8d/0xc0 [ 942.413801][ T7779] ksys_ioctl+0xab/0xd0 [ 942.413821][ T7779] __x64_sys_ioctl+0x73/0xb0 [ 942.413841][ T7779] do_syscall_64+0xfa/0x790 [ 942.413862][ T7779] entry_SYSCALL_64_after_hwframe+0x49/0xbe 00:32:41 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:41 executing program 4 (fault-call:1 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 942.413873][ T7779] RIP: 0033:0x45af49 [ 942.413890][ T7779] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 942.413897][ T7779] RSP: 002b:00007fcecdd35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 942.424593][ T7779] RAX: ffffffffffffffda RBX: 00007fcecdd35c90 RCX: 000000000045af49 [ 942.424603][ T7779] RDX: 0000000020000440 RSI: 0000000000004b72 RDI: 0000000000000003 [ 942.424612][ T7779] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 942.424626][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcecdd366d4 [ 942.424636][ T7779] R13: 00000000004c424b R14: 00000000004daad0 R15: 0000000000000004 00:32:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 942.800239][ T7797] device bond102 entered promiscuous mode 00:32:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 942.843087][ T7797] 8021q: adding VLAN 0 to HW filter on device bond102 00:32:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, 0x2, 0x3, 0x8, 0x70bd2c, 0x25dfdbfb, {0x3, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_CMD={0x8, 0x1, {0x4}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1f, 0x2}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x688c40fe809cda2b}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000002}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffcb, &(0x7f0000000080)={0x0}}, 0x48081) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r2, &(0x7f0000000040)={0x9, 0x2, "02"}, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r3, &(0x7f0000000040)={0x9, 0x2, "02"}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000480)={r4, &(0x7f00000003c0)=""/141}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000340)={r4, 0x3, &(0x7f0000000240)=[0x6, 0x800, 0x7fff], &(0x7f0000000280)=[0x7], 0xe, 0x6, 0x9, &(0x7f00000002c0)=[0x40, 0x4, 0x0, 0xd3, 0x800, 0x1000], &(0x7f0000000300)=[0x0, 0x45abcb5b, 0x350, 0x9, 0x800]}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x5865, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:41 executing program 2: unshare(0x8020000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r6}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000029c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000002ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006a00)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000006b00)=0xe8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000006b40)=0x0, &(0x7f0000006b80)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000a500)=[{{&(0x7f0000006c00)=@can={0x1d, 0x0}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006c80)=""/77, 0x4d}, {&(0x7f0000006d00)=""/213, 0xd5}, {&(0x7f0000006e00)=""/6, 0x6}, {&(0x7f0000006e40)=""/165, 0xa5}], 0x4, &(0x7f0000006f40)=""/86, 0x56}, 0x5}, {{&(0x7f0000006fc0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000007040), 0x0, &(0x7f0000007080)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000009280)=[{&(0x7f0000008100)=""/4096, 0x1000}, {&(0x7f0000009100)=""/120, 0x78}, {&(0x7f0000009180)=""/249, 0xf9}], 0x3, &(0x7f00000092c0)=""/4096, 0x1000}}, {{&(0x7f000000a2c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f000000a3c0)=[{&(0x7f000000a340)=""/46, 0x2e}, {&(0x7f000000a380)=""/44, 0x2c}], 0x2, &(0x7f000000a400)=""/4, 0x4}, 0x4}, {{&(0x7f000000a440)=@nfc_llcp, 0x80, &(0x7f000000a4c0)}, 0x2f}], 0x5, 0x18003, &(0x7f000000a640)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000a740)={'team0\x00', 0x0}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) close(r13) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f000000a780)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast1}}, &(0x7f000000a880)=0xe8) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r15, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r16}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000a8c0)={'team0\x00', r16}) r18 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r18, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r19}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f000000a900)={@rand_addr, 0x0}, &(0x7f000000a940)=0x14) r21 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r21, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r22}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000a9c0)={0x0, @loopback, @initdev}, &(0x7f000000aa00)=0xc) r24 = socket$alg(0x26, 0x5, 0x0) bind$alg(r24, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r25 = accept4(r24, 0x0, 0x0, 0x0) close(r25) getsockopt$PNPIPE_IFINDEX(r25, 0x113, 0x2, &(0x7f000000aa40)=0x0, &(0x7f000000aa80)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f000000aac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000ab00)=0x14) r28 = socket$alg(0x26, 0x5, 0x0) bind$alg(r28, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r29 = accept4(r28, 0x0, 0x0, 0x0) close(r29) ioctl$sock_SIOCGIFINDEX(r29, 0x8933, &(0x7f0000010d80)={'team_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000010dc0)=0x0, &(0x7f0000010e00)=0x4) r32 = socket$alg(0x26, 0x5, 0x0) bind$alg(r32, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r32, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r32, 0x8933, &(0x7f0000010f00)={'syz_tun\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000010f40)={0x11, 0x0, 0x0}, &(0x7f0000010f80)=0x14) r35 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r35, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r36}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000011740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1a00100}, 0xc, &(0x7f0000011700)={&(0x7f0000010fc0)={0x730, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x284, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x1004, 0x7f, 0x80, 0x100}, {0xe9f, 0x85, 0x1f, 0x3}, {0x400, 0x4, 0x80, 0xa547}, {0x9, 0x40, 0x84, 0x24a596db}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x1a4, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xd9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r22}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xda}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r26}, {0x80, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8, 0x1, r27}, {0x7c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x36}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x84, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r31}}, {0x8}}}]}}, {{0x8, 0x1, r33}, {0xb8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r34}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x730}}, 0x20004004) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x2, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}, {&(0x7f0000000240)="e8b32f54694d54dc37ac3d8c4b35ee9bd8363d7ee99a5a54875d5d9c9b1a8ad5eb97227bc5b9c11ca3d9ee671bfc3d2bd969a8f48fae9a47ebfaf093f3443a6d6e4b50756687743cd9da7d4d4d589fd06d7be83a12d7f9ee358b60a6f48f7a17101e628b21e3c01480fe32eed33ca97d91d6357aaf73cce4ecb7b7bb0f2de314f690572980c130d816f6a3c9669aff01cd7530ccdbff9f247b6aa40c21596865eb6efb00c91d", 0xa6}, {&(0x7f0000000300)="2f6782989ca32e073b19c1e916d35a72bb14c3570e8e9a643cc0eccb296db82b8b2dc3fbf80c1658046f41d88628eab356d957769a86c063a8cc714bce0a2b927ba79d00eb85fb85a17223832fbe4f581235ba6db58cc35ee1427bf7ab99bf5f5e97bf8df54b642ba09e986819c994279f0555179c63723da111aa0f55192df02895a5ae6918784a9caf13955bce294684f90bbf69244f307c7890a3ecf2f01f986bb57f1ee82201b59f9e931a476eec263d26738d16c590a15e5ad5dd97f871cb8b360088ef65a4677030d9495c0e57bc109b44abd66ec479b8cb28d5b9289f0accee465b20315e2731cd95772f4f1db26339a27ba14c6f", 0xf8}, {&(0x7f0000000400)="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", 0x1000}], 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x10, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:42 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 943.644657][ T7816] cgroup: fork rejected by pids controller in [ 943.644772][ T7816] /syz2 00:32:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:42 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 944.414266][ T7815] validate_nla: 7 callbacks suppressed [ 944.414277][ T7815] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 944.663124][ T7822] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 944.674716][ T7822] team0: No ports can be present during mode change [ 944.700073][ T7952] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:43 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:43 executing program 2: unshare(0xf79198e36d4d1ad1) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)) open(&(0x7f0000000240)='./file0\x00', 0x400, 0x80) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000100)={0xe0000000, 0x100, "d2a3e6706770806915671446a949f01c836a0e4aeed67a567e3d0645dc643438", 0x3, 0x10001, 0x36ed, 0x7, 0x4, 0x8, 0x7, 0x7ff, [0x7, 0xdcb, 0x80000000, 0x1]}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xffff, 0x4, 0x4, 0x1000, 0xccf, {r0, r1/1000+10000}, {0x2, 0xc, 0x2, 0x20, 0x4a, 0x1, "b05f3868"}, 0x3, 0x1, @fd, 0x6d0, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000000c0)=0x3ff) 00:32:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0xfffffffffffffddb) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:43 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xf, 0x80000, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3f, {{0x2, 0x4e23}}}, 0x88) 00:32:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b34, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 945.069748][ T7991] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 945.081262][ T7992] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 945.241719][ T7995] device bond103 entered promiscuous mode [ 945.247789][ T7995] 8021q: adding VLAN 0 to HW filter on device bond103 00:32:44 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004805}, 0x20000000) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000340)={0x4, 0x4, 0x0, 'queue1\x00', 0x3f}) close(r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r6}) setsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000000)={@loopback, @multicast1, r6}, 0xc) [ 945.281862][ T7995] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b35, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6558, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:44 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400001, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r3, 0x1}, &(0x7f0000000080)=0x8) [ 945.537544][ T8017] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 945.677166][ T8021] device bond104 entered promiscuous mode [ 945.702786][ T8021] 8021q: adding VLAN 0 to HW filter on device bond104 [ 945.727943][ T8021] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:44 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b36, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:44 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 00:32:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0x80000000, 0x100, "7c45ed54993960edbcdc8abfd83fd2fa9b829b803103f1c1871bdb3b8a9e1a1c", 0x0, 0x4, 0x7, 0x2, 0x6, 0x0, 0x1, 0x100, [0x200, 0x30, 0x3, 0x3]}) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffdf7, &(0x7f0000000080)={0x0, 0xffffffffffffff15}, 0x1, 0x0, 0x0, 0x28004010}, 0xdf1f37cfc9511be6) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6800, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 946.051353][ T8042] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 946.074013][ T8047] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b37, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 946.162963][ T8055] device bond105 entered promiscuous mode 00:32:45 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x51a, 0x400) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) accept4$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14, 0x80800) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) close(r7) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000540)={0xa2c, 0x6, 0x4, 0x100000, 0x4, {r4, r5/1000+30000}, {0x6, 0x0, 0x2, 0x6, 0x7, 0x6, "1e31c5e3"}, 0xb737, 0x2, @userptr=0x827, 0x4, 0x0, r7}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000000640)=""/94, 0x5e, 0xffffffffffffffff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x4, 0x0, 0x0, 0x2, 0x7ffffffffffffffb}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x34, &(0x7f0000000180)=""/52, 0x40f00, 0x0, [], r3, 0xa, r8, 0x8, &(0x7f00000005c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xa, 0x2, 0x7f}, 0x10, r9, r0}, 0x78) 00:32:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f00000001c0)={0x7, 0x51, @name="f5fe1e56c2ae8873d7225158d152f3eaf7e3a05d0066bacbb009fc16d220014a"}) [ 946.240351][ T8055] 8021q: adding VLAN 0 to HW filter on device bond105 00:32:45 executing program 2: unshare(0x8020000) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) fdatasync(r0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0xe9cf7a6dcaeac604, 0x1fc0000, 0x2, 0x1cd, 0x200, 0x80000001, 0x4}, {0x70e5c2fd717180fd, 0x3f, 0x0, 0xea7, 0x80000000, 0x1, 0x8}, {0x7, 0x7, 0x4, 0x9, 0xffffffce, 0x3, 0x5}]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6c00, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 946.685388][ T8086] device bond106 entered promiscuous mode [ 946.771282][ T8086] 8021q: adding VLAN 0 to HW filter on device bond106 00:32:45 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:45 executing program 2: unshare(0x8020000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x6, 0x0, 0x1002, 0x0, 0x7ff, 0xfffffffb, 0x30000}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1000, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='-\x00', 0x2) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7400, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x5309a21a076de1d8) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='veth0_to_team\x00') r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000094) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xf9509cc43ee159b2, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0x20, @loopback, 0x2}, 0x1c) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:46 executing program 2: unshare(0x0) clone(0x100e2101, 0x0, 0x0, 0x0, 0x0) [ 947.372593][ T8106] device bond107 entered promiscuous mode [ 947.378691][ T8106] 8021q: adding VLAN 0 to HW filter on device bond107 00:32:46 executing program 2: unshare(0xa000580) clone(0x10000000, 0x0, 0x0, 0x0, 0x0) 00:32:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x7, 0x7f, 0x1}, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000400)={0x0, [0x4, 0x8fc9, 0x1f], [{0xfff, 0x4, 0x1, 0x1}, {0x8, 0x5, 0x1, 0x1}, {0xc, 0x172d, 0x1, 0x1}, {0xc0, 0x2e1a, 0x1, 0x0, 0x1}, {0x3, 0x5d8, 0x1, 0x1}, {0x200, 0x6, 0x1, 0x1}, {0x81, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x1f, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x6e, 0x1, 0x1, 0x1, 0x1}, {0x568, 0x63, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x1, 0x1}, {0x8f4d, 0x0, 0x0, 0x1, 0x0, 0x1}], 0x81}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) accept(r1, &(0x7f0000000340)=@can, &(0x7f00000001c0)=0x80) r4 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x7) r5 = socket(0x10, 0x80002, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000240)={{0x3}, 'port0\x00', 0x82, 0x20000, 0x8, 0x1, 0x186, 0x62, 0xfffffffb, 0x0, 0x4, 0x32}) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280), 0x1033b) fdatasync(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r6, 0x0, 0x1, 0x200, &(0x7f0000000100)=[0x0, 0x0], 0x2}, 0x20) write$FUSE_OPEN(r7, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x6, {0x0, 0x11}}, 0x20) 00:32:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:46 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7a00, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:46 executing program 2: unshare(0x8020000) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x81f, 0x400) clone(0x4000, 0x0, 0x0, 0x0, 0x0) 00:32:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000380)={0xfffffff, 0x80, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x980913, 0x1, [], @value=0x7}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x468480, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f00000000c0)) 00:32:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:47 executing program 2: unshare(0x8020000) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x7, 0x100, 0x2a8}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff81) 00:32:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 948.867243][ T8193] device bond108 entered promiscuous mode [ 948.893427][ T8193] 8021q: adding VLAN 0 to HW filter on device bond108 00:32:48 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:48 executing program 2: unshare(0x8020000) clone(0x10466101, 0x0, 0x0, 0x0, 0x0) 00:32:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$swradio(0x0, 0x0, 0x2) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="ffff2087a434edfc0b78825441fb2926c81c1922cd67be37b23a86c1d560438bd00640656721d4530a2ad541cf350c7860ad00000000"], 0x4, 0x1) r3 = userfaultfd(0x100000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x40084149, 0x718000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x40084149, 0x718000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'syzkaller0\x00', 0xfffffff7}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000380)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/57, 0x39}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup3(r6, r8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) userfaultfd(0x0) userfaultfd(0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 00:32:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8100, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:48 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x250080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000480)={0x50, r2, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcfa}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xf1b8ea6df064ce2b}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x600040}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2f8, r2, 0xc00, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7f0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc13}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7914}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x63}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff102}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x804}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x800}, 0x1) 00:32:48 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x3a1502, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfdca, &(0x7f0000000080)={0x0, 0xfffffffffffffeea}}, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="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", 0x11c}], 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f00000003c0)=@hci={0x1f, 0x1, 0x2}, 0x80) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000180)=0x6, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x101000, 0x0) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000100)) recvfrom(r2, &(0x7f00000001c0), 0x0, 0xc1, &(0x7f0000000440)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924924924925cd, 0x0) [ 950.187648][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 00:32:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 950.697755][ T8436] validate_nla: 8 callbacks suppressed [ 950.697766][ T8436] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 950.822154][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:32:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 950.849633][ T8525] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:50 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:50 executing program 2: unshare(0x8020000) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@bcast, @null, @bcast, @remote, @default, @netrom]}, &(0x7f0000000040)=0x40, 0x101c00) r1 = dup2(r0, 0xffffffffffffffff) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000080), 0x80800) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="5ebb4036915ef57c"}}) 00:32:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xc0, 0x0, 0x9, 0x400, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0xed1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1c}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x40}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x37}}, {0x14, 0x4, @rand_addr="674edfc2e22a2f038eadd2b7e5263df4"}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x401}]}, @NFCTH_POLICY={0xc, 0x4, {0x8, 0x5, 0x7ff}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, {0x8, 0x5, 0x3ff}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x44020) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x15e0, 0x1, 0x4, 0x4000000, 0x3, {0x0, 0x2710}, {0x0, 0x0, 0x3f, 0x4, 0x1, 0x3, "a5db126a"}, 0x4, 0x1, @offset=0x9, 0x7, 0x0, r0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="eabb00001a0025f0006bb4f7fdff141c020717006f10b50000270000000001511c00", 0x22) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 951.547151][ T8583] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:50 executing program 2: unshare(0x44080300) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x10001}, 0x16, 0x1) [ 951.731514][ T8619] device bond109 entered promiscuous mode [ 951.754660][ T8619] 8021q: adding VLAN 0 to HW filter on device bond109 00:32:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x80200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x810580e8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, 0x2, 0x1, 0xed357ed0db69ac97, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x3}, [@CTA_NAT_DST={0x34, 0xd, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x7fff}]}, @CTA_LABELS={0x8, 0x16, [0x0]}, @CTA_ID={0x8, 0xc, 0x4}, @CTA_MARK_MASK={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x9, 0x1ff]}, @CTA_MARK_MASK={0x8, 0x15, 0x2}, @CTA_MARK={0x8, 0x8, 0x7fff}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x863) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x2, 0x0, [0x80000000, 0xfffffff8, 0x40, 0x1d, 0x4, 0x4cb3, 0xfff, 0xd0, 0x339a, 0x6, 0x3, 0xfffffff9, 0x9, 0x4, 0x532a, 0x5]}, {0x20, 0x0, [0x2, 0x200000, 0x9, 0x9, 0x80000001, 0x800, 0x7fff, 0x0, 0x1, 0x5604291, 0x1, 0x7, 0x7, 0x8, 0x6, 0xf77c]}, {0x1, 0x0, [0x1, 0x101, 0xae7d, 0xfffffffc, 0x66a5, 0x4, 0x6, 0x3f, 0xffff, 0x76, 0x1ff, 0x2, 0x230, 0x9, 0x7fff, 0x3]}, {0x67, 0x0, [0x800, 0x8000, 0xfffeffff, 0x8, 0x2, 0x2, 0x6, 0x0, 0xfffffffb, 0xd512, 0x8000, 0x5, 0x9, 0x101, 0xb80, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x120}}, 0x20) write(r5, &(0x7f0000000040)="240000001a0025f0006bb4f7fdff141c0e2700006f10b500002780cc08001c00", 0xfffffffffffffd48) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 951.829696][ T8619] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) 00:32:51 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001880)={{{@in6=@mcast1, @in=@broadcast}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000001980)=0x295) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) 00:32:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) 00:32:51 executing program 2: unshare(0x8020000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x9, 0x4) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 952.861917][ T8839] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:51 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:51 executing program 2: unshare(0x8020000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x1, @host}, 0x10) epoll_create1(0xc0000) 00:32:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 953.103048][ T8841] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) 00:32:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b60, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 953.316711][ T8908] device bond110 entered promiscuous mode [ 953.392808][ T8908] 8021q: adding VLAN 0 to HW filter on device bond110 [ 953.437750][ T8830] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 953.450037][ T8833] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:52 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) getpgid(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:52 executing program 2: unshare(0x8020000) clone(0x100, 0x0, 0x0, 0x0, 0x0) 00:32:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180), 0x0, 0x0) 00:32:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:52 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 953.845392][ T9082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180), 0x0, 0x0) 00:32:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b62, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 953.970253][ T9092] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:32:52 executing program 2: unshare(0x20060100) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x2}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r4, 0xe727c000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x58800) [ 954.011580][ T9090] device bond111 entered promiscuous mode [ 954.171505][ T9090] 8021q: adding VLAN 0 to HW filter on device bond111 00:32:53 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180), 0x0, 0x0) 00:32:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = getuid() write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xfffffffffffffff5, 0x4, {0x5, 0x3, 0x8, 0x8, 0x725f, 0x5, {0x0, 0x13, 0x8, 0x101, 0x2, 0x40, 0xb7, 0x3, 0x0, 0x10001, 0x4584, r3, 0x0, 0xa9b, 0x200}}}, 0x90) 00:32:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x1da049a, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:53 executing program 2: unshare(0x36040100) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000c}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200244d1}, 0x8000080) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x5, 0x29}) clone(0x80000000, 0x0, 0x0, 0x0, 0x0) 00:32:53 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b64, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 00:32:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 954.881929][ T9238] device bond112 entered promiscuous mode [ 954.887958][ T9238] 8021q: adding VLAN 0 to HW filter on device bond112 00:32:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 00:32:53 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 00:32:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 955.876539][ T9366] device bond113 entered promiscuous mode [ 955.883108][ T9366] 8021q: adding VLAN 0 to HW filter on device bond113 00:32:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="e1006b88fbbee3f7c2f164165f00804806000000c60001070000001419001300", 0x20}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) fcntl$notify(r1, 0x402, 0x8) unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:32:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) 00:32:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:54 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) [ 955.921650][ T9362] validate_nla: 7 callbacks suppressed [ 955.921661][ T9362] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) 00:32:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) [ 956.344982][ T9482] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:55 executing program 2: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9e0904, 0xf7b3, [], @p_u8=&(0x7f0000000000)=0x9}}) write$P9_RREAD(r0, &(0x7f00000000c0)={0x32, 0x75, 0x2, {0x27, "04ca05ace17179dc3b8b2fe9f6a3d3a5bd40f2344cf1f5ca57fd28ee5a0b9985149fbda42fe621"}}, 0x32) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000200), 0x4) unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) ptrace$setregset(0x4205, r4, 0x201, &(0x7f00000001c0)={&(0x7f0000000240)="29069f91be0f34cd3f76d6e720607cbe7e5e5fd3ad227da1635e8f708c923185dd92199fba50b06013370a519d85f4369ee6d07f2640599d868b31208121f3080e1d66740994bf39ee7d4bed7a60884ea95365ac86102e1c130a3af2c2c98bd298cf382723734f6835029147f711626068986eb392c044222bfb586156243845a32fc6e479f36d1df8e9e8e1bf9c55c7e81122cd074dcce2380bbe90c989888e9bf096ba5564b18e2f570d0112b4f1a984dbfac675116307cbc319b5497d01012319db9e4091914ff58bc689d0f83f2ecfab1fd57addae0aa78a5182d39e659de06d8d", 0xe3}) setsockopt$inet6_dccp_int(r3, 0x21, 0x5, &(0x7f0000000100)=0x9c, 0x4) [ 956.501772][ T9502] device bond114 entered promiscuous mode [ 956.507835][ T9502] 8021q: adding VLAN 0 to HW filter on device bond114 00:32:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 956.575650][ T9502] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:55 executing program 0: unshare(0x8020000) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@bcast, @null, @bcast, @remote, @default, @netrom]}, &(0x7f0000000040)=0x40, 0x101c00) r1 = dup2(r0, 0xffffffffffffffff) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000080), 0x80800) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="5ebb4036915ef57c"}}) 00:32:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x1, 0x0) 00:32:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:55 executing program 2: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'macvlan0\x00', {0x4}, 0x50}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x24c40, 0x4) unshare(0x8020400) clone(0x1060000, 0x0, 0x0, 0x0, 0x0) 00:32:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 957.085806][ T9664] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 957.188358][ T9666] device bond115 entered promiscuous mode [ 957.201731][ T9666] 8021q: adding VLAN 0 to HW filter on device bond115 [ 957.259469][ T9666] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:56 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:32:56 executing program 0 (fault-call:7 fault-nth:0): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6b, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:32:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="0807d3b5df9339000000130009000100000000000000eb00804806000000c60041070000001419001300f2a962124ae47a5fbb7b98d8346b003cb8dd38dcc9b186f574a393f45c14f5a8426b0f3e8aaafb97c6b26d3a77f7090000000000000074930673c3763e013c32b868b658ba6f025839c82f4bd9616168087b59fc593ee5a1e1bd96aa8fe200"/147, 0x93}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000003c0)={0x400, 0x1, 'client0\x00', 0xffffffff00000005, "334369278c67be5c", "d5956d754e68a65f3bbcc9e9a3ed561c1d662b38fe6e0ea4b73232a0ecad41a1", 0x8f, 0x401}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:32:56 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$phonet(0x23, 0x2, 0x1) 00:32:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6c, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 957.520194][ T9778] FAULT_INJECTION: forcing a failure. [ 957.520194][ T9778] name failslab, interval 1, probability 0, space 0, times 0 [ 957.553225][ T9783] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 957.577267][ T9778] CPU: 1 PID: 9778 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 957.585898][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.596063][ T9778] Call Trace: [ 957.599375][ T9778] dump_stack+0x197/0x210 [ 957.603727][ T9778] should_fail.cold+0xa/0x15 [ 957.608336][ T9778] ? fault_create_debugfs_attr+0x180/0x180 [ 957.614161][ T9778] ? ___might_sleep+0x163/0x2c0 [ 957.619033][ T9778] __should_failslab+0x121/0x190 [ 957.623995][ T9778] should_failslab+0x9/0x14 [ 957.628505][ T9778] __kmalloc+0x2e0/0x770 [ 957.632758][ T9778] ? __might_fault+0x12b/0x1e0 [ 957.637553][ T9778] ? rw_copy_check_uvector+0x31a/0x390 [ 957.643033][ T9778] rw_copy_check_uvector+0x31a/0x390 [ 957.648472][ T9778] ? is_bpf_text_address+0xac/0x160 [ 957.653683][ T9778] ? lock_downgrade+0x920/0x920 [ 957.658539][ T9778] import_iovec+0xc9/0x410 [ 957.662963][ T9778] ? dup_iter+0x260/0x260 [ 957.667304][ T9778] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 957.673545][ T9778] ? _copy_from_user+0x12c/0x1a0 [ 957.678484][ T9778] copy_msghdr_from_user+0x2ce/0x440 [ 957.683764][ T9778] ? __kasan_check_read+0x11/0x20 [ 957.688865][ T9778] ? move_addr_to_kernel.part.0+0x110/0x110 [ 957.694750][ T9778] ? __fget+0x35d/0x550 [ 957.698891][ T9778] ? find_held_lock+0x35/0x130 [ 957.703672][ T9778] sendmsg_copy_msghdr+0x3d/0x70 [ 957.708633][ T9778] ___sys_sendmsg+0xd0/0x170 [ 957.713242][ T9778] ? sendmsg_copy_msghdr+0x70/0x70 [ 957.713260][ T9778] ? __kasan_check_read+0x11/0x20 [ 957.713284][ T9778] ? __fget+0x37f/0x550 [ 957.723427][ T9778] ? ksys_dup3+0x3e0/0x3e0 [ 957.723442][ T9778] ? find_held_lock+0x35/0x130 [ 957.723457][ T9778] ? get_pid_task+0x11d/0x210 [ 957.723476][ T9778] ? __fget_light+0x1a9/0x230 [ 957.723490][ T9778] ? __fdget+0x1b/0x20 [ 957.723505][ T9778] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 957.723523][ T9778] ? sockfd_lookup_light+0xcb/0x180 [ 957.723541][ T9778] __sys_sendmmsg+0x1bf/0x4d0 [ 957.723563][ T9778] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 957.723583][ T9778] ? __mutex_unlock_slowpath+0xf0/0x6a0 00:32:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000002e40)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}, {0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f00000000c0)="d85a546b8a68af7938d2c24b798cd8fdbe38fa6e1f0893e4acba4255ac045f88b003d584cbc9efae9e65f7a0cb2386f01fe9ae4dce5e61fe26670bf68a4bd596876c0cdff194281a5a703443cd4f9865329eda8d7d075af2", 0x58}, {&(0x7f0000000180)="497bb7a9a8b2f70668774820bbdadbc687f0da94744ab6b48174fcb9acd4a1ade64a833415daee8cb803d6e724d9ef924601817a89fea8649063069deb4ef06e490ee78a07ef5952eb7c85a191c6107f973b5e932bf44e1400694494f2305121d06d389f7fc4", 0x66}, {&(0x7f0000001240)="b66d0446f718476375e0525415c6c61a3e74eea6333e01842b4544a31e00bf3f7fc717a0040896f2c7694fa076341f73ebe916674026f9e70672dfa625e1e19c083769a952a697ea0c566f1e21948a3ba1bc14a56ea319633b", 0x59}], 0x4, &(0x7f00000012c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001300)="b49f128f6e8d9f2313635601652f58741f52748bc0d0969d9c0dc14a0a4ee16de22b7a2fdf786b4892f99362328dc85c99be6d10b8040f618e21ac25c0f6aebb21a22958cf9a60acdd8f58008aec05b217e1d1c8584d5a94b063551ecdb367f8ef8b65e95d3848c94d2dc5c5f3f3fc77aa5866d89aefac58342339d1e2ddd99f6f0d538aae0383db4f867711942793d5f00dceb031eb55af41195ed14ff1a694706ebba2cab861c45af891615339e0ffcbf7d1c14d6ee0b78e0b7c16", 0xbc}, {&(0x7f00000013c0)="ed9e05f7c62fa844b01417452c61b5282715a407521dac4765734b1769ad47381569d3526b82473e6680e6183dbb46b92c30e1623816c5e6cad728fc4e807df3aab4afadfe254ac929259f6e162fceefc7b3b3ab4326ee27d45d882dd4c3201e6fb922aa0380fe8ce0adc92ecd3241a7bac8369705988ff1a31a55450cee0b8a8794942d8c194be8bb1cd0775929207f5fbff627f422bf49ff12d52f232310dd249bc52fa027b94b81fcbb59df6aa249ef64fc6a577d8652a339827092158c582e1685e6e3dff5e1bb8a9b6db4888c868b977575cbd2cebe5db7160d67ec289bdd8ba48f43aceb9829", 0xe9}, {&(0x7f00000014c0)="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", 0xff}, {&(0x7f00000015c0)="f1dab3bf5d6de8900780488ca60dcd5cbc7cf60ce9e585f7c07c2b6879b23386df466d370e07222474438e52e1ce3767d690bbe59a7a9f76cfac899138a543a91dc9d22a44dad75dec62e09115676b7649e2376b", 0x54}, {&(0x7f0000001640)="c1394be82e10289dc7fe0e66c6c4b8490f8dbcfa2684ef136c7db2bf18a2391dd50aedffe578e7f3eba8a6830b0324444374a2c9b313c01d7b7fb83017a30641fa7a5028c59f826f81ddce90a9b18b89fda8760c89438339fe9ccf6a1b9652bb49b65af839e67fe7b6a48c8fe7aa14ad83a99540e5903d9ab571eb3e1f2014d1eefd9e04b1bc8b38a5d506d763b1e4c4d9c18ce93ae2d9d3afa9657d861910aeead0aa723f548fe94d2996079e54b4f004af328d711c333aa831157678effd95a2dc887c04e685786fa6abe0f37641630b4a64b6add90bc7bfdf0d5cf21ef2e6170630cd29c09557c3ee6227305a664d6d352d639f9ea092", 0xf8}, {&(0x7f0000001740)="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", 0xfb}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="25725a7e5a222463d1b2b7c4b532942abb5bfb939189b292bb3b691dbb495626cf410b13b3ada43c5153f235519dfb1840c212a538931cb4296713187241694fb725ad90eba81bbd7c9492dedc3b5b9cec84b0d28034e6f782cd81d96340ee36b1393aaf34ef9236ba530b3e42e435c60680453fa82b878b3e1ffbd2612e1624d08a4f48dbaeab18974d05d9c04a4b7e6771168cb4f90f59c68ae3e976326a3f682e2ff68e9204d8e9df004f085a3ba03d5772732302f3ccf4179bd6e7425378db5d95a92189a950b906abeaa52121eb0e545eb66ecafe143929c6ce04d2", 0xde}], 0x8, &(0x7f00000029c0)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x68, 0x117, 0x2, 0x53, "909154cc466eccd0db1e2284446e3d08aec504f068e655b8c6dd3215df659aa86829de4bd6f0e86ebc06a989eb3b9f7b586885456fb6475f55361276234739b4a506a90df18bc70bac0269cf19c71caa06b2d4"}, @iv={0xc0, 0x117, 0x2, 0xab, "d224ca5483785f36603608313befaa545d57b4d2af16e034cc50f8d578a0b482b5eef22756b0d0c2a50d798bc726beffa99564e78d836749388a5743405d706aecd7861940ef257d2bc91190531cf28a4641dba78a1b2e65740f2d37d5b60facf20dee14a6a81c17cbb1a1d286203ece1a8e28e180bf129c6ed92a03a2068609633e394f2e84638ff84b508f0d825ba7f2636113fd1812b49ccb82e5ef7e8eb761cb4c22f21cfdfa0e8358"}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x1a0, 0x40}, {0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b80)="2cf39cf23bcd862aef7e0e38f259ec64da6d77f3c968edaabaddd8338289c77cc07607e9513bde4a68c10182120f72de9917f14ed9243ca77295ddcec09127b160a979f6d2de91825a6c03eea76f0a90ebdf8d0b1273c556028b91b309d23dff4518f797bce37652b2b5dd1a18f45046907c284f950d81cca70c6da77089dd2e41d5d0659c", 0x85}, {&(0x7f0000002c40)="e4ce0ce7afd166829c77930ecc00e6a8f525b9a337e81033fb25c5e0e3cb4cbb43d88dd92c7d11ffc4eee7000452459961b641c202586b91545d20b8d4ab6ba6f669275a8734673daedf7a6e2e9e6995dbdcab7962782d94358c8a204bf388a18731953494d8b01faeec22ca4ab634bbc6d6a3926f6fab1a8fa03a5c196933c20ca11447e1bf7ef1a71801f151f23c502903b738ffc05ebeff88d47f3a364f7d57dd16a3cd739843850be5e26cad8e6edcbc8e47f0dfe04dfcbb9c36bd162deb6c768646b51649ed8e93be595b6d86f9ab39b7", 0xd3}], 0x2, &(0x7f0000002d80)=[@assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9e6}, @assoc={0x18, 0x117, 0x4, 0x200}, @assoc={0x18, 0x117, 0x4, 0x7f7f0937}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x90, 0xccd76d4ead5422be}], 0x4, 0x0) [ 957.723600][ T9778] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 957.723623][ T9778] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 957.723644][ T9778] ? fput_many+0x12c/0x1a0 [ 957.741620][ T9778] ? fput+0x1b/0x20 [ 957.741636][ T9778] ? ksys_write+0x1cf/0x290 [ 957.741656][ T9778] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 957.741670][ T9778] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 957.741685][ T9778] ? do_syscall_64+0x26/0x790 [ 957.741700][ T9778] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 957.741713][ T9778] ? do_syscall_64+0x26/0x790 [ 957.741732][ T9778] __x64_sys_sendmmsg+0x9d/0x100 [ 957.741749][ T9778] do_syscall_64+0xfa/0x790 [ 957.741765][ T9778] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 957.741777][ T9778] RIP: 0033:0x45af49 [ 957.741798][ T9778] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 957.750500][ T9778] RSP: 002b:00007f067989dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 00:32:56 executing program 0 (fault-call:7 fault-nth:1): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 957.750516][ T9778] RAX: ffffffffffffffda RBX: 00007f067989dc90 RCX: 000000000045af49 [ 957.750525][ T9778] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000006 [ 957.750534][ T9778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 957.750541][ T9778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f067989e6d4 [ 957.750555][ T9778] R13: 00000000004c9b18 R14: 00000000004e2b10 R15: 0000000000000007 [ 957.969642][ T9789] device bond116 entered promiscuous mode [ 958.018721][ T9789] 8021q: adding VLAN 0 to HW filter on device bond116 00:32:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 958.102566][ T9789] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:32:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x3, 0x100}) fsetxattr$security_ima(r2, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000240)=@v2={0x3, 0x1, 0x7, 0xe10, 0x1000, "757c364a851ae5ce7643e439fba9d4a3ad96ccb192ba2655851ca8dc34a73717a42a730d51d402af67d8012eac3467b8905fbf69dd299cd2ade469bd259dec11b4845119236fefd423e005a43114a6edbebe36188246ef608babe1f1a4d17948b9a729ac719f4b92e5e428f8e329f32680981d5790270bc81a07acfb3f5c48f6797e46adac5b1f859c76e12b85fa27e1977677ba72aa34ccf3b8350e8932e2355ca9fb97ba538a31cdf1093d41e056bd4000dd5aded5dd18be98143b48256653582a1d5b4ab4ac7af40e50fcbb210f2d7f47de080f6426479d15fae258a0e708ef546a0f21cf3f63ec1b1b52e9927a19da8c7b23261740291ba3f20fa0075ccc0984a94b49853b0b1d72c77cfae8fc9ed2594a433134eb4b5012ba7847c7aaba4ba3bc8654caa3368881426dbc177383d2e80201e67e5114af2bc7e92fb187ad52f115012cdf81076402418a75f94957b8abee7974aba45611d2bf7f1360b20f829a9be192e4be1df4c1376b11f0c401e941d9bee10677fbb294d04bc32ee028e2476ec0eaff96b7e2a9a7e65858c57cb886205af58d1a9d77438fe31dd6ed6332c07a2ff3716a928bf241098ec36931b3b387113b88c7227553fdef1fae8ee52c1cbd6ba2ceb5bd66bb54b171063c943ec5a1a3a100caf66783a10f55178f95272a8096e2eff3040e34aa635ba052d626aedc3b0f8b2071f62273ab6dc887123533e83ef1ccf74026659d3e51b7b9155488019d669dc8e9b29f3716ac96e5e910d87a07fa6d411566a55f49eb8b61fb9ac91181f379b77a39e4d317035fa04c4918f3004dbf546489967c393879ee644a30932ab359ceb2fa0f978ed1abf8bed3eff5749359791a99f60bbb29e70360a64f4b2e9cb939443a9d9d6c134907692b5d4f2a92e4b5dfd3b4c27d7f2ae77187a1b04bea86d1449b4c67cc84446a7901099f43cae4623e7e7ce7c0f7c3c3ab2269d9fc75e3d1f63e6ce4e6da070c23d8dc60f8b1861bad079e4ce01812d40e7d49734d92ad97cfc512b7940dbafcb51285724dfec185666d49ae270a7df9260c9fe5f34016bbe7bd444333963dd5ae802145978f9abdee63ff5fb48bc486c813128ec614cfe5b6d83ba0e664b80a113f71e34b511317bcf8039cf338bbc46430efe08a6c21b5de2a6187b8e9d294505005d9335133dca4965537bcaa7d787ad8c43c19188ee870077ca61c409546f8e9f47bdcafee65eb24c28b9176cd4acb181d3227a87fa5ca2d546e5382d3a24e0362d59ff83ff0c2c57c0a5a8486ccda512e5e36a9e4f8640a9a9df12e07d739629da2dc2b6b8e3647ddd6ddc6ce9b2225ef8214ef6f3a73103efcfa20aad34645bd4a6ce13300c6b776d8f6d69f09f564b19b41fe2881ce41d8e90f0ff93ab755eb0a5e4c296479796cf90fedd236b43c32e068db195ffca9fc2ccbfdf7e02be786ced864aaa946dafe4dd1f6ff6e88620733801f57bd324160ee7f6319a9b2e4d07e3095c98d4b712dec11eca04d49d7e015854c1c0a7f3f9a13f20bc751ec8fb185c3795f25c313d4c5e3583ca9baff2c40e9bf71a4d3c60a00a5853190adaec1032ee610ce0fd5a5baf8d4faab9a80ea91e17a77d8178b5cd838285cb75ba393252d95ea940c6f8c9d5adee3cf3c1815e4c919b0ba29a698940eba24d316f2452facf5fd4882fb86d4d66b1d6b2269f5c75636fa1e8845de6ba888be8d6f121b63166e6989d46a1cf925e2240b7a9691ebe7251b783a6355e2eb3fde093453b4dc2d25b408548203556939f66ac2590637f4e41e6e00c5e1397d54574c37bedb76aa4c3d57dd7991bd248fc1a30294c18243bc36a1e7b3bee428d802234765c300e4063b04c4d08d410791372827fc581e11de2c99525d28c1facbe85660ce492e1346d28278c8eec11d6f04ee5d8b74a4c5da3447e30756085b212eea29dc44c3d0837c5f08d326bf8c690bfaa4c03d8817fdcbc6a74a758b1eb1de0cea0b6436e3f59134d01b275010f4edc0e74a841d914e4ac9be6df745872d72341f41f14836fdf654507fde553e8c329facda2f5e473ade6e4ffea2a3146cb1155516e4d276459be6424ad170e275d28aa58c45420c951333b629d8707cf985730fdd6b30e42615dd3db76eb067720cb85b63b1ea86111d1912ef20f58470112fcd5ffce263607354b5de9cbeff4bf07a722740f0661a87b1681b758cdecf6308e9bfdf2d6477bcfc595e8cb4bbc7e1f887f90004ff0d8809459cb99d5001ccef7e1206b66a3a43a613bf5738aecd029c9293afb10a2da5cf2c74f5babf144f2fd6e45a4d0870837b21e15527fe5b90b74d310fc5e32740aea168c1a522a613bede743e6d1ee18b1637d4368778bffe28e3cb20e982ffff11736a2e195bd845da4f99cf4796f1740edc9233da9dc3d62d344c82da07a7a2c91b5a8083da701de04e6ddd5d445709ed43f4b99b770f174b953fa8c64cee1db3729f2309993e2d2d2d39b273d8f7291fa343c7334e60c8c18c24c2354a94e13f84d64b7d6a8c4522aba0925edf84599f1598c3f761a1db3399c22752195e7efb9a93494446bed85f8c8d8a565ecfa35c1b85159a6f02dadd9e7aabc6527feff760ae4177f499d1164c3cd62e2ab315dd8c49f222d7466b8f48844afa9b89a8446bf4f9d48c06193a5a6e0a5afe48858348bd32194980b752c497669e093f116b2fe0c67d00017ed81c1032f4cc1e2b047f2fa9c9375ace3abb37924f4c4b7bdd746096305260155ff72dfa3430548277d9622c4b895fc6a366c43e9522cb395816329b8ffccbae000a7810535e8407aa9c42190cede66ac1a18bf5f55b101db037b880d74c561b0257fa758bbbde22edcf9aef34fd87fe1478b25644c122c0e78c9a884e60c195e8037d6df83340e931be632b89099c2bf1fddaffd998bef2a99eb73cd86312b7304a7e959d97b444c1466b042cba19487eecd2cf97ec71035a85f4f59193f476e9ba0aab8fed685d2daecf5ea8ea00512c79fe265d4048cd27ccac3f7692e87639ee4467ad5b0ede5e2208b3f8207c818b619b5e707485f9ee9ebd4a10e8ac89a111a4c4cb15c63b6ac9bb958145e1fa06d21d143101542771a138ccfacb04494d4dc1eefd8a8ff18f9dcb9845fe55fda8f2a6df0562d624aeecce1ceb60d88f9d87c0124705a5465a396b5a99ea8c83fb32193ef37a9e32a8125ee83bb301a54936dff913d7e62655856e3ff8974b7efece78e3f88bbbef9658fdb44b0d43614eae48f9ed3636319c7ac074261237efc9348658749fd50a058c3fe606f9277d795fda374431a1ab369e5752b3e77b5e4d70f245e28cb568b7606a759d6ae74776b79e45a88e1590a69e4c2743f15cb5020d7c40f524cea7e203fa4cc8342f23fdcd0c5c06e19ae7e2c090a3a0186e1c10fc1697800cd90a79f26c4df9b7f9dc0d19ecf2bc4017e11573b358b913c289281bbd6a174a05be9c190b33891a16f84642a94b3ee51731b3ba935ba341379391d197bc898733d35d8496a0254c178f5816fc00dd4de7596c6c1ee8666c182a5434ee5e1b861611763b00e85a9b6965a00b650e0a12a6a3b1d7bc281f95823b6080c92f455e52c39bb61c9f9259acaa752bc8ad144d0d32c9f884493dabd3e7c713ecdd1cb86f8e47cf154f71f2c038f94145dab7f8a67fa747a64cd4ec63e81f0554d093544f52e2ef1e2f9f09027db647e67e00c0aea23751509e732469fcbf280ee306ca4efd1d41279b88058644b97f7a7473360d0066452e835665602120d7cce6f5c4d4438699fc6907b3cf9f668e91b42f34509a50e4f69807130077c8dfe983de2e4472660a6845ecad89ac4432c64d587fa8336d6b78b31d8a6c43724469068b87b33efe60f90aee8cb77082d6384517986591f565378fc0a2cda3f1f4746d746247d5f829b62fd012f5b93cf8f9ba74e2c281db31d0812e3c967037bd1f970f5f3a1845eaa4b7f323dfcf89226fc6bad450e261674f629de756549c1b0acd0fea71bb1e981470a9163a716e872533e3c1ffc9c8b229af39fd75bb6b13803854552b4e92052fe2ffd591ad1efffe68a7797ba4d7512f17c6eb88014b2e2bde09bbb044fb35059cabb686b8ab0822fb193dfbeb77ddb64dadc0f44f7940d8ef134840138ca52c357c7de3da80fb0f1117966f0ae2ddecb05182121d1059d37440e49d08fbbb5a9402ef5a772f67249112f4bfea10b332ac3648638bb9c073bc7126278a3667b841e84cad69107fa16fe8266f95fe8f039a225da9c76c986db851f1a2de8362b23146ba7edbbcdde631ad8c445d49ab827042939c1dd4fa6310047aa05e9ae664599c4535ddb3e0085e7d2691eed2d84647f82ab670a121dff94eeda8ad66f70775aeb577af6b991ce71bf643dd283d807bdcc1408ea55de641b9f9d37504c99b844ba36315c6d0218b4bfbf9dd264f2e4f778111f22ee72e43c7f93d165bf4f0c1707296fd2c14db3f2c17ee793c807e42477f9d4dcb97e53eb488cc43bb8d2c27406ef8ee91be1a8fe8bac8e75a32f10021e06602dfd5cba26566e952f9010c8cba5400c864f6d7d435ee87d4594c59cdb96ceb1a9f3e4a2b5b60f1dc2c384fbab2bd8c1d0b3434e6f27f278dd065ea0ea7486ece41dd659634bd69f52ffbf80a4df1fd1056fe4c9ceda28cf3c37afaba44473247bba561c560f1ffab67b1f06e1dcc3fe0509b47bb90adad0dca139a81e40988a7221ce794e530658f4ecce235d4af9a3847d967f791b47f9e139d86c8177b5868a3df06914a62cc3c07de6c518dd27b7d879e175a237b7bafa6d54acac1e2139ad3e66731eb85133ec8ca06217257519a149daee81817db9e7daa568da9c6c7321937e2ea2a9dd20c1151f0275981f00cd5f0cbc900b35295f5e53d6625b629630112f76fe514095bed8a14f0d6b38d8501dd3d721be00bc1a32818d37742554cf78fd5e18fe53282095fe805843f249622c2396469574c68bae286fd7ba60c065de424482f3392b332fc9a678c8a22eec951ee7c2ca3c84cd21cab498d5f0e0d6929728d808baa87ae1e0efca99ebe61afe03673b91fdc105e995d27b68057f9a1c357b8e2b737e475825483ce92739926c38cd0ba54c5641e526605927d7707d1b492b8e834920300c6cecd82965715468a11b31d8ebf15e7894eafe52af04f78eaaf1cd5c4da16960b2fe70ff6bfc77bdc45e4587c74e6170f12fe4c29c7f2bcf496fdd6c0c44295851f0442207532cc351efde16d7bfa4a91cccde99a10966abb3185c3d428575e9169890a88cbf034229d426bdff12faa1bd98c72e7a5bb6c3020056c59f767b594ea88460d3f8260d3cf01f87d5e6f0288a22f85218cef2e0800edec369a07f6e709c66b74959ec478740c02f71aede623fdbc48f28d02c495f354e316f6c24ddfa8669d8d28730440fda77b075f04d308ebc86995b85ea0fa0c92d4aafc0848ae540fe4439e632ed5a94a380a4408495f91fbcc3c60b4778c59c08d244af460175db4f7908dcd051e51805b7427567dfa801314b4de12bba74f71a51c3927c7d8f86c7c240b40ebbfa640c982d2a529308c13f0979ee1e363702a15bd0bc2b3fa44e6aee7620ecc23eb28b1555ed8df1c4e37809b891912d2c6695faeaa83d9b6e35a9f64179735821655013e83cf2ca95b2b6b1e229ed69c5488c87f1dbafab13d4ce3c481ba591b19381c48f775110b21944f0d4059b942bef99fca8a70c1f3b0fbb1762e62e0fad101a13ecb90ed334d2e7c95d796b0bbe859200c520878fa14d36fd6788fdf02"}, 0x100a, 0x2) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:32:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 958.234122][ T9904] FAULT_INJECTION: forcing a failure. [ 958.234122][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 958.322476][ T9907] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 958.342443][ T9904] CPU: 1 PID: 9904 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 958.351074][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.361136][ T9904] Call Trace: [ 958.364438][ T9904] dump_stack+0x197/0x210 [ 958.368776][ T9904] should_fail.cold+0xa/0x15 [ 958.373380][ T9904] ? release_sock+0x156/0x1c0 [ 958.378075][ T9904] ? fault_create_debugfs_attr+0x180/0x180 [ 958.383904][ T9904] ? ___might_sleep+0x163/0x2c0 [ 958.388778][ T9904] __should_failslab+0x121/0x190 [ 958.393736][ T9904] should_failslab+0x9/0x14 [ 958.398255][ T9904] kmem_cache_alloc_node+0x268/0x740 [ 958.403565][ T9904] __alloc_skb+0xd5/0x5e0 [ 958.407912][ T9904] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 958.413475][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 958.419748][ T9904] ? netlink_autobind.isra.0+0x223/0x300 [ 958.425397][ T9904] netlink_sendmsg+0xa1b/0xea0 [ 958.430182][ T9904] ? netlink_unicast+0x7d0/0x7d0 [ 958.435125][ T9904] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 958.440682][ T9904] ? apparmor_socket_sendmsg+0x2a/0x30 [ 958.446157][ T9904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 958.452438][ T9904] ? security_socket_sendmsg+0x8d/0xc0 [ 958.457913][ T9904] ? netlink_unicast+0x7d0/0x7d0 [ 958.462871][ T9904] sock_sendmsg+0xd7/0x130 [ 958.467311][ T9904] ____sys_sendmsg+0x358/0x880 [ 958.472088][ T9904] ? kernel_sendmsg+0x50/0x50 [ 958.476772][ T9904] ? __fget+0x35d/0x550 [ 958.480944][ T9904] ? find_held_lock+0x35/0x130 [ 958.485732][ T9904] ___sys_sendmsg+0x100/0x170 [ 958.490429][ T9904] ? sendmsg_copy_msghdr+0x70/0x70 [ 958.495914][ T9904] ? __kasan_check_read+0x11/0x20 [ 958.500979][ T9904] ? __fget+0x37f/0x550 [ 958.505155][ T9904] ? ksys_dup3+0x3e0/0x3e0 [ 958.509843][ T9904] ? find_held_lock+0x35/0x130 [ 958.514620][ T9904] ? get_pid_task+0x11d/0x210 [ 958.519310][ T9904] ? __fget_light+0x1a9/0x230 [ 958.523998][ T9904] ? __fdget+0x1b/0x20 [ 958.528077][ T9904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 958.534337][ T9904] ? sockfd_lookup_light+0xcb/0x180 [ 958.539577][ T9904] __sys_sendmmsg+0x1bf/0x4d0 [ 958.544293][ T9904] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 958.549346][ T9904] ? debug_smp_processor_id+0x33/0x18a [ 958.554837][ T9904] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 958.561010][ T9904] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 958.566576][ T9904] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 958.572570][ T9904] ? fput+0x1b/0x20 [ 958.576387][ T9904] ? ksys_write+0x1cf/0x290 [ 958.580902][ T9904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 958.586372][ T9904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 958.591849][ T9904] ? do_syscall_64+0x26/0x790 [ 958.596545][ T9904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 958.603936][ T9904] ? do_syscall_64+0x26/0x790 [ 958.608634][ T9904] __x64_sys_sendmmsg+0x9d/0x100 [ 958.613600][ T9904] do_syscall_64+0xfa/0x790 [ 958.618119][ T9904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 958.624018][ T9904] RIP: 0033:0x45af49 [ 958.627927][ T9904] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 958.647627][ T9904] RSP: 002b:00007f067989dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 958.656054][ T9904] RAX: ffffffffffffffda RBX: 00007f067989dc90 RCX: 000000000045af49 [ 958.664034][ T9904] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000006 00:32:57 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:32:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 958.672016][ T9904] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 958.679999][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f067989e6d4 [ 958.687980][ T9904] R13: 00000000004c9b18 R14: 00000000004e2b10 R15: 0000000000000007 00:32:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x11c, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x11d87b26}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) 00:32:57 executing program 0 (fault-call:7 fault-nth:2): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 958.998292][ T9934] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 959.036406][ T9935] FAULT_INJECTION: forcing a failure. [ 959.036406][ T9935] name failslab, interval 1, probability 0, space 0, times 0 [ 959.069749][ T9935] CPU: 1 PID: 9935 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 959.078390][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.088461][ T9935] Call Trace: [ 959.091775][ T9935] dump_stack+0x197/0x210 [ 959.096121][ T9935] should_fail.cold+0xa/0x15 [ 959.100735][ T9935] ? fault_create_debugfs_attr+0x180/0x180 [ 959.106574][ T9935] ? ___might_sleep+0x163/0x2c0 [ 959.111447][ T9935] __should_failslab+0x121/0x190 [ 959.117473][ T9935] should_failslab+0x9/0x14 [ 959.121998][ T9935] kmem_cache_alloc_node_trace+0x274/0x750 [ 959.127822][ T9935] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 959.133820][ T9935] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 959.139647][ T9935] __kmalloc_node_track_caller+0x3d/0x70 [ 959.145304][ T9935] __kmalloc_reserve.isra.0+0x40/0xf0 [ 959.150694][ T9935] __alloc_skb+0x10b/0x5e0 [ 959.155133][ T9935] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 959.160701][ T9935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.166967][ T9935] ? netlink_autobind.isra.0+0x223/0x300 [ 959.172623][ T9935] netlink_sendmsg+0xa1b/0xea0 [ 959.177413][ T9935] ? netlink_unicast+0x7d0/0x7d0 [ 959.182363][ T9935] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 959.187923][ T9935] ? apparmor_socket_sendmsg+0x2a/0x30 [ 959.193401][ T9935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.199657][ T9935] ? security_socket_sendmsg+0x8d/0xc0 [ 959.205132][ T9935] ? netlink_unicast+0x7d0/0x7d0 [ 959.210085][ T9935] sock_sendmsg+0xd7/0x130 [ 959.214547][ T9935] ____sys_sendmsg+0x358/0x880 [ 959.219332][ T9935] ? kernel_sendmsg+0x50/0x50 [ 959.224029][ T9935] ? __fget+0x35d/0x550 [ 959.228193][ T9935] ? find_held_lock+0x35/0x130 [ 959.233680][ T9935] ___sys_sendmsg+0x100/0x170 [ 959.238379][ T9935] ? sendmsg_copy_msghdr+0x70/0x70 [ 959.243499][ T9935] ? __kasan_check_read+0x11/0x20 [ 959.248536][ T9935] ? __fget+0x37f/0x550 [ 959.252710][ T9935] ? ksys_dup3+0x3e0/0x3e0 [ 959.257131][ T9935] ? find_held_lock+0x35/0x130 [ 959.261908][ T9935] ? get_pid_task+0x11d/0x210 [ 959.266601][ T9935] ? __fget_light+0x1a9/0x230 [ 959.271286][ T9935] ? __fdget+0x1b/0x20 [ 959.275370][ T9935] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 959.281640][ T9935] ? sockfd_lookup_light+0xcb/0x180 [ 959.286855][ T9935] __sys_sendmmsg+0x1bf/0x4d0 [ 959.291557][ T9935] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 959.296738][ T9935] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 959.303019][ T9935] ? fput_many+0x12c/0x1a0 [ 959.307449][ T9935] ? fput+0x1b/0x20 [ 959.311268][ T9935] ? ksys_write+0x1cf/0x290 [ 959.315789][ T9935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.321261][ T9935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.326730][ T9935] ? do_syscall_64+0x26/0x790 [ 959.331425][ T9935] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 959.337502][ T9935] ? do_syscall_64+0x26/0x790 [ 959.342195][ T9935] __x64_sys_sendmmsg+0x9d/0x100 [ 959.347145][ T9935] do_syscall_64+0xfa/0x790 [ 959.351666][ T9935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 959.357563][ T9935] RIP: 0033:0x45af49 [ 959.361466][ T9935] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 959.381079][ T9935] RSP: 002b:00007f067987cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 959.389503][ T9935] RAX: ffffffffffffffda RBX: 00007f067987cc90 RCX: 000000000045af49 [ 959.397481][ T9935] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000006 [ 959.405458][ T9935] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 959.413437][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f067987d6d4 [ 959.421418][ T9935] R13: 00000000004c9b18 R14: 00000000004e2b10 R15: 0000000000000007 [ 959.656304][ T9924] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 959.719923][ T9931] device bond117 entered promiscuous mode [ 959.733551][ T9931] 8021q: adding VLAN 0 to HW filter on device bond117 [ 960.495744][ T140] device bridge_slave_1 left promiscuous mode [ 960.505664][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.515029][ T140] device bridge_slave_0 left promiscuous mode [ 960.521631][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.546437][ T140] device veth1_vlan left promiscuous mode [ 960.553895][ T140] device veth0_vlan left promiscuous mode [ 963.654113][ T140] device hsr_slave_0 left promiscuous mode [ 963.660330][ T140] device hsr_slave_1 left promiscuous mode [ 963.686886][ T140] team0 (unregistering): Port device team_slave_1 removed [ 963.703620][ T140] team0 (unregistering): Port device team_slave_0 removed [ 963.719817][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.738401][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.818061][ T140] bond0 (unregistering): Released all slaves 00:33:08 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:33:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:08 executing program 0 (fault-call:7 fault-nth:3): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d1a, &(0x7f0000000040)=0x61) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:08 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000)=""/139) unshare(0x10000000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) [ 970.076463][ T9988] validate_nla: 2 callbacks suppressed [ 970.076473][ T9988] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 970.093205][ T9990] FAULT_INJECTION: forcing a failure. [ 970.093205][ T9990] name failslab, interval 1, probability 0, space 0, times 0 [ 970.118672][ T9990] CPU: 1 PID: 9990 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 970.127323][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.137387][ T9990] Call Trace: [ 970.140784][ T9990] dump_stack+0x197/0x210 [ 970.145134][ T9990] should_fail.cold+0xa/0x15 [ 970.149749][ T9990] ? fault_create_debugfs_attr+0x180/0x180 [ 970.155584][ T9990] __should_failslab+0x121/0x190 [ 970.160541][ T9990] should_failslab+0x9/0x14 [ 970.165058][ T9990] kmem_cache_alloc+0x47/0x710 [ 970.169834][ T9990] ? lock_acquire+0x190/0x410 [ 970.174529][ T9990] ? netlink_deliver_tap+0x146/0xbe0 [ 970.179833][ T9990] skb_clone+0x154/0x3d0 [ 970.184105][ T9990] netlink_deliver_tap+0x943/0xbe0 [ 970.189240][ T9990] netlink_unicast+0x643/0x7d0 [ 970.194022][ T9990] ? netlink_attachskb+0x870/0x870 [ 970.199145][ T9990] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 970.204879][ T9990] ? __check_object_size+0x3d/0x437 [ 970.210098][ T9990] netlink_sendmsg+0x91c/0xea0 [ 970.214880][ T9990] ? netlink_unicast+0x7d0/0x7d0 [ 970.219830][ T9990] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 970.225402][ T9990] ? apparmor_socket_sendmsg+0x2a/0x30 [ 970.230873][ T9990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.237123][ T9990] ? security_socket_sendmsg+0x8d/0xc0 [ 970.242597][ T9990] ? netlink_unicast+0x7d0/0x7d0 [ 970.247550][ T9990] sock_sendmsg+0xd7/0x130 [ 970.251979][ T9990] ____sys_sendmsg+0x358/0x880 [ 970.256757][ T9990] ? kernel_sendmsg+0x50/0x50 [ 970.261444][ T9990] ? __fget+0x35d/0x550 [ 970.265610][ T9990] ? find_held_lock+0x35/0x130 [ 970.270404][ T9990] ___sys_sendmsg+0x100/0x170 [ 970.275097][ T9990] ? sendmsg_copy_msghdr+0x70/0x70 [ 970.280217][ T9990] ? __kasan_check_read+0x11/0x20 [ 970.285253][ T9990] ? __fget+0x37f/0x550 [ 970.289426][ T9990] ? ksys_dup3+0x3e0/0x3e0 [ 970.293850][ T9990] ? find_held_lock+0x35/0x130 [ 970.298637][ T9990] ? get_pid_task+0x11d/0x210 [ 970.303334][ T9990] ? __fget_light+0x1a9/0x230 [ 970.308030][ T9990] ? __fdget+0x1b/0x20 [ 970.312219][ T9990] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 970.318650][ T9990] ? sockfd_lookup_light+0xcb/0x180 [ 970.324045][ T9990] __sys_sendmmsg+0x1bf/0x4d0 [ 970.328749][ T9990] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 970.333808][ T9990] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 970.340065][ T9990] ? fput_many+0x12c/0x1a0 [ 970.344495][ T9990] ? fput+0x1b/0x20 [ 970.348317][ T9990] ? ksys_write+0x1cf/0x290 [ 970.352842][ T9990] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 970.358322][ T9990] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 970.363802][ T9990] ? do_syscall_64+0x26/0x790 [ 970.368492][ T9990] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.374574][ T9990] ? do_syscall_64+0x26/0x790 [ 970.379274][ T9990] __x64_sys_sendmmsg+0x9d/0x100 [ 970.384232][ T9990] do_syscall_64+0xfa/0x790 [ 970.388759][ T9990] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.394662][ T9990] RIP: 0033:0x45af49 [ 970.398566][ T9990] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 970.418181][ T9990] RSP: 002b:00007f067987cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 00:33:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 970.426608][ T9990] RAX: ffffffffffffffda RBX: 00007f067987cc90 RCX: 000000000045af49 [ 970.434587][ T9990] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000006 [ 970.442654][ T9990] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 970.450734][ T9990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f067987d6d4 [ 970.458716][ T9990] R13: 00000000004c9b18 R14: 00000000004e2b10 R15: 0000000000000007 [ 970.489186][ T9987] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4c01, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 970.609047][ T9991] device bond118 entered promiscuous mode [ 970.644904][ T9991] 8021q: adding VLAN 0 to HW filter on device bond118 00:33:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="c63ec70207e2f25bb0bfa1583e5503ad614d7bc0642abe671d129f27be3aa525a3c5f51b281ec1c53dfd3e9685e0e869d28126a4ae9039f152bbeb1ddf0e5ebcfe87012b568164f71f8f9b530a0a5db29344e2b5cb192a3fc8905787eedae53060684a2b0546ce65b01b41f8a5563ba060103c0ae776ff3cbe669e2ca2a81ea59cab7968d01baf2b386f558b231b96e83ae3d5373212bd0a5d581aef9762909ffa9faa9c38ea3e2d19e75a4b7c86ae98d7527223b53ef6f827bd"}, {&(0x7f0000000300)="a8101ba3ea68658225fcd09e546e72dbfdebbc0320be1a35f01514ac7daced534555d54fffc62e49d70bbce7dda10a57803b8f7822be39ea6f1f210bfdddd51846fb87a18b5b700891237dba68add36b9bf0023649274fd0c30e4e93c253f6ca3ccff96294546bebfbbc8646e7765c06be32daa7402d09325084e3a839a005e887598eb4963a1b60d1cd2f5399792eb59801eeca582264e28d314b1188ca450d415d6c8b4ea5ae23fca2e8e0fabac81ee08f07db342ee068e3"}, {&(0x7f00000003c0)="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", 0x3}, {&(0x7f00000013c0)="66a08ae86b38153753410fbb64414a6c8b9b89527526bbb75b1373ca5a3331a82152b1fbbbfd487ef3c16dddacb51f9871bbf3101614e378ed4811df6692f3fc6dd5d1f57cf13e6c242a80f439ca5e4bffff7aeb32195f674779c21ddd650000000000000000b6c50fbf8ae4629ae7d10600e28ffe1d777151e3af56f404dae39a9199ae0ae70f23323b06176e1e7ce486ccbafa79b5f8e036d3805ed9da8aea1b43b316a0910c399661f485356300"/185}, {&(0x7f0000001480)="52e19d6f2509050c1d317a8bd6ec5f4c6895a8c79e7aa908b63035b98dc418aff5682c4f3ad0ae610e125f271f6002186079edc860db3b5fe148c936a71a029bde5f83dcbd4e10ca92b4b7396c0de2b59c081f286c5f9d50f6ae33f1e5af87a84b6726592051325fc490607d94bc869b8586ae3e4c57657379386ed29bfe6352fff85e84a44a"}], 0x10000000000002e7) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x1) 00:33:09 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x3, 0xff75, 0x1000, {0x6, 0x7}, 0x4, 0x2}) listxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=""/19, 0x13) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}]) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) [ 970.702535][ T9987] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:09 executing program 0 (fault-call:7 fault-nth:4): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:09 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:33:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4c80, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 971.161910][T10118] FAULT_INJECTION: forcing a failure. [ 971.161910][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 971.186936][T10118] CPU: 1 PID: 10118 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 971.195649][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.205709][T10118] Call Trace: [ 971.210500][T10118] dump_stack+0x197/0x210 [ 971.214850][T10118] should_fail.cold+0xa/0x15 [ 971.219460][T10118] ? fault_create_debugfs_attr+0x180/0x180 [ 971.225284][T10118] ? ___might_sleep+0x163/0x2c0 [ 971.230192][T10118] __should_failslab+0x121/0x190 [ 971.235147][T10118] should_failslab+0x9/0x14 [ 971.239649][T10118] kmem_cache_alloc_node_trace+0x274/0x750 [ 971.245462][T10118] ? finish_task_switch+0x147/0x750 [ 971.250675][T10118] ? lock_downgrade+0x920/0x920 [ 971.255542][T10118] __kmalloc_node+0x3d/0x70 00:33:10 executing program 2: unshare(0x8020000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x79c69dc2e95bc571) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') 00:33:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4c81, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:10 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000180)={0xa, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x80000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x20010, r3, 0x8d000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 971.260164][T10118] qdisc_alloc+0xbb/0x9c0 [ 971.264507][T10118] ? do_raw_read_unlock+0x3f/0x70 [ 971.269551][T10118] ? _raw_read_unlock+0x28/0x40 [ 971.274426][T10118] qdisc_create+0xec/0x1210 [ 971.278929][T10118] ? nla_memcpy+0xb0/0xb0 [ 971.283267][T10118] ? tc_get_qdisc+0xc10/0xc10 [ 971.287988][T10118] ? __nla_parse+0x43/0x60 [ 971.292411][T10118] tc_modify_qdisc+0x52a/0x1cd0 [ 971.297267][T10118] ? qdisc_create+0x1210/0x1210 [ 971.302152][T10118] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 971.308390][T10118] ? qdisc_create+0x1210/0x1210 [ 971.313246][T10118] rtnetlink_rcv_msg+0x45e/0xaf0 [ 971.318191][T10118] ? rtnl_bridge_getlink+0x910/0x910 [ 971.323491][T10118] ? netlink_deliver_tap+0x228/0xbe0 [ 971.328775][T10118] ? find_held_lock+0x35/0x130 [ 971.333547][T10118] netlink_rcv_skb+0x177/0x450 [ 971.338312][T10118] ? rtnl_bridge_getlink+0x910/0x910 [ 971.343625][T10118] ? netlink_ack+0xb50/0xb50 [ 971.348216][T10118] ? __kasan_check_read+0x11/0x20 [ 971.353231][T10118] ? netlink_deliver_tap+0x24a/0xbe0 [ 971.358505][T10118] rtnetlink_rcv+0x1d/0x30 [ 971.362920][T10118] netlink_unicast+0x58c/0x7d0 [ 971.367693][T10118] ? netlink_attachskb+0x870/0x870 [ 971.372809][T10118] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 971.378538][T10118] ? __check_object_size+0x3d/0x437 [ 971.383748][T10118] netlink_sendmsg+0x91c/0xea0 [ 971.388590][T10118] ? netlink_unicast+0x7d0/0x7d0 [ 971.393519][T10118] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 971.399053][T10118] ? apparmor_socket_sendmsg+0x2a/0x30 [ 971.404509][T10118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 971.410752][T10118] ? security_socket_sendmsg+0x8d/0xc0 [ 971.416212][T10118] ? netlink_unicast+0x7d0/0x7d0 [ 971.421155][T10118] sock_sendmsg+0xd7/0x130 [ 971.425588][T10118] ____sys_sendmsg+0x358/0x880 [ 971.430404][T10118] ? kernel_sendmsg+0x50/0x50 [ 971.435144][T10118] ? __fget+0x35d/0x550 [ 971.439357][T10118] ? find_held_lock+0x35/0x130 [ 971.444238][T10118] ___sys_sendmsg+0x100/0x170 [ 971.448932][T10118] ? sendmsg_copy_msghdr+0x70/0x70 [ 971.454040][T10118] ? __kasan_check_read+0x11/0x20 [ 971.459112][T10118] ? __fget+0x37f/0x550 [ 971.463275][T10118] ? ksys_dup3+0x3e0/0x3e0 [ 971.467837][T10118] ? find_held_lock+0x35/0x130 [ 971.472608][T10118] ? get_pid_task+0x11d/0x210 [ 971.477291][T10118] ? __fget_light+0x1a9/0x230 [ 971.482425][T10118] ? __fdget+0x1b/0x20 [ 971.486507][T10118] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 971.492753][T10118] ? sockfd_lookup_light+0xcb/0x180 [ 971.498007][T10118] __sys_sendmmsg+0x1bf/0x4d0 [ 971.502693][T10118] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 971.507735][T10118] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 971.514096][T10118] ? fput_many+0x12c/0x1a0 [ 971.518499][T10118] ? fput+0x1b/0x20 [ 971.522312][T10118] ? ksys_write+0x1cf/0x290 [ 971.526821][T10118] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 971.532283][T10118] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 971.537788][T10118] ? do_syscall_64+0x26/0x790 [ 971.542569][T10118] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.548641][T10118] ? do_syscall_64+0x26/0x790 [ 971.553328][T10118] __x64_sys_sendmmsg+0x9d/0x100 [ 971.558274][T10118] do_syscall_64+0xfa/0x790 [ 971.562788][T10118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.568706][T10118] RIP: 0033:0x45af49 [ 971.572805][T10118] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 971.592436][T10118] RSP: 002b:00007f067987cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 971.600864][T10118] RAX: ffffffffffffffda RBX: 00007f067987cc90 RCX: 000000000045af49 00:33:10 executing program 0 (fault-call:7 fault-nth:5): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 971.608840][T10118] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000006 [ 971.616858][T10118] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 971.624832][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f067987d6d4 [ 971.632821][T10118] R13: 00000000004c9b18 R14: 00000000004e2b10 R15: 0000000000000007 [ 971.649272][T10219] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 971.877916][T10223] device bond119 entered promiscuous mode [ 971.912271][T10223] 8021q: adding VLAN 0 to HW filter on device bond119 00:33:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 971.957008][T10301] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 971.969042][T10269] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 971.980813][T10302] FAULT_INJECTION: forcing a failure. [ 971.980813][T10302] name failslab, interval 1, probability 0, space 0, times 0 [ 972.044040][T10302] CPU: 0 PID: 10302 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 972.052724][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.062787][T10302] Call Trace: [ 972.066090][T10302] dump_stack+0x197/0x210 [ 972.070611][T10302] should_fail.cold+0xa/0x15 [ 972.075234][T10302] ? fault_create_debugfs_attr+0x180/0x180 [ 972.081052][T10302] ? ___might_sleep+0x163/0x2c0 [ 972.085934][T10302] __should_failslab+0x121/0x190 [ 972.090877][T10302] should_failslab+0x9/0x14 [ 972.095373][T10302] kmem_cache_alloc_trace+0x2d3/0x790 [ 972.100735][T10302] ? is_dynamic_key+0x11d/0x1c0 [ 972.105572][T10302] tcf_block_get_ext+0x886/0x16b0 [ 972.110599][T10302] tcf_block_get+0xb5/0x100 [ 972.115127][T10302] ? tcf_block_get_ext+0x16b0/0x16b0 [ 972.120395][T10302] ? blackhole_dequeue+0x10/0x10 [ 972.125415][T10302] ? prio_tune+0xcb0/0xcb0 [ 972.129902][T10302] prio_init+0x3d/0x80 [ 972.134147][T10302] ? prio_tune+0xcb0/0xcb0 [ 972.138551][T10302] qdisc_create+0x4ee/0x1210 [ 972.143129][T10302] ? tc_get_qdisc+0xc10/0xc10 [ 972.147790][T10302] ? __nla_parse+0x43/0x60 [ 972.152190][T10302] tc_modify_qdisc+0x52a/0x1cd0 [ 972.157034][T10302] ? qdisc_create+0x1210/0x1210 [ 972.161913][T10302] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 972.168168][T10302] ? qdisc_create+0x1210/0x1210 [ 972.173009][T10302] rtnetlink_rcv_msg+0x45e/0xaf0 [ 972.177964][T10302] ? rtnl_bridge_getlink+0x910/0x910 [ 972.183240][T10302] ? netlink_deliver_tap+0x228/0xbe0 [ 972.188520][T10302] ? find_held_lock+0x35/0x130 [ 972.193304][T10302] netlink_rcv_skb+0x177/0x450 [ 972.198062][T10302] ? rtnl_bridge_getlink+0x910/0x910 [ 972.203351][T10302] ? netlink_ack+0xb50/0xb50 [ 972.207952][T10302] ? __kasan_check_read+0x11/0x20 [ 972.212972][T10302] ? netlink_deliver_tap+0x24a/0xbe0 [ 972.218261][T10302] rtnetlink_rcv+0x1d/0x30 [ 972.222661][T10302] netlink_unicast+0x58c/0x7d0 [ 972.227413][T10302] ? netlink_attachskb+0x870/0x870 [ 972.232511][T10302] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 972.238235][T10302] ? __check_object_size+0x3d/0x437 [ 972.243447][T10302] netlink_sendmsg+0x91c/0xea0 [ 972.248221][T10302] ? netlink_unicast+0x7d0/0x7d0 [ 972.253192][T10302] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 972.258771][T10302] ? apparmor_socket_sendmsg+0x2a/0x30 [ 972.264226][T10302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 972.270456][T10302] ? security_socket_sendmsg+0x8d/0xc0 [ 972.275898][T10302] ? netlink_unicast+0x7d0/0x7d0 [ 972.280827][T10302] sock_sendmsg+0xd7/0x130 [ 972.285258][T10302] ____sys_sendmsg+0x358/0x880 [ 972.290037][T10302] ? kernel_sendmsg+0x50/0x50 [ 972.294709][T10302] ? __fget+0x35d/0x550 [ 972.298867][T10302] ? find_held_lock+0x35/0x130 [ 972.303633][T10302] ___sys_sendmsg+0x100/0x170 [ 972.308308][T10302] ? sendmsg_copy_msghdr+0x70/0x70 [ 972.313415][T10302] ? __kasan_check_read+0x11/0x20 [ 972.318450][T10302] ? __fget+0x37f/0x550 [ 972.322605][T10302] ? ksys_dup3+0x3e0/0x3e0 [ 972.327019][T10302] ? find_held_lock+0x35/0x130 [ 972.331791][T10302] ? get_pid_task+0x11d/0x210 [ 972.336455][T10302] ? __fget_light+0x1a9/0x230 [ 972.341125][T10302] ? __fdget+0x1b/0x20 [ 972.345182][T10302] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 972.351426][T10302] ? sockfd_lookup_light+0xcb/0x180 [ 972.356644][T10302] __sys_sendmmsg+0x1bf/0x4d0 [ 972.361311][T10302] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 972.366336][T10302] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 972.372569][T10302] ? fput_many+0x12c/0x1a0 [ 972.376982][T10302] ? fput+0x1b/0x20 [ 972.380776][T10302] ? ksys_write+0x1cf/0x290 [ 972.385271][T10302] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 972.390823][T10302] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 972.396288][T10302] ? do_syscall_64+0x26/0x790 [ 972.400954][T10302] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.407034][T10302] ? do_syscall_64+0x26/0x790 [ 972.411735][T10302] __x64_sys_sendmmsg+0x9d/0x100 [ 972.416674][T10302] do_syscall_64+0xfa/0x790 [ 972.421162][T10302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.427046][T10302] RIP: 0033:0x45af49 [ 972.430937][T10302] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 972.450544][T10302] RSP: 002b:00007f067987cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 972.458955][T10302] RAX: ffffffffffffffda RBX: 00007f067987cc90 RCX: 000000000045af49 [ 972.466917][T10302] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000006 [ 972.474898][T10302] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 972.482876][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f067987d6d4 00:33:11 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x21, 0x3, 0x4, 0x10, 0x0, {0x77359400}, {0x1, 0x1, 0x5, 0x9b, 0x2, 0x2, "900eeaff"}, 0x4a4, 0x3, @fd, 0x8668, 0x0, 0xffffffffffffffff}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 00:33:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 972.490858][T10302] R13: 00000000004c9b18 R14: 00000000004e2b10 R15: 0000000000000007 00:33:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 972.680721][T10358] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:11 executing program 2: unshare(0x8020000) clone(0x10062901, 0x0, 0x0, 0x0, 0x0) 00:33:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xc000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:11 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:33:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:11 executing program 1 (fault-call:7 fault-nth:0): r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)={0x400, {{0xa, 0x4e23, 0x9, @empty, 0x101}}, 0xbea154cc2dc98d31, 0x5, [{{0xa, 0x4e21, 0x6, @mcast2}}, {{0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x4}, 0xd47}}, {{0xa, 0x4e20, 0x8, @mcast2, 0xfffffffe}}, {{0xa, 0x4e22, 0x0, @mcast2, 0x9}}, {{0xa, 0x4e22, 0x67, @remote, 0x10000}}]}, 0x310) 00:33:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 973.348130][T10493] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:12 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8000, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="c9cbdeb154fdbed76b736e0e1e01db61221d1d25b5efce1dd2107040db4223b94c78bc7ccda678b6e820eca38e7ec6e1c6bf5ace5dcedb1afaeb477f2b2239b3b98bdb33511eeadd0bb80e007e14a919317f7b08f24e22ee8687e70f3001aae64305ac72ac8ac8a9d338ac73cdbed1e48491ba77a3ad73c6305f0dc889c9526411e75281c358", 0x86}, {&(0x7f0000000180)="cf48172147350e22f4b854c8482e9a1eed885bc657bb57f2b18cdbca4a1884879932f3e93cf476c6c955a18285b3d5dcb09b97d2a79166a01f3c42cd2c45523e585fe6763c87678c8420448f8dcdce9d04a9f86be98221e1415ae4135ed944570cef6472893b6b80dab7219bbf19d1eda15f1279939cd78f0253a1e7eca0e132cf674a6765633c7b4cfe5fb53249ab4529bd5ee5af65ee9f8492b75ca860baee5df07c31ac004bb4bb10f42211367286c6957cc0597e1649d052c0ee50fe3cb050efa3965c19a498816ddc9b13859f33958397e30e5e846dd8455ff939257956be3a6ce12f1d790c325aa50cf29d69347437", 0xf2}, {&(0x7f0000000280)="1ba7fba98276b4bf4a974a80a8ef27ca9e8cfdd2d8576ed3966d1a381fc7a28965a1", 0x22}], 0x3) unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:33:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 973.754485][T10536] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0xe, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 973.869898][T10486] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 973.884787][T10574] device bond120 entered promiscuous mode [ 973.964062][T10574] 8021q: adding VLAN 0 to HW filter on device bond120 00:33:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:13 executing program 2: unshare(0x8020000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r4, 0x7fff, 0x0, 0x1, 0x400}, &(0x7f0000000080)=0x18) 00:33:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5413, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r7}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r9}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r11}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002d00)={'team0\x00', r11}) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0xcff, 0x10000000280, r14}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002d40)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000002e40)=0xe8) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r16, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r17}) r18 = socket$alg(0x26, 0x5, 0x0) bind$alg(r18, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r19 = accept4(r18, 0x0, 0x0, 0x0) close(r19) getsockname$packet(r19, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002f40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004d80)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',B\x00\x00', @ANYRES16=r2, @ANYBLOB="080027bd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="f000020040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r4, @ANYBLOB="380001002400667f8ea7e3babd33b71af60100616374697665706f72740000000000000000000000000000000020800000000048669faef05d6ffb050003000300000008000400", @ANYRES32=r5, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000050003100600000004000474e26ed1197c040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="00fdff88", @ANYRES32=r12, @ANYBLOB="fc00020044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000700060606000000ebf98106b20000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r14, @ANYBLOB="400001002400010071756575655f69640000000000000000000002000000000000000000000000000500030003000000080c00000000000000000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="c800020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r21, @ANYBLOB], 0x32c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r22 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r22, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 974.299616][ T140] tipc: TX() has been purged, node left! [ 974.307030][ T140] tipc: TX() has been purged, node left! [ 974.522753][ T140] tipc: TX() has been purged, node left! [ 974.580426][T10806] device bond121 entered promiscuous mode 00:33:13 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0xc800, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 974.631335][T10806] 8021q: adding VLAN 0 to HW filter on device bond121 00:33:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:13 executing program 2: unshare(0x8020000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800006, 0x140010, 0xffffffffffffffff, 0xde01f000) close(r4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x5, 0x200, 0x6, 0xffff, 0x2, 0x6, 0x2, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r5, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xff, @loopback, 0x4}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x10) 00:33:13 executing program 2: unshare(0x8020000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2480, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xc3007b34d6091565, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x63, 0x6, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @default]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:33:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:14 executing program 2: unshare(0x8020000) clone(0x110206000, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x60, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f0000000480)=""/83, 0x53, 0x0) r3 = add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="c76ba0e291a65425bbddea109973366643d4a0e681e9adc3f6248a553fe73c4c90c1a4a481531530ce5a530e937c140cd0676b52fc311e2983f126ba9b7fe252e890228f9b6e20e7e99cc0477e2a1412d231dba2ea2ec25bb864d81824f6f994a9ffb630bbf43498e75efadf47b60c03d46a45bbcb0b1a", 0x77, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, r3) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x420440, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f0000000500)=0x4) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) [ 976.136225][T10867] validate_nla: 3 callbacks suppressed [ 976.136237][T10867] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x10000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:15 executing program 2: unshare(0x80000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0xa, 0x5, 0x4, "bb074c287beb390d8d22c7278a86306c94fbb8e55ce1051ea268ca7f995cb5ee95d45b77e31f9f116cbf62ec8e7f05f2de0e7adc11a90cdf59f764017d1d4282", "fbbbfeae28ce4321657018b31eab12c855bd4b5a26ac04afd61148c47360c47be192b2367b795009b926276b01bcb436dc59507e7e03219050373c5cbe38da07", "7f582910aca16e1f0c250a3405f6b1d4fc201174145ba98e25e06d3361295b8a", [0xfffffffffffffff9, 0x10001]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:33:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) listen(r4, 0xa98) 00:33:15 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r1) 00:33:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0xf000, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 976.391402][T11207] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:15 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101600, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r1 = socket(0x3a, 0x4, 0xff) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:33:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 977.002978][T11213] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:16 executing program 2: unshare(0x8020000) clone(0x10162101, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_AIE_ON(r0, 0x7001) [ 977.305774][T11252] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 977.425642][T11307] device bond122 entered promiscuous mode [ 977.444123][T11307] 8021q: adding VLAN 0 to HW filter on device bond122 [ 977.469386][T11443] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x0, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x20000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r4, 0xf, 0x8}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r5 = socket(0x10, 0x80002, 0x0) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:16 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 978.088467][T11569] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 978.551005][T11556] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 978.703383][T11565] device bond123 entered promiscuous mode [ 978.741313][T11565] 8021q: adding VLAN 0 to HW filter on device bond123 [ 978.764272][T11567] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 978.781641][T11677] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:17 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, r1) 00:33:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0xa4) unshare(0x8020000) clone(0x8892178ed66db0e1, 0x0, 0x0, 0x0, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, {0x8, 0x2, 0x3f, 0x1, 0x3f, 0xff}}, 0x8) 00:33:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x2, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:18 executing program 2: unshare(0x60000a00) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5603, &(0x7f0000000500)) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r3, 0x5603, &(0x7f0000000500)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) close(r4) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0xee, 0x28eabd3c, r4, 0x0, &(0x7f0000000040)={0x990a60, 0x7, [], @string=&(0x7f0000000000)=0x3}}) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f00000000c0)=""/151) [ 979.606036][T11807] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 979.902990][T11791] device bond124 entered promiscuous mode 00:33:18 executing program 2: unshare(0x8020000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) wait4(r1, &(0x7f0000000080), 0x2, &(0x7f00000000c0)) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r4}) [ 979.971898][T11791] 8021q: adding VLAN 0 to HW filter on device bond124 00:33:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x3, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:19 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, r1) 00:33:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x40000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5425, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:19 executing program 2: unshare(0xa8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:33:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5427, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 981.121965][T12053] device bond125 entered promiscuous mode 00:33:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) fgetxattr(r3, &(0x7f0000000040)=@random={'os2.', 'cpusetselfvboxnet1&#*\x00'}, &(0x7f0000000240)=""/182, 0xb6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x4, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:19 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) [ 981.192328][T12053] 8021q: adding VLAN 0 to HW filter on device bond125 [ 981.273480][T12060] validate_nla: 4 callbacks suppressed [ 981.273490][T12060] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 981.458803][T12066] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x5, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x48000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:20 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4c4800, 0x0) getgid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = dup(r1) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getgid() fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r4, 0x800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) [ 982.404425][T12183] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:21 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000000, r1) 00:33:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x36, 0xff, "ffa7e7da8cccc23b2400fc224db0b6232b6377bf0eb6525abb469638699f7c85c960bcad5eb216612debc21804d1"}, &(0x7f0000000100), 0x2400) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:21 executing program 2: unshare(0x8020000) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) [ 982.564611][T12185] device bond126 entered promiscuous mode [ 982.579712][T12311] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 982.649299][T12185] 8021q: adding VLAN 0 to HW filter on device bond126 00:33:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:21 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) unshare(0x8020000) truncate(&(0x7f0000000040)='./file0\x00', 0x8) [ 982.693107][T12313] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x6, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 982.777320][T12317] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:21 executing program 2: unshare(0x8020000) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000015c0)={0x7a, 0xfffffffffffffffd, 0x7, 0xa8, @scatter={0x8, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/182, 0xb6}, {&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/201, 0xc9}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000001640)=""/4111, 0x100f}, {&(0x7f0000001440)}]}, &(0x7f0000001500)="5371c8ac10154d7a5c", &(0x7f0000001540)=""/39, 0x1ff, 0x90644835143edae1, 0x3, &(0x7f0000001580)}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000440)={0x0, 0x0, 0x30, 0x6, 0xffffffff7fffffff}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000004c0)={r5, 0xd1}, &(0x7f0000000500)=0x8) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:33:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300d109000100000000000000eb0080480014190013000023edffff824c70db0a286af3221da6fdb53edf40fd8d699d4e837fe8cefd1b328ca3803bc45455214f81511037e5116f1d05000000f0084ef45f74d8785d1a4b337b8f06dbb016fc29a25eeb95dc00d9ff67128725", 0x71}], 0x1) r2 = socket(0x10, 0x80002, 0x0) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\xe3\x00', 0xfffffffffffffff9) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 983.180081][T12394] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 983.289225][T12433] device bond127 entered promiscuous mode [ 983.301676][T12433] 8021q: adding VLAN 0 to HW filter on device bond127 [ 983.396971][T12394] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x8, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5441, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:22 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000000000000, r1) 00:33:22 executing program 5: r0 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @loopback}, &(0x7f0000000100)=0xff07) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', r5}) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5450, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2b6800, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000b9a55900010900042dbd7000fddbdf25e2f2fea43cedd65cd80506fa9aaea01b337a3100000000080005000000001f080003000000009c1c00020006000300000100"], 0x4c}, 0x1, 0x0, 0x0, 0x20048090}, 0x800) unshare(0x8020000) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000180)) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 00:33:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x9, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 984.252998][T12598] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:23 executing program 2: unshare(0x8020000) clone(0x20a48400, 0x0, 0x0, 0x0, 0x0) [ 984.497177][T12657] device bond128 entered promiscuous mode 00:33:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}, {&(0x7f0000000240)="767887be518b4dcbb3c6553d7eda18d3deb7db531ddf8beb1bcace58c4321f25a366346cb5cc45d166ed48fd7af6d967f3aafcfdc227a924055959964023c722e1f4e2d50364784e4f12c142921b187cb56ffd1e63f8a14b2a5dd80067a493667f5aa4089fb85c910100053d83e8afd8ab23d9a43eaf826e914c1fd83c5f3e9d66e5", 0x82}, {&(0x7f0000000300)="4cec014cf364760ec825dc5e3ae21e4cb32f76a09c154ec05e950271ed88430aef7d6747e1b8dc086f0b9b4e6d5aef9c2e8051a8f5488deb54d7f64a15170b3120f53688269d8c156ee1e763870077fa5df571a4b2e52d88b8cd72409d5afe3f87eb622d6d6f59c05f0023345aaf815a5589aa2acdaa8a3a2e14832bea0ec5f90b1beb07acc013960e2810750339b6a35cbf80020c3ae02dc1e71a91ff40bec61b4a426341da5a6a32e5fac324df4a68fb033b123df85c099983ff7ee301794a6b2a9d5191ee3979d3ef6b8ae2ff9f5b6d26262865221ee2e7362b9ccb48638e6b12e9755d0c94ab522093916cfd1285856064fea39b", 0xf6}], 0x3) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffffffffffffd9}], 0x492492492492805, 0x0) 00:33:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 984.621240][T12657] 8021q: adding VLAN 0 to HW filter on device bond128 00:33:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xa, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:23 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000089a000/0x2000)=nil, 0x2000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffd2) sysfs$2(0x2, 0x2, &(0x7f0000000000)=""/51) unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) [ 985.197744][T12693] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 985.388645][ T140] device bridge_slave_1 left promiscuous mode [ 985.399011][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.477645][ T140] device bridge_slave_0 left promiscuous mode [ 985.486011][ T140] bridge0: port 1(bridge_slave_0) entered disabled state 00:33:24 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xffffffff00000000, r1) 00:33:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x545d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xb, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:24 executing program 2: unshare(0x8020000) clone(0x10022101, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) fchmod(r0, 0x24) 00:33:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x17, 0x0, 0x1) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 985.561514][ T140] device veth1_vlan left promiscuous mode [ 985.567805][ T140] device veth0_vlan left promiscuous mode 00:33:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:24 executing program 2: unshare(0x8020000) clone(0x10066101, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6463}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 00:33:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:25 executing program 2: unshare(0x3e060880) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x4, 0x3) 00:33:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:26 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:26 executing program 2: unshare(0x8020000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x3c5501, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x202020, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r5, 0xfffff43f}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={r6, 0xf54}, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x4, 0x0, 0x10001, 0x20, 0x1000}) r7 = socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) getpeername$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x0, @phonet={0x23, 0x3, 0xff, 0x1}, @ethernet={0x6, @broadcast}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0x7, 0x0, 0x0, 0x0, 0x755, &(0x7f0000000180)='veth0_vlan\x00', 0x8001, 0x3f, 0x5e33}) [ 990.336867][ T140] bond1 (unregistering): Released all slaves [ 990.396334][ T140] device hsr_slave_0 left promiscuous mode [ 990.403129][ T140] device hsr_slave_1 left promiscuous mode [ 990.429698][ T140] team0 (unregistering): Port device team_slave_1 removed [ 990.446573][ T140] team0 (unregistering): Port device team_slave_0 removed [ 990.459952][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.477461][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.559244][ T140] bond0 (unregistering): Released all slaves 00:33:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xc, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 990.673965][T12835] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 990.700993][T13060] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:29 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 00:33:29 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000100)=""/66, 0x42, 0x2000, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) 00:33:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x40000, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x5, 0x6) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 990.933086][T13308] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:29 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x2080, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-x86\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) close(r6) r7 = accept4(r6, 0x0, 0x0, 0xc00) close(r7) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r8, &(0x7f0000000280), 0x1033b) fdatasync(r8) ioctl$SOUND_PCM_READ_CHANNELS(r8, 0x80045006, &(0x7f0000000340)) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000090020000d800000000000000d80000000000000000000000c0010000c0010000c0010000c0010000c001000003000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/48], @ANYBLOB="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"/672], 0x2f0) socket$inet_tcp(0x2, 0x1, 0x0) [ 991.086677][T13416] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xe, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 991.333499][T13422] device bond129 entered promiscuous mode [ 991.339556][T13422] 8021q: adding VLAN 0 to HW filter on device bond129 [ 991.353916][T13428] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 991.376606][T13422] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:30 executing program 2: unshare(0x8020000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = dup2(0xffffffffffffffff, r1) getpeername$netrom(r2, &(0x7f00000035c0)={{0x3, @null}, [@default, @bcast, @bcast, @default, @netrom, @null, @netrom, @rose]}, &(0x7f0000003640)=0x48) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x400, 0x0, 'client1\x00', 0xffffffff80000003, "5f812c7d89738d03", "ffb12f5dd2615569ea033174f12270c5496b9e957098cfedf25b42d9caef0b07", 0x1000, 0xff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) write$binfmt_elf32(r0, &(0x7f0000001940)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x7f, 0x5, 0x1, 0x1f, 0x2, 0x3e, 0x5, 0x19, 0x38, 0x1dc, 0x40, 0x7ff, 0x20, 0x2, 0x1, 0x1, 0xffff}, [{0x6474e551, 0x6, 0x3, 0x26f7, 0x5, 0x0, 0xffffff00, 0x1}], "f157f4e6e08915f731de4ae362ef9de07d6a5ae3e238d45b8f4cf81bd08bf7db6655"}, 0x7a) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001880)={&(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8, &(0x7f0000001780)=""/195, 0xc3}, 0x10063) bind$llc(r4, &(0x7f00000001c0)={0x1a, 0x5, 0x7, 0xff, 0x7, 0x0, @remote}, 0x10) recvfrom(r3, &(0x7f00000000c0)=""/37, 0x25, 0x1, &(0x7f00000018c0)=@ll={0x11, 0x5, r5, 0x1, 0x2, 0x6, @broadcast}, 0x80) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) r6 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x749) 00:33:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5607, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 991.804921][T13544] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 991.854921][T13547] device bond130 entered promiscuous mode [ 991.862862][T13547] 8021q: adding VLAN 0 to HW filter on device bond130 [ 991.885219][T13549] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x10, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 992.138028][T13657] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:30 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) mknodat(r3, &(0x7f0000000000)='./file0\x00', 0x400, 0x80000000) 00:33:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5608, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000005c0)={0x1, 0x0, 0x1000, 0xfd, &(0x7f00000003c0)="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", 0xd1, 0x0, &(0x7f00000004c0)="539756d9427cc0bcaeedf9031658345c4106c206c36daf1c24390c2c5f1213b48f1c26a4e7dd06f59878808bf9c77648af6e42a8f1f48a8190ec03c0bd0f040662c979cac2ad1cf21b133bcfc883e1e84619d77b6f2ff955c972ab8f313b99801a0811ef7b849d8de31af6734dc5ff6ce18c8761a6d8a1108d133068900f1dba99014f15938eeedb7f0ad52a8db75bf61b844479cc714419059293d0d09109b36dd7cf418789ed97f908228c9109c373397af01d5294154d259bfa67a4387602280b2c4ee405527ade067f5b33ccc81bdc"}) fcntl$setlease(r2, 0x400, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setfsuid(r4) open(&(0x7f0000000380)='./file0\x00', 0x4000, 0x1a4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r5 = socket(0x10, 0x80002, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000180)={0x7ff, 0x1, 0x4, 0x800, 0x4, {r7, r8/1000+10000}, {0x1, 0x1, 0x5, 0x9a, 0xfd, 0xf4, "a25de8e3"}, 0x9, 0x3, @userptr=0x8, 0x3, 0x0, r0}) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0xb0, "1952e5d6ecf782f99cc1a8b6868645859f9c3f37d2767ddc15459a6d49cc6e62fe857a5fabbb27f35274cb1816c58646cfde476b7c5de8f88295a8751967b10ca0afc545306b0fff338b4f21827b91c647419f2e8baef76b07fe52a7a4076586f48e35a2a740216a8a448729de451dc5d147e27ddc379d6b9f36c9dbb292ee8265190b60c750708c75db8278efe773151a5b2d45cb970bac171905a781501286e88de4e3896bc1e095ef4d0c5817d690"}, &(0x7f0000000340)=0xd4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:31 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000100", @ANYRES16=r2, @ANYBLOB="310825bd7000fbdbdf2506000000140003"], 0x3}, 0x1, 0x0, 0x0, 0x4894}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000d20a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:dmidecode_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x80) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x27c, 0x1, 0x2, 0x200, 0x70bd2d, 0x25dfdbfd, {0xc, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0xdc, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xfffffffffffffee7, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x1c8, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_MASTER={0xb0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0xfffffffffffffc45, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x1, 0x1, 0x53}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xfffffffffffffe9f, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_ID={0x1a1, 0x5, 0x5}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x8c, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x7e09}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x8, 0x3, @remote}, {0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0xb6}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_MASK={0x10, 0x3, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x27c}, 0x1, 0x0, 0x0, 0x80090}, 0x84000) unshare(0x40040400) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 992.410274][T13660] device bond131 entered promiscuous mode [ 992.463928][T13660] 8021q: adding VLAN 0 to HW filter on device bond131 [ 992.494043][ T26] kauditd_printk_skb: 2 callbacks suppressed 00:33:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc29e6b5d92017224}, 0x4000000) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 992.494057][ T26] audit: type=1800 audit(1578616411.262:9595): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17453 res=0 [ 992.529941][T13657] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x11, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 992.567600][T13681] IPVS: ftp: loaded support on port[0] = 21 00:33:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 992.621942][ T26] audit: type=1804 audit(1578616411.262:9596): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir477032088/syzkaller.HvDLX1/936/file0" dev="sda1" ino=17453 res=1 00:33:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560a, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x12, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r6}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xfc33, @loopback, 0x20}, r6}}, 0x30) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000240)={0xe, {0x6, 0xb3, 0xe0, 0xa7, "7527d8d2f0e7c40f32fea7b47b721219ed14b086ec28153d6450d706ffef41e9da6799da44a4109b608c65c81e4b468dd28d8074cb6b275c0ce2a8191078ac5ca073bf5a0efd89bc7875bfd470eef37dddc8a23d7b71cb2c57a3cdc8f0ba53485e3df8d7f01260f1296c59e7bd7e746d3a4a7de16338ccb3b877d747d3215d1195be23a4ddf267a6d064b5fa30faa0178c3c18a33757f5e14444cf9e6b2e06ba8b5a7ffdd2487e"}}, 0xb3) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560b, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 993.087912][T13764] device bond132 entered promiscuous mode [ 993.139708][T13764] 8021q: adding VLAN 0 to HW filter on device bond132 00:33:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000000000)={0x7}, 0x8) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f00008f8000/0x2000)=nil, 0x2000, 0x387b1d0849878266, 0x100010, r2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r3) 00:33:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560c, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x13, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 994.312455][T13832] device bond133 entered promiscuous mode [ 994.384359][T13832] 8021q: adding VLAN 0 to HW filter on device bond133 00:33:34 executing program 2: unshare(0x4000000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x40000, 0x0) mmap$usbmon(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1000001, 0x8010, r0, 0x5f8) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000280)={0x9e0000, 0x9, 0xfffffffc, r1, 0x0, &(0x7f0000000240)={0x9909dc, 0x100, [], @p_u8=&(0x7f0000000200)=0x8}}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000001c0)={0xff, 0x3f, 0x7}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0xe) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:33:34 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$SIOCRSACCEPT(r5, 0x89e3) 00:33:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x14, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:34 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000858000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) io_submit(r3, 0x20000066, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000100)="34aeed756e748dda18c7d55c3767c0345e05a69b21905ed6f26c4691a0e33d713bc531be23b5a3063d343e85d0ece6a40c8232c06efa2b1d6e76cd846eb1fd4eeb11e2f8783b31ee161e36e1eb0b6ed75083cd5fe6d284", 0x0, 0x0, 0x0, 0x0, r5}]) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001300)='cgroup.threads\x00', 0x2, 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r9, &(0x7f0000000280), 0x1033b) fdatasync(r9) io_cancel(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x7, 0x31f, r8, &(0x7f0000001340)="969b619fdb", 0x5, 0x7, 0x0, 0x3, r9}, &(0x7f00000013c0)) 00:33:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x88a8ffff, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00'}) close(r3) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000040)={0x22, 0x1, 0x5, 0x4, 0xe1, 0x40}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560e, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 995.754608][T13861] device bond134 entered promiscuous mode [ 995.792081][T13859] IPVS: ftp: loaded support on port[0] = 21 [ 995.820059][T13861] 8021q: adding VLAN 0 to HW filter on device bond134 00:33:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x60, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 995.892237][T13861] validate_nla: 5 callbacks suppressed [ 995.892247][T13861] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 995.992274][T13973] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x9a04da01, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:34 executing program 2: unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0x3a9, &(0x7f00000000c0)={&(0x7f0000000580)={0x296, 0xd, 0x6, 0x205c7cdb69e67c2d, 0x70bd2b, 0x25dfdbff, {0x5, 0x0, 0x4}}, 0x2c}, 0x1, 0x0, 0x0, 0x24048871}, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x940) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x8, 0x3, 0x4, 0x4, 0xff, {r3, r4/1000+30000}, {0x1, 0x1, 0x80, 0x8, 0x3, 0x3, "3427b397"}, 0x8000, 0x5, @planes=&(0x7f0000000180)={0x3, 0x0, @userptr=0xe9, 0xb4}, 0x8000, 0x0, 0xffffffffffffffff}) sendmsg$nl_crypto(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40882000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@alg={0xf0, 0x10, 0x50c4ad0fd7351408, 0x70bd25, 0x25dfdbfc, {{'seqiv(rfc7539esp(xchacha20-generic,blake2b-384))\x00'}, [], [], 0x2400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1ff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) [ 996.212364][T13980] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xc0, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 996.309011][T13984] device bond135 entered promiscuous mode [ 996.336705][T13984] 8021q: adding VLAN 0 to HW filter on device bond135 [ 996.412636][T13984] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 996.442478][T13863] IPVS: ftp: loaded support on port[0] = 21 00:33:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x8}}, 0x30) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000001440)=0x1f) r3 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000002c0)={0x1a87, 0x2, {0x2, 0x3, 0x5, 0x111f3e671dc0b124, 0x3}, 0x400000}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x57, 0x3f, r4, 0x0, &(0x7f0000000240)={0x0, 0x9, [], @p_u8=&(0x7f00000001c0)=0x1f}}) ioctl$EVIOCGVERSION(r9, 0x80044501, &(0x7f0000000440)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a88010a1f000040002808000800020020000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="11a1afaddd7e738a247dcbfdd4f6b740415e3adecce9bcdf011851c4051789a1a493c4e1e282f24eff9d22697c53cf5711ba61436faecdb7339f119cf56612d7baae0f91e1d3cba1de5d8b0c034ae22ad86d545248a59aa4d26e0b81c5bab44c0f978e83c93b0e873d66d906a91092bcc1f60f4c39173dfbd611e807204000", 0x7f}], 0x1, &(0x7f0000000100)}], 0x1, 0x20080) 00:33:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf0, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 996.715887][T14093] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 996.794548][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:33:35 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @bt={0x7, 0x40, 0x9, 0x7, 0x0, 0x2f, 0x39, 0xa}}) unshare(0x8020000) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000000c0)) 00:33:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:35 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x21}, &(0x7f00000001c0)=0x8) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4074, 0xfffffffffffffe2b}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000040)=0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r6) [ 996.842677][T14104] device bond136 entered promiscuous mode [ 996.848766][T14104] 8021q: adding VLAN 0 to HW filter on device bond136 [ 996.908156][T14093] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x300, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xc3ffffff, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 997.007222][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:33:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x9, 0xa00302) fdatasync(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffed4, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x80000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f00000000c0)={0xe, 0x7, 0xffff8001}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) close(r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff01000000000000"], &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={r9, 0x6, 0x10}, 0xc) 00:33:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x6364, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 997.286275][T14227] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x500, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x8}}, 0x30) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000001440)=0x1f) r3 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000002c0)={0x1a87, 0x2, {0x2, 0x3, 0x5, 0x111f3e671dc0b124, 0x3}, 0x400000}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x57, 0x3f, r4, 0x0, &(0x7f0000000240)={0x0, 0x9, [], @p_u8=&(0x7f00000001c0)=0x1f}}) ioctl$EVIOCGVERSION(r9, 0x80044501, &(0x7f0000000440)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a88010a1f000040002808000800020020000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="11a1afaddd7e738a247dcbfdd4f6b740415e3adecce9bcdf011851c4051789a1a493c4e1e282f24eff9d22697c53cf5711ba61436faecdb7339f119cf56612d7baae0f91e1d3cba1de5d8b0c034ae22ad86d545248a59aa4d26e0b81c5bab44c0f978e83c93b0e873d66d906a91092bcc1f60f4c39173dfbd611e807204000", 0x7f}], 0x1, &(0x7f0000000100)}], 0x1, 0x20080) [ 997.445350][T14237] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 997.536147][T14230] device bond137 entered promiscuous mode [ 997.547845][T14230] 8021q: adding VLAN 0 to HW filter on device bond137 00:33:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x8}}, 0x30) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000001440)=0x1f) r3 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000002c0)={0x1a87, 0x2, {0x2, 0x3, 0x5, 0x111f3e671dc0b124, 0x3}, 0x400000}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x57, 0x3f, r4, 0x0, &(0x7f0000000240)={0x0, 0x9, [], @p_u8=&(0x7f00000001c0)=0x1f}}) ioctl$EVIOCGVERSION(r9, 0x80044501, &(0x7f0000000440)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a88010a1f000040002808000800020020000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="11a1afaddd7e738a247dcbfdd4f6b740415e3adecce9bcdf011851c4051789a1a493c4e1e282f24eff9d22697c53cf5711ba61436faecdb7339f119cf56612d7baae0f91e1d3cba1de5d8b0c034ae22ad86d545248a59aa4d26e0b81c5bab44c0f978e83c93b0e873d66d906a91092bcc1f60f4c39173dfbd611e807204000", 0x7f}], 0x1, &(0x7f0000000100)}], 0x1, 0x20080) [ 997.592197][T14230] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x8912, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x600, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 997.809633][ T140] tipc: TX() has been purged, node left! [ 997.933786][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 998.229717][T14378] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:37 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000100)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000001c0)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000012c0)={'vxcan1\x00', r7}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001300)={r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) getsockname(r9, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000000c0)=0x80) 00:33:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x900, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x8933, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x2) write$FUSE_LSEEK(r2, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x929}}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0xe, 0x6, 0x2, 0x70bd26, 0x25dfdbfd, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x4008000) [ 998.322680][T14405] device bond138 entered promiscuous mode [ 998.359971][T14405] 8021q: adding VLAN 0 to HW filter on device bond138 00:33:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xae01, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xa00, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x8}}, 0x30) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000001440)=0x1f) r3 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000002c0)={0x1a87, 0x2, {0x2, 0x3, 0x5, 0x111f3e671dc0b124, 0x3}, 0x400000}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x57, 0x3f, r4, 0x0, &(0x7f0000000240)={0x0, 0x9, [], @p_u8=&(0x7f00000001c0)=0x1f}}) ioctl$EVIOCGVERSION(r9, 0x80044501, &(0x7f0000000440)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a88010a1f000040002808000800020020000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="11a1afaddd7e738a247dcbfdd4f6b740415e3adecce9bcdf011851c4051789a1a493c4e1e282f24eff9d22697c53cf5711ba61436faecdb7339f119cf56612d7baae0f91e1d3cba1de5d8b0c034ae22ad86d545248a59aa4d26e0b81c5bab44c0f978e83c93b0e873d66d906a91092bcc1f60f4c39173dfbd611e807204000", 0x7f}], 0x1, &(0x7f0000000100)}], 0x1, 0x20080) 00:33:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xae41, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xae80, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 998.889266][T14498] device bond139 entered promiscuous mode 00:33:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0x7ff, 0x1, 0x401}}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x5, 0x1, 0x0, 0x7f}, 0x53, [0x6481, 0x6, 0x9, 0x5, 0x3, 0x73, 0x0, 0x800, 0x200, 0x1, 0x6, 0x89eb, 0x2, 0x8, 0x8000, 0x8f, 0x3, 0x8, 0x6, 0x3b5d, 0x3, 0x4, 0x1f, 0x1f, 0x2, 0x0, 0x3, 0x80000001, 0x80000000, 0x424f80a0, 0x10000, 0x10000, 0x3, 0x98ac, 0x1, 0x7, 0xffffffff, 0x0, 0x0, 0xfffffff8, 0x5, 0x3, 0x3, 0x6, 0x1000, 0x9, 0x0, 0x5, 0x8, 0x2, 0x1, 0xb, 0x4, 0x1, 0x400, 0x1, 0xffffffe0, 0x6, 0x1, 0x7, 0x5, 0x1ff, 0x3, 0xf32], [0x7fffffff, 0x2, 0x10000, 0x9, 0x4, 0x40, 0x0, 0xf8, 0xfffff6cd, 0x1, 0xff, 0x2, 0x1116b9ea, 0x1000, 0x29ca, 0x7, 0x809, 0x4, 0x1, 0x4, 0x1, 0x1, 0x9, 0x8, 0x100, 0x4, 0x9, 0x8, 0x1f, 0x0, 0x20, 0x6f26, 0x8001, 0xfffff3be, 0x58, 0xf39f, 0x8f4, 0xef5e, 0x6, 0x9, 0x2, 0x8, 0x101, 0x10001, 0x3, 0x8001, 0x81, 0x2e1, 0xcea, 0x1, 0x0, 0x8, 0x7, 0x8, 0x742, 0x4, 0x9de, 0x375, 0x7, 0xf0c6, 0xfffffc00, 0x0, 0x9, 0x93cc], [0x5, 0x7, 0x2, 0x8001, 0x6, 0x6, 0xfffffffb, 0x3, 0x9faf, 0x0, 0x7, 0xbb, 0x49, 0x9, 0x1, 0x9, 0xd1, 0x1, 0xd1d, 0x3, 0x1ff, 0x39c, 0x4, 0x0, 0xa3fa, 0x4, 0x56, 0x0, 0x9, 0x3ff, 0x4d, 0x7fffffff, 0x8, 0x3, 0xffffffff, 0x9, 0x7e1, 0x2, 0x181, 0x28, 0x8, 0x400, 0x2, 0x0, 0x3ff, 0x10000000, 0x5418, 0x494e7d20, 0x2, 0x1ff, 0x0, 0x7, 0xff, 0x5, 0xcde, 0x98, 0x954, 0x5, 0x7, 0x6dd341ce, 0x3, 0x8, 0x80, 0x9], [0x9, 0x6, 0x5e, 0x8, 0x4, 0xb8f, 0x1, 0x0, 0x4, 0x800, 0x7, 0xd33, 0x6, 0x7ff, 0x7fff, 0x1, 0x8, 0x5, 0x8, 0x30, 0xffffff03, 0x7fff, 0x7, 0x3, 0x30000000, 0xffffffff, 0x7ff, 0x1ff, 0x6, 0x2369, 0x4, 0x7, 0x9, 0x3ff, 0x8178, 0x80000000, 0xffffff68, 0x8, 0x1, 0x11, 0x10000, 0xffff, 0x8, 0x89, 0x1, 0x6, 0xa3, 0x6, 0x1ff, 0xfffffffc, 0xfa, 0x27, 0x3edc, 0xffff, 0x0, 0x80000000, 0x4, 0x5, 0xce, 0x2, 0x0, 0x7ff, 0x101, 0x10001]}, 0x45c) 00:33:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xae9a, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 998.967691][T14498] 8021q: adding VLAN 0 to HW filter on device bond139 00:33:38 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2f2400, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x9, 0x5, 0x3, {0x7, @sliced={0x800, [0x5a, 0xac8c, 0x81, 0x0, 0x800, 0x2, 0x1, 0x12, 0x9, 0x2, 0x1, 0x0, 0x9, 0x6, 0x7, 0x200, 0x8, 0x15, 0x7, 0xc000, 0x2, 0x20, 0xfffa, 0xf82, 0x4, 0x2c6f, 0x6, 0x1, 0xff, 0x3, 0x0, 0x4, 0x9, 0x8, 0xd39, 0x9, 0x8, 0x4, 0x101, 0x3, 0x8, 0x5, 0x4, 0x1, 0x2, 0x6, 0x0, 0x9], 0x7}}, 0x7f}) ioctl$RTC_UIE_OFF(r2, 0x7004) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffa888, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xb00, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:38 executing program 2: unshare(0x8020000) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400454ca, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:38 executing program 5: socketpair$unix(0x1, 0x55720eed6c29acd5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4004743a, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xc00, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1000.026431][T14639] device bond140 entered promiscuous mode [ 1000.039181][T14639] 8021q: adding VLAN 0 to HW filter on device bond140 00:33:38 executing program 2: unshare(0x8020000) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40049409, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="00804806000000c60001070000001419001300"/35, 0x24}], 0x100000000000025d) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) socketpair(0x1d, 0x80000, 0xdc, &(0x7f0000000040)) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1000.491721][T14663] device bond141 entered promiscuous mode [ 1000.501994][T14663] 8021q: adding VLAN 0 to HW filter on device bond141 00:33:39 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:33:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xcf2, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40186366, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:39 executing program 2: unshare(0x8020000) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) getpeername$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0, 0x1a5}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x7, 0x8, 0x89, 0x0, 0x1}) r4 = socket(0x10, 0x80002, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, {0x33, 0x9, 0x0, 0x8, 0x40, 0x3a}, 0x2000, 0x20}, 0xe) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) sendmmsg$alg(r4, &(0x7f0000000140), 0x0, 0x0) [ 1001.099370][T14685] validate_nla: 13 callbacks suppressed [ 1001.099379][T14685] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4020940d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xe00, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:40 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) [ 1001.241574][T14695] device bond142 entered promiscuous mode [ 1001.251056][T14695] 8021q: adding VLAN 0 to HW filter on device bond142 00:33:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r3, 0x400, 0x2) write$P9_RWSTAT(r3, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) [ 1001.381171][T14695] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4020ae46, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 1001.703316][T14719] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1001.921745][T14722] device bond143 entered promiscuous mode [ 1001.931741][T14722] 8021q: adding VLAN 0 to HW filter on device bond143 [ 1001.982012][T14719] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:40 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040)) r2 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) 00:33:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xec0, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:40 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:33:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4090ae82, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = fcntl$getown(r1, 0x9) r4 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x51eedbf1459ce7e9, 0x70, 0xfd, 0x3f, 0x9, 0x81, 0x0, 0x9, 0xaf8aa57dd7935c11, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1000, 0x40, 0xffffffff, 0xd, 0xfffffffffffffffe, 0x5, 0x1}, r3, 0x7, r4, 0x9) 00:33:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 1002.195162][T14736] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045432, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 1002.335930][T14741] device bond144 entered promiscuous mode [ 1002.383699][T14741] 8021q: adding VLAN 0 to HW filter on device bond144 00:33:41 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1002.466845][T14741] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf00, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) sendmmsg$alg(r3, &(0x7f0000006340)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="267dc60a538d07b9ce4d92ec790207503d14ab5432876110fcac629a1215f4bedfbc55e08b52942a8c", 0x29}, {&(0x7f0000000240)="077ac3cc22cd50f8688726e0a23508b5f1029f4a73351fc7d72485b92e1952ec1a90086f8e33208a68a021e40642b4034b377135a1673baea0aa4c2fa0aa68d0c08b16cf884933d1791605e5c4bcb5fe1e8c2fd9b538ea5a9ecf044a41dda2d5c375a260f101f8d95e5c1f5262a2372ad3d4b96efc168a9174", 0x79}, {&(0x7f00000002c0)="8e0ab10bebfceb2b8dbe3b1509971c6958d556cc9f8cbdb438f9be388bceaa498926eb244f9b27c85d2c8d48803ca9f7d1768bda81c4cf07ebda03af2bebfdfbb32db672506730", 0x47}, {&(0x7f0000000340)="017cb62739429c0da1bf3ab9ca26f9a067eb3e33bea493a747", 0x19}, {&(0x7f0000000380)="71af92a7f9090c52e95ece3c6b08398fc8427d5143e5360fcdae0948945e179cfed9959f70eec531614f9030bd71aa95123e238b7a8fd57ea8c62acac5fb9221598ed9dcfe797dc670f2178a5c77cef5d5f866582cb7adb05c22e04f55084acf0833afe1f53d3d6db7e01f92496c70c4f05874b970072229b8c3a14bdaed9d895ba47562f37e9e1fb5939022dc070c6a79b1769139dea97fea420a60bc06eecb", 0xa0}], 0x5, 0x0, 0x0, 0x40040}, {0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)="ae6967f53891dc51ae8276adb92d588119f56e9e425d954aed1ed3f406b02d053e9f166c11af27655e0eef0b8386b2ffe48bdd54e52d1e4f4b37da6fb6f9c9421afb2c6dadd50e33a2c317fe3919cd543a1d022939e6e0a4291e51fc68a32bcc59e0b9de85f785d60d991c5be953d6128d8c19a3cb22e1df8845279b9cb65e38399fb02452395b1f03b81489bcb98d315fd93a20f1946d4713f9e6840da37e5e5b434b800c9fe6520685803f40aa77d67ad645120d12ad5e3e0ec159ce42ea671d3f8ee8f005c2", 0xc7}, {&(0x7f00000005c0)="984430030c50e733901326c5b2d88f480a5af8a900cbef3cd4ceda952acaa324d9e3ade20ff69715d907e5961ca27fca63f084bf64073e6000b1dd421ceeac7b2d5340871f1053c539f03f6c625667b3673b6a6e2c770e49cf23d72db7331af16815d1a986f07ae1ff076e098886c17e6151adbbb186d39dfad96b6fbe934e127e69796705b43e0527b92ce9ea18cabe2c6fd48fe66ce1f7d23b23f81f6c73d367db2354c87b6781a9160a133f0512b790edd1742d58d75c93057dcfd10dca8640dbc85228aea06a7fe83e53b612463dfbb1", 0xd2}, {&(0x7f00000006c0)="c8eb2a0034c05880ac7bd29e792b55b848feccf2dd2705a9f3a5f0e34f7babb2b0654219c36351f8e36d0bbccaa162a102041b19238760f387b2f2212875ee74b6e6f972b49ea0548756380f3525bea593ed49cbaeabd80ea8911316f16e095adeec6d0e4060114dc953dbec443fd9c7aed64794b093d37f", 0x78}, {&(0x7f0000000740)="5b4de589f390d4441eada9af73847f20770886445bc9016aed4586caac5553cf85f838aeb0925af4927599a7e83106acc06bb269c29f51e4140047b970ed9101a79cb8c92fb31ea6fb604b093a999a416ce59c2d10ff624f961498b8430c8a46c76e8b", 0x63}, {&(0x7f0000006500)="1a7eeebac532", 0x6}, {&(0x7f0000000800)="01c21473837411e4b4b178329c1e1d44a4f5f6d5", 0x14}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="cc5b492c7372ed2c82eae81fd3407d7708a7823f5818ae56d8b1040607f2dd0aa34fbfdb96f5179ada055ab2787c12f4d6c5e5bc82176d7d2d26b1d3f8acadc3f45cd6e53e0da837b71b105fb9f3bbcce43a3147e8812f68b396108f26c1106062fae70abd05191406488ebc7184a537359e99b543d8417ae5184bb47b55979a811cbec8f020c38ade8ce14b32679d2059f826b4df96795503c6ca10bfeab4544a5dfe06cc9ccc573f92da59362dc5b519fd397880abaf29ea1cf658f9cb17fe393c26336b4ae46c48a2738aa0bd7861c8d3905893ac398a37", 0xd9}], 0x8, &(0x7f00000019c0)=[@iv={0x20, 0x117, 0x2, 0x6, "dff3bfd3f5d6"}, @iv={0xb8, 0x117, 0x2, 0xa2, "43dc4dcbf26aae33dec8ac393cc1971d2665d5daf4fec6ca63a0cfdecbe783e9b8bf11ef9caea8ea428391d36091141d83515f4238e77648da77ddf596c29304967db5a6ee8f971e03db1317ce6c6572a1d1dd7ffa42ded13ba00bc7c8db94dfa9081197f0441f71797cf1e8c384623dc9d3c6e53d9bb4c1e9a0018f7ce70283993daa23218c0d8d01ce312e57a8078b6861977a0ec69f11b7b86b950413b9ed35c1"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffffe}, @iv={0x58, 0x117, 0x2, 0x3f, "ddef397fcc75f413e40bf9d015468dbdee2073be20d0c03c406e568c86d962d216b29aaf56750c54b77107e30ca62877639a56f29ee72de8f6ef9464a02a5f"}, @op={0x18}, @iv={0x48, 0x117, 0x2, 0x2e, "a57032cc417b8510973f966c43aea5e06a873a4245657896f7425f06c474280285960add76e2a54bbaf5a2f49992"}, @assoc={0x18, 0x117, 0x4, 0x5b9a}], 0x1d8}, {0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001bc0)="b3eb54baa5760d16ba756afb77457263c98a7997fb8e61d457c23979c7299e16942c504d21d42b88b8d044e587f04ae6add44d61dc2da40c4e861debccc2a8655bb0b0e428b1f29926bb12bc686ce05aa72b3eda359d44b216ff97b1ddc0aac8236e43e291c21310f621bb76d69d74eeac7191e714e694f10ba93d9619ef832d544b2ba272201b9f3399bc1ebafdbcdc951473ad6626d6b37fff81", 0x9b}, {&(0x7f0000001c80)="db7e415a835dd515", 0x8}, {&(0x7f0000001cc0)="bbe9d04def2b4f2df8ebedfc575aa4cdfa34d80f5daf1e08ba7973f082769102a83ac30dcd7b7fc51ec536930b8b45fb4c93e0ca42b5717c37de7ad41fbeafc4bdf87804feeca8ae35bff5fa6c3b9f17d1f4db30c0c6", 0x56}, {&(0x7f0000001d40)="03e95c98c9bf25d2d03ce628bb1a47ec758bd35e44da86c1545dbb4b3b48a8052dbc74495a533e06f518427362dbd72c49", 0x251}, {&(0x7f0000001d80)="af20867f9aa78557ce15cd31bd0520ed1d40baf670606f5e9609f66fce343587f42a809c03ed344661761c3b2fd558ea433242ad1e9a8df1d8793489e0e4b46e410e52d4f3f616e2643cca40503aef267e85362a1ab6120bd746b1b689f5763805593ae75aa5bebb8d39c497980cea1149f7408c8c82a5ea36322749e5ecbf6c8fa49af6cda188b9842f63e6e620aef5b6551e6fb74c76fda45312f311882ed6c253813c28063901e0608abeefda7d20c97a656e0bb4b18b7ef6e0d3c3655437f2d4615e6c4eee1052a41ab518cc9c22e49e396dc492c35ea8bd41f495a314bc32d4d990e777038756618a7ab9b706586fdb1a1c2e980c", 0xf7}], 0x5, &(0x7f0000001f00)=[@iv={0x60, 0x117, 0x2, 0x48, "7222ece052969e0dba8c6a76e871e209c059584369152874343a6c6d1bac6eebe2453f5577af2e0a08c4f6f94af44a2a73aa439dafa0ea977a33a6a92b0196d32b63babe9bf57b27"}, @iv={0x40, 0x117, 0x2, 0x2b, "076ca585d602b9dff6fade96b97ae761c9111118a12c689432cc0b5416e679bb7033f7629ab1a768d22b14"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @iv={0x80, 0x117, 0x2, 0x6a, "424fb25aa06a2c76aed37d85c6556ca33efda731a1f4cefa0743e7c2fe5b05d03cf92bf99e3e9583a94a75f5ec3d5ae204f6de7574fe6b560053d44879e745c4bd8c09c0506430997be90a48904b2fba3d1a5f7f9d05a31424f6c7b1996e45d3ef737cb177bb6786268a"}], 0x150, 0x4081}, {0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002080)="9e6a28aefdf8dac1d1a7dcaf5e1d92e09ba5108e1711b87813241d31d8032d95f85a3b0904a4f400bfcd4caf57487a0ffe7b4a806bf1307f1041366ad5fdd1ee1d2370f44853c56eee51312e534775be0efda2ea93695a2607df98effc89f968ff7d7a793e3fd2b6779743ce1ec21a85d4edc37cb486450fc466a2c596d0389b9353c81839d8097316327095d7cbb8ee6105", 0x92}, {&(0x7f0000002140)="cb5b1bc8e7e3814ee0e4f0e1cf59b94c8386a33a7271f22fbe2085c91ded191218db133fddaf27330bbcaea3b0dd47e2199e9130a20d0c0b56674a4b15d50669eaaef3bf310a3550f0060b8ea43e5dedb774c24ac2668326520ada4ce52050bbbbd194c68fa48944965de8ddcf70a41b8df6", 0x72}, {&(0x7f00000021c0)="d96f2a2e6d8c0c03d93362ae8359b8b27ba015b25484b5fd037cdc06220a1c2eda36fd7426113332c8ff9cc8039dbe00c1e2536c04ace3d70b31f76e7886e19bbcf021dc5640ca38409e8c54b3f114be3579a075345510a49cb0a51fd4d00e78c1a2af56e13cd215a6eeae78ab3fd123052eb063016ffd841ccd84787d3f59b8b0cd384013d54a333e5f936c7eb29e17c943", 0x92}, {&(0x7f0000002280)="7789578135fc36f763876e6dba8307c0dbeac066133433e44fb44b8a131f98525352d57104008bd34b47363f4ad9da748ed9b8fc820af4b8b4c695a57fdab5852baa43ed1371ac3a614e609b36acfec3839054faaa012bb41bf4ebb7357e2e95f19d4b412620f7b5fd8d65cd3a0cede1d3deca0ccb871f84d49a549045c52a8242d486ea1e", 0x85}, {&(0x7f0000002340)="8d1a0816ac3a909b5fcc464833371a20818ab9347d4b216beec3cda00dd38c3b7f4e35bb296879f653e160ec5f263cee7fa161ea6d3de46ef4abf2", 0x3b}, {&(0x7f0000002380)="67158599f16d93963256d0fa2032b3c25d98e7f52caa9aa6ddebd9970d1faa93a3786a0c1dd35d762b73ffeb470587beb4f88e80902386cb0a2e31f9ba2886b359db6d04d0451c8b36f993752c42159e575dfe42205d6a437c70c058653aa45206e95be6f819a8d6391d27411551268a459b97b2e9fcd51b117507e1a1d1365b1468cfe7372b7d4a93a3e731b8595fdecdc7024932e1", 0x96}], 0x6, &(0x7f00000024c0)=[@assoc={0x18, 0x117, 0x4, 0x101}, @iv={0x108, 0x117, 0x2, 0xee, "8e65dee6f49fb35f0f8a64543ffc0bf4da3d8d0045c99b8583bc11efe425b1b476a8619b9b2c75cd58a98c5409a613fabe243e669c409b29030aa435eaabdd6a44f13d5ad055fcb8d3e41d5bc9a420020ef3bfffbfc561d322520507ed1d61ce117bd0149caa707bf8842649ed19c1ce3714928345ebb60bcdfe9d0fb9e468b516d063a70fcdef1f0b5f0cbc739640366bce0027c97bd857d7f679fdf6363bd9293d804462224bf9693a59b5da664af02c3949e692bf8b0a3711dce73472286b7704c30dc024b942d5fe53e81cfe45ba7fec26ca0cd7a91aac5de2d59e0885f45063b735162fe7c03b1f0164a3da"}, @assoc={0x18, 0x117, 0x4, 0xfb0f}, @op={0xfd2c}, @assoc={0x18, 0x117, 0x4, 0x100}, @assoc={0x18, 0x117, 0x4, 0xce3}], 0x180, 0x80}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002640)="47f30534818e64df1247522b198866dbba58753d803e1ce49dda784a1b273b512057201045bdfd004308615a595bea655fc32c7efeb5a5619fc7d156fb26bc8866479904150a3e527fa1ae67dc2dcceda098409d2f1d8c2671f1fc23a2c1953f1fed4501e3a31e6929a6dbd64ec0cc13e14a83511631d429da66f36f4a4e", 0x7e}, {&(0x7f00000026c0)="bbb2ecac6ddf48af168e6c27f768a0bfceb9b7c355a039e5b6dd3b14aabd29d016f6ec5079ef1cf0ebe3e19acde018e88f862a6ac49e44cd5a1d98219f69eaacfe5150f5a9e68b956952d8534a9cf57fd79462b1e5a08a9796058473e9823f4561e17a63a6b4be7f47cbd72ccd0522b2637f5a80c88cadf3d37370", 0x7b}, {&(0x7f0000002740)="e16297c43fa05d5148626fbd7c53c14f369c6e341a85a719aa7baafa3c27efa37851c23a160eb69a304d6cc1af7598", 0x2f}, {&(0x7f0000002780)="0889d96aa59bcac84651943c44727b540416178c44e42d308d553734e21a5c3cc556246869493a5e737bebf5dc739588251cfcaf1e01b2d72568a4843e5cc2b5ec45ef8d37acc57d23650015b45c0caf0b4e8ef54b1c800644aae4ada51e04c6338f960a07378469b225812b27b72e0293f00bbccb43bd9bb3c8580b2847689a4b0f7b12996609debe23f8731d13cbcff45c85c7797e83ad8270eefbc9ae37d9cb0ab05cb11d7cccccd521d87a1318cdd7af8adbafdcd7c571bf4205b84ba48b3ecb1bd419801b086f7405211260c5aebc9b913667fcffd55f4a7833dbe1549aa56cc39289794f8d1deeaaa21ece27dfb71b92fd", 0xf4}, {&(0x7f0000002880)="2f6ffa5df35c05d35f11fd5918735a74f75453722a615142d922463cc7c03c70fb", 0x21}, {&(0x7f00000028c0)="80a03649e72e6ace", 0x8}], 0x6, &(0x7f0000002980)=[@assoc={0x18, 0x117, 0x4, 0x71d}, @assoc={0x18, 0x117, 0x4, 0xad9d}, @iv={0xb8, 0x117, 0x2, 0x9f, "95745bb82dedfd639c3bcb029e8c507084ccc08f7d1ad5fd8bac8b38f0cedf7ebf5bff1abbd0db8a4c439badbb48d89aa50a692e844b5f37a4a1495ab626171901aff71458c743311f2949f1b4ae98d66a1aa1686656df4df21e31038fb0ba9571b83f30f516524572b69ca258e9a0f2bb3caa922af28cb8b61d3cf9cc925b39fd19411bd3e6878e73e07be8c18ea2acd3edc3e11cbb822a1b95c3367007ec"}, @iv={0xe8, 0x117, 0x2, 0xd2, "012b485434e60556d5acca59f3f76c179cc68e52ecf5626d78150fb9e0f542f43f144efe7419cd779de6ddb735f46e46769c4b34418c6100cd31d9bcc22c7f40308403a6597cc704546e2f446f878529af8198e0ab6d0b2c66162066c2301a300068fdd0835d7f7fcc78c4067cecc78418d309ef27147253d5fb4f0b4effe51c3e8f8385a3af6831485600371f73ba03cd7b6ec0e6f3169028c9de499e0fcf8725c56a4aa284a00eeb83b92aa2030fde228d9d7de33fe03e2bfbc9da163d5ba877641d539ccfdb2acaf780b315baaa26144c"}, @iv={0x78, 0x117, 0x2, 0x64, "e13bbed31da99d93849f605aae585d8222c2be55c1637eb7dc6525d0701e67d7934b3e2338847556fbb8fc352b7b68cafd3db5fbcd142f2ae4c42be6cdfa3cb1baae7fd458594dcae1f335c6d39f5a5d9c52138af5e1db8e01cebd0757e225aefef57c54"}, @iv={0x68, 0x117, 0x2, 0x4e, "7778f927921a2889ff5d607a80e83a4930c74d92a0f532c041eab32e0053438e8fe7bb610b041c3d4d6fff94a5b6a43d556cd338ff2847b4eb165adbc5eea73401d9e0248aeb331aed812de6ad4a"}, @iv={0x78, 0x117, 0x2, 0x5e, "c029476e8168a6ccdf77286db85218ee28f35b3917629d2bb509e44e1fce92100dc100e88615ac447a376e58480669ca37776a964f7b9ae1807aac41ca87194a9b091b37f47ef351277c6662bbc55f32d516aa40d01cbc8ab024d76b8e65"}], 0x328, 0x4800}, {0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000002cc0)="190be77a98b98c5d39283761", 0xc}, {&(0x7f0000002d00)="9430d8e71c4cc1155a649b815bb5bd1b6fb88b7ecec49c9c045cdbe34d8224714b222d42f93f861e9dc7f0c62c1213ba8e0d57873c148b1a10d8db3d69b421df706515034efb4b66bc08afd6aab41bf224b1f1f027993f9a4fbde94967a6474189dbcbad3786fbff572799560832afdd78a9b46f84339760124d4d27bbceb98ef8c1a2a6dd28702056c0d51f74a64e81fa188707b4d1de0159cb7227c22293e3cb969cfdc19f7452a3dcd2f70e0a36e170fb6e8690c32b3ec168e65798", 0xbd}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="fe0317422f16c7e0612f7ab35b9015057316be73f42c00116541293069eb34fc514e34c00b497b4378a61b539f43083b2559fa58a33e866055611cc42afc36484929ff11c7ff7981b0882069cdd43a0779f9c16eb93ee5e3f005326f303292131d24514e0c3f5f2f29b02da5ba9e4bc0ba4a7f67c52cc665501434e9b1a9b10ade7fd31e55d90461f1e5d3febe8499a0995e42e31374af600c4b5564427290156b38363bc3a431df2aa9731226e281b18f9f615c86be5757a4f803a354d9aa9dd76e98fcea85f7b22d75b07d6b6ca18f74f82e287561b2937feeb8bab87f", 0xde}, {&(0x7f0000003ec0)="348ec14cf6baf53ed8a137bcf6f8cfa4c9c89c1d2955a5bf28cff019dd7170efe3c5ea9868c3ad0a395f8187b58522a947c579fc", 0x34}, {&(0x7f0000003f00)="38daa70b7b48fb4944541b7c346bacb10ae57048bd594c62d5c245e19bf320bd16534270120539fc3df0beaea5bb73d772767c9cdc921b0f66dba38ffb235b8a72bde403d013f2097327137443ccc9a959e1cefb16bdebca37a4d639fee45f4d9109a0598ee2c9ddb04342b70a6245479a43f6f584cd85f7aa65e49044ec27034edee358dd", 0x85}], 0x6, &(0x7f0000004040)=[@iv={0x48, 0x117, 0x2, 0x2f, "4348965aeb4a8104bf62fa13379a324ab1f250f58942fdb6d24383153a4da4cc365ede24cb9c7e1683c7a795a004a1"}, @op={0x18}], 0x60, 0x4000022}, {0x0, 0x0, &(0x7f0000005180)=[{&(0x7f00000040c0)="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", 0x1000}, {&(0x7f00000050c0)="a2df841d2fe359ea783c5912809585eea00c027ae98b61194a3fbfb95b95fe8b00f981667aa70cf3c922a1cc30763c447432f602a9e244b1f9383c22cf4b89e8206b9bb6a4773fd7fee97f2ad109eb9e7f42598a18cb0956c219cacdf6d7cc7a8f6039a4da4d401d4fcbe8a093a2e24e1783385c08cd004512c0ecfffec93018e73485b85fd25c91167dd9283f181bcb8dc7c141b909e7c19ead12d4ac627791012cfb7c1a5bdc167368890a1e9b18576a60c69a1c", 0xb5}], 0x2, &(0x7f00000051c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "b6d86819d1c4daf75c1a5fcda2db3187e9c74e971f88315e0f637bd06e5e3de747791d52efb62245414952d948f337626fbd1610373760ba507f2a73342e15751e2b84ae94f60f64d14cee779f0fa05d86122efb728c2b9f6607d25013c6eb19041448f9c602b179e5ffa4fdaf412d90c12f17ce8c17aaa36bb6b13b3628827eaed76467289f7e39d7bc2fcf9e6ff94d8667f6e79c192cf375a7a940f5fc9e2b5c4dd9a2adc8b5ba013da2b71b2e0cbcdee619fed99deb0844ac8a093dcd50d1b2b0cde8f438f2b0ca8ed65dc73aa90da2b6ee5042f5cb6d610e094985a69eb87e4cf3a7c671869a8ebeeb77746829742256dcc4444b46be75795375c2fc17ffe347b889040d05ee8cfab3c6e8d92b74be1ed06b5bed8b3fa3963ebd9bbbb062c776c52f85362bbc911839141b0dd2ae454a56ed3b2dfb00adccd5bdab14fca49c563fb4787a67cd971d390736fe1b798b2288c53c98d48faeaf78667618f52b4bfe75e49bd5ce34f5cc57951a6b1b9284918c481b5ab98d780b30739c8f1a41491238668b3e1e58606b18f74fd53541f749b957d8775ce56feede8da11b08f4c83e89ac8a7c9d4923590194b93255b1abf1d2c842b9cb30a38d9fbc025aedc61773e4a5fed31f5183ecb97dd2606e1d0228ec115c272ef45aacd287570077cbddee3fd670ad908112d84de1476f25c9898838922709cb11b25ac7423a8d33f76bf9225753a584eb98c3b970c58ee4b793862907a1874661f659faf8d9a9c62a73874ee8528f72439e76f2d0d41994d8a2df9290bc4cf76c769afffbb2c920a65ba8c1e8ee6728781a09a8ec30139d06c2376e961fd94001e9b1b1d5782368d151f33c5a89178f30aa0e7d1b41a8a0def29995956dcc34dd98709dc5f35753630ca1e47cff3d9ffad6cae47967d4f289fe6023709eecf96fd78bdf4c25654b536c7cf74d4de8db2d325d667e9d41798e06f73afc38b61b0451f6a9145ba54b59c6f4ea99caf333b02f478a4efe30ebaef52e4270bca8768a083428efa655de1cf5669015b1db6006b1897c71f6504efe32d3d6dcf09da00629bb1943dde69a8116632ae55bdcc3cc4e5412e370474a11dd84f7fcf53fadc99723ccf63e15609767606e1e3f933710efccb6c23382b768e161d891de1efdd352a7bf787673d113259587580243e6862b61127464dc3e43fd376c063335259df16d7f6ae84813804d7bc173a424c7ccfc9d789aaea39826f0215e9748155632c7e8cb19d6f20a6755b7c81acb9888c5f6d285b9d3c50698ad628e1fa9fa3d4dc6ac87908d64798ee03d149cea05b9918d1192164a40ded676f44134e521778addaac4dd96926cc58c7bdbd5d106eb11d1a88bc3807638cfeb533c06f38481abbc60bb27de187135c12e95cdafdb00d7f6202b77c5db96d665aebe698c0dc1cff48f171d8dff44163cbc7f61588ee6c45f2a4fd27533984573e92b6c9f260c665aed10143d5d0d6185c229f5cf149131b550a19e57ac3362c05472cb456e8791bdc2540ec3aa4e94572038483e6f9f0fac9f8907e79c3c5a9b5d27ae62cd5498e1f3a34d0197d3a93c1f8fbfabb821be61abde44f9cdffa607778262fbea86be26f796524475ce0bae3f09b127ba59f4a9b9b8a0326bcaad47e7488466c304fe60f5ce3782f36c61416e4a7d87d27258576f98b8a32b6a3cc64ed334752a06a3423ee60a3ab3112fcab24fcb4b755221985bc6068636715f5e221048a206e484826e6e7e1bd3d94471cfcf3b44937e5876a1d923fcd0a26f95e59e34b9a94ad862d66d50dd102f02525dfc0b51673bf32d5b0eb45e078e4b0d77b8b817749238ba083fab77c08c5e395e83f660d3d73cade43c0e44290c0390c733e59d469f9965de4047f435c928c9506924a6a574381b39334b5e11a981682efc29e5df75c9cbc5e267ed811e53bec543828b259aa3ecf4d614944ba9b12d341c84ff5981b9e22da11c5a596467077595c2f533fb758addb9c9d4fbdeaf6d86d0e8cf258eab9c68312f14037ff042ce404ac74d493060736a3213c1366999ad757eb3ad7064c6d6da8100b6acb8b788c278583df70340bad995aed2d90250294997e1a1a8190a64749df8919ec717263cdce02acbda5607284144226c87a600ee793681e04505fd316787755f82acaa828839733ad7e9f4ecb891bbe7a5f79391e22dc8f1189ef239a447cbcc1bc7e94d8abf028564e045ccc021af9077b27664767ae27f939c690c1b27b55ece312695e3c09e1d95b9905605228a0b2fd687b9f531687569c83257c04aa327e63de88f55b7cca3d5f41b98579a86c7913de932e3a9988cf491fd081372a1ad2e73572aeb98908a370a83ccf9c88dbc24bc7941db317dc5b937dfeb7c74238f35d0a5cf0e576f343a4b257019cb515e1b4d6a7ca2171be52b2304c06bcae76b7389286c2036d46cd10fa41bd34e005db32f3aeabd62defb1dfad60c1d0a7dde88415ada71523b9551d3c305a709c33ee5af5faaa39fe5292cd0253eab35b183adf6f17d754ba9da37b49db5d493f2b126d180def7b340167c16d0ff266ba3ebb157465fdd5780ea8a7464f9bfdbb82a2a3dd831ef90a38607d34fc4e893fbf4024681b2a80af93af534758c08ecc925f3b3cf5a4e8c0b77806c26e13316518c5e8cd2930a5d6d5ba3c5d6e7b5c8d8ef355df6a1a6c94a045dde34c6101827e401f0c1e092b680d43ad9cd0c4d3c7ea43df6a63dc8313729ef154acbc02e92b58574259ee881a6b6e0f26b2a4a8d1da4f864cdceb4eecc3800002d8c5d9aeaa41de090ed08c8b2bfd21ff91854b7739899a7a5ad6b7ab88d4efeb1c0752db3676429c5fde0f05e5486fab3a0e118e82c4b0e1243aa96e0e631ba05f219ab88b381b3efa972f0e9158a9f3a58526c6c1a1d5a6b703022bb0da00e8f1fb68b3faa69ae93f83735aa435737f065adf944a53cdba1de407eff99f4eee801f150797f41517ab4121a5c7ddd0ffb90090a00839a0235fae92aea3f40f266dc147e4b4cd29e355893c2c7e3607458de72eefef784f21eb4c1d34f85f996fe7b2e8194f3b61eaa8160a94eaee5a3aaf4e8c0a99e977755375b74361370a3e5e933039a4cd5648b89fd664fcde3806b50ee4a3ac18c0d2e1bd050f6107f13492c75eeb503e2e0f322868191a12d1b988526e4617be207127396a054a650cf280d8af664a10bf0d29146fc04ef97d2caaa8902e9d723de6aa02e5db5178c65e5301404a81efdf1dd219a19cb1b32572a1ebe6a09a300eb3092c18ed514398e5fa62239d7dfa445c78ba6058e8c1d4529626db6e8f3daa499515b1630c73d2e430d702ad7cde796b512307b14516cb7f3900ab58e5e2ea1fb1d53f744884d034da6c5ba8dae798c7fab45920522f4dea83b70062f721d527d2d0bd3d944fa31747f4a15d9b04ecb51fb0c41bdd9fa5e8fbd56e6acbe318e509a110330568234679288e3b4abe5182afe4254af2b48e530eed5fd288e00a5beda1609ddcf390a619f673fd7984d5ea039783dab9ad555fafff44eddeb60d8829aebd085ef8061e2a89d4dc9636ca3e7a52a17748e7f1edc764a099ba298b22d9ac27e25f405e29d8ad91bb76f4c497c5321d5139609f7902fbe31a9a082cac0920f6752cb1c60e388b8a80f278491d9385b734da83332a7b45d96d2708749f333055e93dd8bce059f8f201e4d1ca0a17942ba6ab6c1f1ce2526585723dbf9da5fa91062460b71a90c3b93690f121e4b6e0e3c0dce28885ba01331d4aa09e4fcb0ce01a0a53183fd5ec6afb19920b14bb462b517307bea9622788fbb168befa9927a0cdab1c8e360810ecf66ed0fab4262b46e800e657dc4719d88664fad1b1313282c93ef1eafc2446c204afb2c35fd529cdeed3e4492e9d48d65375b8b6b13610cc8c3a530d4d128808841930a0b59e2443a7f6b932a55ca6947ec60dac1db421a602ae43265071079e4567106233c2b01114b097471338bd513dc447c7a644ca318e592a95323061d74358b8176ec4713a1097fe7b4e50a6c1a24f12e970470d8af1a9d785c4031aac237dd6159da39300a4e2baf55788fa179f8422b8741d0d6f8d1f61ca722e32ace775415b91a7479742c949d358f687745376afb42b10cfce451465d882e7edaea1178f0d070a3b55d8dbdea5be56a15afa38b3dba02a7cb927d555fbff7074c505ca2ad4002d90d8f5d4768bb736b369d2e958e0bc89659f9f7ce11b3248a2b2b37e0db2dc659a62d4f88cdc7ea324a9c93684daa6209257622e76fb81133ea67158526dc6720a3caa2bd03c091280f2d4773215aa56be57491019ffabddeae1df2d27804bf1d97c98b73ca6254dc0ea2735616c4fe5335dee08513d6109acbacac2aa31db3dd894fb3bae8a4531854fb5f96630410d817999089e1c95d8358357d9095153c2f874d3e99bc54d28a3a4664d0908ef49db755fe530d4ce051ab59e8448ba8da62a6ea8edbeeadd6e115d36ff91fd64b2adbcb4048f481be4811866cbbfbd47b0c804a8c8479043c8b14ac5b98c2e3047602483a198cf0fa758b33fdbf2cdf33456135493f462de41d60a473379c87a0acea70d568b812c8aefe9fad40b3da7ad7d267c71f566c5437bcffd540c4d8de945a47d3800bca26b1e2fb35b419995ec5bf3da69dd206da8ac2a57da175d06ee22c7d7b6aa06341a0f7751a571e64bc5ada6682f67f646b5a66156ca0ed8c18e84a2bb9aa228ca6c1fd589da08b14169a31221d2417fcab9e0002083796b67fc0a54cf5e48ebaccd4a0968e6aa1bde65412970423b43794c6ca449558527058568fb23171ffc3644c6f90b76af3ccb9f5af035f73c541d8b665889d65bff0f47e7b8b7d382e11b4f4554a5ff16f0b1d5ecbe54b28fdda8b2a6335789a52004554bc9ae804e1b936e74d4b8abcf29d1d34805074ea6e057f9bef847628476db00a3d332c66e669110fecd7f988f1b6fb19211705729e487b40f33509a88264e676bb23ae25a784ea2e22cd78c610347c94f2e805bedcf1353b618587736e1c4129573c92065dc90d27da1e482be178a97c7189c5e42613ce783d260ba963e7fa1653d13494aaa3ee97859df548ceb4e5be169ab386710dbff15d90c0eb4aee1e3c10530a8ddd292f950616872f14fed6228a470af8a420e2dc01e809b0c44728cbc9a398a31e711542e4bd170e5d118eef201b25fcd354a072eee2e7cd2ff11feed490897249d5dba36312b2408272ce7ece2e4666dc812908f0b5e0c3f580e334f75c6e2df25b5ee35fe1c60db08f2fcca1fb34a458b344702db11c1a4be63bd58a7ea481364f562bf5d7c802d122d056f4cb0e1a14bd4a26e35bd0185e3ce1d7e5625ffaf35c918cc65ff1057dfe7067c147a82729e410fedb7e663baa15ab7edd2c0191aed666c16f5e45b453a161a35fa17bd93442e76ecc4d56e4b2822494ec46f27ef6efc1cd18eb66be83ddbecd7d1bf08b01fedbab975bddb920ac494005e91abe5198bea2ec9344da85a9b3dd79b7f1dc93b7b3f13a84b7fdff83e002a005b2aa5ce6c1da521b40281581a202324b9a17078acc7c57505e059a75f9d81ad9c548897a159dca8c8372e2468c5111f1b4a06ef474dca56b4949f7013374cbc312d520a956ca9f7e1f8280dbd4f6cbfb7f226486212828f53a187d08e5be7ed36c3468bcffb301e41c0fe705dcead8e9f16ac20f05bcb3923d87f2c6a14be272033d2cc8b1a070424d40247b9bacbc308a5cd47f87f5c13efa4405c2522c02a94b89e15fcb5d4a653b59d9"}, @op={0x18}, @op={0x18}, @iv={0x108, 0x117, 0x2, 0xf2, "b990c6712fb5032293e9236a5479f02c409810ec2dfd780f22eeee9c403b290aa7f6af87d420277407b3f6c6d30b1a0bbe4fa6a1df8d1083af9975a9ff518c65ead8be2b5fff005dc5a30f0f97f6d466e044bbf62152194d982cb980340f72cd5f3755486c732e8b78cd6100829da41b7e92c99d897af22d9b5e47ce23bdbbd5bcb7f6028557b2a92fe4caa8a79d99649f9e9479c905e63f03972a0cf705daa4cf4088082fee96e9b24c0107f4b07a615b3b3f9eb268ce65d3bffac1446f7a28d8dfbf55d1a256500542c008b093082a5e7db73262e7d6884baad3358ff428364da43d26d0f90f667f8640149dd4aa73d24e"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1168, 0x8000}], 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) keyctl$session_to_parent(0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000040)={0xff}, 0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f00000000c0)={0x8, 'veth1\x00', {'batadv0\x00'}, 0x1ff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x0, 0x0) 00:33:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045440, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 1002.863525][T14772] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1002.992677][T14773] device bond145 entered promiscuous mode [ 1002.999750][T14773] 8021q: adding VLAN 0 to HW filter on device bond145 [ 1003.030551][T14773] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1100, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:42 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:33:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x800454d2, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:42 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000013c0)=0x101) close(r3) recvmsg$kcm(r3, &(0x7f0000001380)={&(0x7f0000000000)=@l2tp, 0x80, &(0x7f0000001340)=[{&(0x7f0000000100)=""/112, 0x70}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000001200)=""/116, 0x74}, {&(0x7f0000001280)=""/138, 0x8a}], 0x4}, 0x40000001) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffffe, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 1003.433615][T14789] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086301, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1200, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1003.574442][T14797] device bond146 entered promiscuous mode [ 1003.599048][T14797] 8021q: adding VLAN 0 to HW filter on device bond146 00:33:42 executing program 2 (fault-call:0 fault-nth:0): clone(0x94063101, 0x0, 0x0, 0x0, 0x0) [ 1003.628073][T14802] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1300, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 00:33:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x8010500d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) [ 1003.812342][T14814] FAULT_INJECTION: forcing a failure. [ 1003.812342][T14814] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.887293][T14814] CPU: 0 PID: 14814 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 1003.895998][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.906052][T14814] Call Trace: [ 1003.906078][T14814] dump_stack+0x197/0x210 [ 1003.906099][T14814] should_fail.cold+0xa/0x15 [ 1003.906118][T14814] ? fault_create_debugfs_attr+0x180/0x180 [ 1003.906137][T14814] ? ___might_sleep+0x163/0x2c0 [ 1003.906164][T14814] __should_failslab+0x121/0x190 [ 1003.933921][T14814] should_failslab+0x9/0x14 [ 1003.938435][T14814] kmem_cache_alloc_node+0x268/0x740 [ 1003.943737][T14814] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1003.949036][T14814] ? trace_hardirqs_on+0x67/0x240 [ 1003.954077][T14814] copy_process+0x3be/0x7230 [ 1003.958679][T14814] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1003.964416][T14814] ? kstrtouint+0x142/0x1a0 [ 1003.968946][T14814] ? __cleanup_sighand+0xc0/0xc0 [ 1003.973892][T14814] ? find_held_lock+0x35/0x130 [ 1003.978820][T14814] _do_fork+0x146/0x1090 [ 1003.983077][T14814] ? copy_init_mm+0x20/0x20 [ 1003.987590][T14814] ? __kasan_check_write+0x14/0x20 [ 1003.992718][T14814] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1003.998275][T14814] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1004.003572][T14814] ? wait_for_completion+0x440/0x440 [ 1004.008876][T14814] __x64_sys_clone+0x19a/0x260 [ 1004.013661][T14814] ? __ia32_sys_vfork+0xd0/0xd0 [ 1004.018516][T14814] ? ksys_write+0x1cf/0x290 [ 1004.023044][T14814] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1004.028339][T14814] ? trace_hardirqs_on+0x67/0x240 [ 1004.033378][T14814] do_syscall_64+0xfa/0x790 [ 1004.037897][T14814] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.043791][T14814] RIP: 0033:0x45af49 [ 1004.047693][T14814] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1004.067307][T14814] RSP: 002b:00007f0616ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1004.075726][T14814] RAX: ffffffffffffffda RBX: 00007f0616ac4c90 RCX: 000000000045af49 00:33:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1400, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x3f00, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1004.083708][T14814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000094063101 [ 1004.091692][T14814] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1004.099670][T14814] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0616ac56d4 [ 1004.107650][T14814] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000003 [ 1004.257863][T14832] device bond147 entered promiscuous mode 00:33:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="3eec987ee3e1c780f978ea671c4981cddd1511c5f2e14296a2b8aef707b9d803c13af98d8cb1d014ea59077365fd7715defc5596f7124a7d8fc4fea92a9ae127d0c4c36e80189eb8ddd873f3d144656cabd9e9337ca72961f5215644449e0d23e412df9fec58bb9da6fa7b195c95928e5805a12f02c930b47a57d418afcac12d3510328dfef8891520702076d3851e95fe7c8f884dc204d95b8a", 0x9a) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1004.300330][T14832] 8021q: adding VLAN 0 to HW filter on device bond147 00:33:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x4000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80404519, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x20400, 0x40) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @local}, &(0x7f0000000100)=0xc) 00:33:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x2, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:43 executing program 2 (fault-call:0 fault-nth:1): clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:43 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x2) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x2010, r0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) 00:33:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x5865, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1004.703673][T14857] FAULT_INJECTION: forcing a failure. [ 1004.703673][T14857] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.772162][T14857] CPU: 0 PID: 14857 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 1004.780873][T14857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.790933][T14857] Call Trace: [ 1004.794238][T14857] dump_stack+0x197/0x210 [ 1004.798598][T14857] should_fail.cold+0xa/0x15 [ 1004.803212][T14857] ? fault_create_debugfs_attr+0x180/0x180 [ 1004.809031][T14857] ? ___might_sleep+0x163/0x2c0 [ 1004.813922][T14857] __should_failslab+0x121/0x190 [ 1004.818882][T14857] should_failslab+0x9/0x14 [ 1004.823392][T14857] kmem_cache_alloc+0x2aa/0x710 [ 1004.828255][T14857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1004.834498][T14857] ? __validate_process_creds+0x22d/0x380 [ 1004.840210][T14857] prepare_creds+0x3e/0x6b0 [ 1004.844725][T14857] copy_creds+0xa8/0x7a0 [ 1004.849067][T14857] copy_process+0x128d/0x7230 [ 1004.853758][T14857] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1004.859487][T14857] ? kstrtouint+0x142/0x1a0 [ 1004.864012][T14857] ? __cleanup_sighand+0xc0/0xc0 [ 1004.868960][T14857] ? find_held_lock+0x35/0x130 [ 1004.873754][T14857] _do_fork+0x146/0x1090 [ 1004.878021][T14857] ? copy_init_mm+0x20/0x20 [ 1004.882529][T14857] ? __kasan_check_write+0x14/0x20 [ 1004.887650][T14857] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1004.893204][T14857] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1004.898495][T14857] ? wait_for_completion+0x440/0x440 [ 1004.903796][T14857] __x64_sys_clone+0x19a/0x260 [ 1004.908576][T14857] ? __ia32_sys_vfork+0xd0/0xd0 [ 1004.913437][T14857] ? ksys_write+0x1cf/0x290 [ 1004.917958][T14857] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1004.923246][T14857] ? trace_hardirqs_on+0x67/0x240 [ 1004.928306][T14857] do_syscall_64+0xfa/0x790 [ 1004.932834][T14857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.938735][T14857] RIP: 0033:0x45af49 [ 1004.942637][T14857] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1004.962246][T14857] RSP: 002b:00007f0616ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 00:33:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0189436, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc020660b, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14}) 00:33:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x18, 0x14}) [ 1004.970662][T14857] RAX: ffffffffffffffda RBX: 00007f0616ac4c90 RCX: 000000000045af49 [ 1004.978640][T14857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000094063101 [ 1004.986628][T14857] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1004.994615][T14857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0616ac56d4 [ 1005.002589][T14857] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000003 00:33:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x18, 0x14}) 00:33:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x6000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:44 executing program 2 (fault-call:0 fault-nth:2): clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x4, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:44 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000)=0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5, 0x0, 0x18, 0x14}) [ 1005.519522][T14902] FAULT_INJECTION: forcing a failure. [ 1005.519522][T14902] name failslab, interval 1, probability 0, space 0, times 0 00:33:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f00000000c0)={0x9, 0x39, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0xfffffffffffffede) socket(0x10, 0x80002, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0xc0a40, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) sendmmsg$alg(r5, &(0x7f0000000140), 0x1, 0x4000000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) close(r7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c840}, 0x4b0796677a064b22) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11000030}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe0c8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x801) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x34, r12, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r12, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="14a226afca412909025d470a6c72cf05"}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x24048041) [ 1005.676605][T14902] CPU: 0 PID: 14902 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 1005.685320][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.695377][T14902] Call Trace: [ 1005.698666][T14902] dump_stack+0x197/0x210 [ 1005.703014][T14902] should_fail.cold+0xa/0x15 [ 1005.707623][T14902] ? do_syscall_64+0xfa/0x790 [ 1005.712318][T14902] ? fault_create_debugfs_attr+0x180/0x180 [ 1005.718145][T14902] ? ___might_sleep+0x163/0x2c0 [ 1005.723128][T14902] __should_failslab+0x121/0x190 [ 1005.728088][T14902] should_failslab+0x9/0x14 [ 1005.732607][T14902] kmem_cache_alloc_node+0x268/0x740 [ 1005.737957][T14902] ? ___might_sleep+0x163/0x2c0 [ 1005.742840][T14902] alloc_vmap_area+0x147/0x2080 [ 1005.747714][T14902] ? __get_vm_area_node+0x12f/0x3b0 [ 1005.752935][T14902] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1005.758510][T14902] ? purge_vmap_area_lazy+0x40/0x40 [ 1005.763739][T14902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1005.769999][T14902] ? debug_smp_processor_id+0x33/0x18a [ 1005.775480][T14902] __get_vm_area_node+0x17e/0x3b0 [ 1005.780528][T14902] __vmalloc_node_range+0xce/0x790 [ 1005.785791][T14902] ? _do_fork+0x146/0x1090 [ 1005.790230][T14902] ? kmem_cache_alloc_node+0x385/0x740 [ 1005.795707][T14902] ? _do_fork+0x146/0x1090 [ 1005.800141][T14902] copy_process+0x9aa/0x7230 [ 1005.804741][T14902] ? _do_fork+0x146/0x1090 [ 1005.809171][T14902] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1005.814910][T14902] ? kstrtouint+0x142/0x1a0 [ 1005.819436][T14902] ? __cleanup_sighand+0xc0/0xc0 [ 1005.824381][T14902] ? find_held_lock+0x35/0x130 [ 1005.829170][T14902] _do_fork+0x146/0x1090 [ 1005.833431][T14902] ? copy_init_mm+0x20/0x20 [ 1005.837942][T14902] ? __kasan_check_write+0x14/0x20 [ 1005.843062][T14902] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1005.848620][T14902] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1005.853919][T14902] ? wait_for_completion+0x440/0x440 [ 1005.859229][T14902] __x64_sys_clone+0x19a/0x260 [ 1005.864015][T14902] ? __ia32_sys_vfork+0xd0/0xd0 [ 1005.868877][T14902] ? ksys_write+0x1cf/0x290 [ 1005.873399][T14902] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1005.878701][T14902] ? trace_hardirqs_on+0x67/0x240 [ 1005.883747][T14902] do_syscall_64+0xfa/0x790 [ 1005.888266][T14902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.894165][T14902] RIP: 0033:0x45af49 [ 1005.898071][T14902] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1005.917687][T14902] RSP: 002b:00007f0616ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 00:33:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x7, 0x0, 0x18, 0x14}) 00:33:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x6558, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x8100, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x9, 0x0, 0x18, 0x14}) 00:33:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000180)={&(0x7f0000000340)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x2, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x10, 0x0, 0x18, 0x14}) 00:33:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xc000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1005.926113][T14902] RAX: ffffffffffffffda RBX: 00007f0616ac4c90 RCX: 000000000045af49 [ 1005.934100][T14902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000094063101 [ 1005.942110][T14902] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1005.950093][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0616ac56d4 [ 1005.958082][T14902] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000003 [ 1006.171071][T14902] syz-executor.2: vmalloc: allocation failure: 32768 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1006.191132][T14940] mip6: mip6_destopt_init_state: spi is not 0: 33554432 [ 1006.225843][T14902] CPU: 1 PID: 14902 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 1006.234556][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.236823][T14943] mip6: mip6_destopt_init_state: spi is not 0: 33554432 [ 1006.244634][T14902] Call Trace: [ 1006.244657][T14902] dump_stack+0x197/0x210 [ 1006.244676][T14902] warn_alloc.cold+0x87/0x164 [ 1006.244693][T14902] ? zone_watermark_ok_safe+0x260/0x260 [ 1006.244704][T14902] ? kfree+0x226/0x2c0 [ 1006.244724][T14902] ? trace_hardirqs_on+0x67/0x240 [ 1006.244741][T14902] ? __get_vm_area_node+0x317/0x3b0 [ 1006.244763][T14902] ? __get_vm_area_node+0x2e7/0x3b0 [ 1006.244784][T14902] __vmalloc_node_range+0x44c/0x790 [ 1006.244804][T14902] ? kmem_cache_alloc_node+0x385/0x740 [ 1006.299677][T14902] ? _do_fork+0x146/0x1090 [ 1006.304117][T14902] copy_process+0x9aa/0x7230 [ 1006.308723][T14902] ? _do_fork+0x146/0x1090 [ 1006.313166][T14902] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1006.318900][T14902] ? kstrtouint+0x142/0x1a0 [ 1006.323427][T14902] ? __cleanup_sighand+0xc0/0xc0 [ 1006.328374][T14902] ? find_held_lock+0x35/0x130 [ 1006.333158][T14902] _do_fork+0x146/0x1090 [ 1006.337417][T14902] ? copy_init_mm+0x20/0x20 [ 1006.341937][T14902] ? __kasan_check_write+0x14/0x20 [ 1006.347152][T14902] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 1006.352714][T14902] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1006.358012][T14902] ? wait_for_completion+0x440/0x440 [ 1006.363316][T14902] __x64_sys_clone+0x19a/0x260 [ 1006.368084][T14902] ? __ia32_sys_vfork+0xd0/0xd0 [ 1006.372939][T14902] ? ksys_write+0x1cf/0x290 [ 1006.377467][T14902] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1006.382778][T14902] ? trace_hardirqs_on+0x67/0x240 [ 1006.388001][T14902] do_syscall_64+0xfa/0x790 [ 1006.392553][T14902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.398457][T14902] RIP: 0033:0x45af49 [ 1006.402385][T14902] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1006.426317][T14902] RSP: 002b:00007f0616ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1006.434729][T14902] RAX: ffffffffffffffda RBX: 00007f0616ac4c90 RCX: 000000000045af49 [ 1006.442714][T14902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000094063101 [ 1006.450667][T14902] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1006.458623][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0616ac56d4 [ 1006.466628][T14902] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000003 [ 1006.479198][T14902] Mem-Info: [ 1006.482658][T14902] active_anon:131667 inactive_anon:20298 isolated_anon:0 [ 1006.482658][T14902] active_file:8004 inactive_file:127727 isolated_file:0 [ 1006.482658][T14902] unevictable:0 dirty:118 writeback:0 unstable:0 [ 1006.482658][T14902] slab_reclaimable:16165 slab_unreclaimable:106878 [ 1006.482658][T14902] mapped:80435 shmem:28987 pagetables:2583 bounce:0 [ 1006.482658][T14902] free:1101732 free_pcp:610 free_cma:0 [ 1006.522094][T14902] Node 0 active_anon:526668kB inactive_anon:81192kB active_file:31876kB inactive_file:510908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:321740kB dirty:472kB writeback:0kB shmem:115948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 319488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1006.554100][T14902] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1006.582770][T14902] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.612793][T14902] lowmem_reserve[]: 0 2535 2535 2535 2535 [ 1006.621505][T14902] Node 0 DMA32 free:624332kB min:36088kB low:45108kB high:54128kB reserved_highatomic:0KB active_anon:526668kB inactive_anon:81192kB active_file:31876kB inactive_file:510908kB unevictable:0kB writepending:404kB present:3129332kB managed:2599256kB mlocked:0kB kernel_stack:16140kB pagetables:10328kB bounce:0kB free_pcp:2448kB local_pcp:1232kB free_cma:0kB [ 1006.655622][T14902] lowmem_reserve[]: 0 0 0 0 0 [ 1006.655651][T14902] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.655689][T14902] lowmem_reserve[]: 0 0 0 0 0 [ 1006.655712][T14902] Node 1 Normal free:3766792kB min:53800kB low:67248kB high:80696kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.655749][T14902] lowmem_reserve[]: 0 0 0 0 0 [ 1006.655769][T14902] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1006.655848][T14902] Node 0 DMA32: 1291*4kB (UME) 168*8kB (UME) 1210*16kB (UE) 461*32kB (UME) 187*64kB (U) 26*128kB (U) 6*256kB (UE) 43*512kB (UM) 4*1024kB (U) 2*2048kB (UM) 131*4096kB (ME) = 624236kB [ 1006.655933][T14902] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1006.655989][T14902] Node 1 Normal: 2*4kB (U) 80*8kB (UE) 190*16kB (UME) 83*32kB (UM) 39*64kB (UME) 23*128kB (UE) 6*256kB (UM) 3*512kB (U) 2*1024kB (UM) 1*2048kB (M) 915*4096kB (ME) = 3766792kB [ 1006.656083][T14902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.656095][T14902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.656106][T14902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.656117][T14902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 00:33:45 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x5, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x300, 0x0, 0x18, 0x14}) 00:33:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x82000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r3}, 0x6, 0x1, 0x6}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000001c0)={0xfffffffe, 0x1, 0x3, 0x1000, 0x5, 0x8}) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xc00e, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:45 executing program 1: r0 = timerfd_create(0x5, 0x80000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x10000000000002a0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) setsockopt$inet6_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000000)="4967741e90b40ace28a22402289d322d5767d187aa21e5a6193447707e", 0x1d) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:45 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r7, 0x0, 0x9, 0x10001}, &(0x7f00000049c0)=0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) close(r12) getpeername$packet(r10, &(0x7f0000003680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000036c0)=0x14) sendmmsg$inet(r12, &(0x7f0000004b00)=[{{&(0x7f0000002380)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000003640)=[{&(0x7f00000023c0)="467d04121741e29d80640f0c38a50cde4844113ee13297590d26ca084994330207c2c5a357b8655cdad2bac67b700cc20a46b2cfc57031d278ef36b7c0843e0f89af1a89f65e7c0158e76c54e0e029af0e6f2225aaf81997b69873ea22ef24d78c612557f3f7f5e472fd55fab05ff958a569922b02e0b9d8f56ae8af1a6923816f33ff6555e58e0b73ea9d61cbae4b2168e51e5e8cc8359f3dcd8364e2cb2a30b6511375458b8b1e28311e89eaadee7c4c18e2cc3a44e093e9c69bf2406fa7aae658b9015f4e847780a66fe020d106c917aa286a6edaec90906e94a39b6af6056441fc84c8ebbb8add1fa3", 0xeb}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="386128a4983693217ccb7431ac4037edcd23c420e33298be215164c2765cba670b881864475578472833bfe189c1e3ced0e9af07480ee47ef9e8a36db74141499c39508964a6fa7dcf9f80194609e57f4296bd360bc84629bc92e90ce421863efcb2a6c385b978d8516f2413943584171a", 0x71}, {&(0x7f0000003540)="ee88429550caf1a2aeaf0bc66756261561bf29a804e00719baa2b82e427fdd98b284c28f7e235ca4c26ec3b47c44f588e79446282fd695a33a92a68f1cc135bc974d28ffcea478ca6bcb66cd865c5577043c42c2f32467c0b78f331b51ddd6dbbc02dda791cb89a2868d7e7847e1f34eca8ba8fdfecb88e8e1528d5996fa419bedf85541a8873f4229abb0e33bd3e5f885ad87c64fe63a05640e3cc90beb676248af415a7b0f159ae4414d99b66077a55fbf35189ea9e05418291c75ad2278a35d726695946cb46860b6f62db67eb9eb03d2c93b8442f9621f12eb048c6da815c1408cfef420d181a586790d", 0xec}], 0x4, &(0x7f0000003700)=ANY=[@ANYBLOB="4c000000000000000000000007000000440ce811fffffffff6000000442c6f43ffffffff00000008ffffffff00001000ac1e010100000008000000080000003fac1414290000000400000000000000001c000000000000000000000008000000", @ANYRES32=r13, @ANYBLOB="0000000200000000000000003400000000000000000000000700000089238bffffffff7f000001ac1414aa7f0000017f000001000000007f000001ac1414140000000000400019f2ffffff0000000000070000008323c5ac1e0101ffffffffac1414aaffffffff7f000001e00000017f000001e000000101890b83ac141413e000000100140000000000000000000000020000003f00000000000000140000000000000000000000020000000900000000000000140000000000000000000000020000000104000000000000980000000000000000000000070000000705514625443c6861e000000200000081e000000100000004e000000200000000ac1414aa00000008ac1414aa000000a97f00000100000006ffffffff0000e7c90101890f13e0000001ac1414bb7f000001940400000713e2ac141425ac1414bb62000000040000000301861c0000000100063044efac0210aabed4e6543387014298feaefd1001"], 0x1c8}}, {{&(0x7f0000003900)={0x2, 0x4e20, @rand_addr=0x4}, 0x10, &(0x7f0000004a00)=[{&(0x7f0000003940)="3603e74f4e1d1f60552ecf48dbccc446a45f3fba0679229de93fa150421ebbe3c2daed42fc618cb642", 0x29}, {&(0x7f0000003980)="bd92179a1069c6570eda3e56237c1abd0ee35f3a7df6968c", 0x18}, {&(0x7f00000039c0)="14dcbb82374126bea17079d69f1c6ba5252a58dfc399f8f03e3e7bc2210833ed2c968a79b312eaac8768674e6fdf188776cf1f5c8f10cd175af08eaedd18e00336bf10762aa8a95089da5c1e7d1b746609fd0b22e00bbc569158bf87487a5fbbd325992d7dc1df542198b902cf9f1b2f8443905b12d6f37a2b118357ebee77b38a2392c215e5f9d6ffd347b79fca575455b170e92801ceb646af8e3326c129d1c9e8a7f90ef346f68d8b38207d29006458d5cabf11f1ee9a9c7995feee19b093a2f63cfce1972ba6eef1146bbea74f8fc6b18babdb5198ba060083340a5361795bdbac97550d126b5fa1a596fde3e6b12fedebfbca415c6ae6305ae342109adb56e41e81b4e58595a1924e20560764818230a8525973a137d8b8faa9bb1e7fc33e375dd9c9c2e56da12cb2d3abe454a9570627ecb653a8bed38ccc51c1ed7eaccf743c5069138d493048eb88c054a6303f41b071aa9a7f8d20637bad013a5e4c328f2aaad8355c027b12d1407bf37d4a95689dd83231c49a34a9b7b3e051b0dc1216c8b4c2c7e933c77f738c215341f5756797d9f4bf1015fd05b3b84bb1bb2a4301e4592dda35b40f38629dde79349874c9b0ea1e77110ce655d795424a8d3109af5b330a755cbf92f47062a51ffd4dab572618bdc328dd9d63e3b0657e0b3622f33fbddc8e1ddb62c293b478fa0051ae19308a616ab8d13f46f6d81dfe267eafddeafc7e137f5d02de6da73dc6e3e07f27a15b052ba5afcba57a9d6e7426c5d7b100f12d2537e7dc37f7b4b034411dad7dd8ad1be87ec82f7b1af5cf0d700aec27ae40a9496b43cf3d53235f9b2bd5d04b8efa5e4c73c8c726de784f5c6cbb0dfbc3e7b2d15921fe9a3a1bca6de083768b6eed44d1259b41f6d5f349aee0aae020e151ea1ddd4c029cf72793f9d827ac327258c590df4324552e50a4025778b586dec2829d0f9aef5a2431d4bf18c5274f23c464ea31c70ccebfaa183d3508bd0df72dacfecc32a4a057a6345e7912759a0a6e0afdf087d0164b5b511dd287703e1a3cfdb79a27b1e41b827abcd360e893dd67bfab45638af1f5b975a1cbca3a56123e7da861465d786673011e637e537a9dfced6cae1cd697dd5cc1ee5985d7bc2382f331d193a1e0103844be03ed76625cdb43c6df3de8606b020811ae9df85a152ebb2e53de6ad41117d8b5bea0f7d722788106b4527329219634f97682baeecd42dfe4e2145a1546357fb4deefecb64d1d5a540831d9f843f53a49311fbad46437af293fc6c7f4c981d79d5837b0080c98a593dbb1d8cfeeb81411a5a89be882db6b52d90f8c10deefa54b3297b965f7885c012a30fd6b08266c320b4a5451fafcfac1edacdade0f3b9e9588cb705be5295f709801db5c5438f8e53a8c283e4fcc35f331b70743a36daf921248ef07180efc0ecc982d649d673436e71661ccec0a42f55f549bed8ed333a93a3f93ea4131b68fb4489b340ea9be8f506c2dafada771492c411046f9827cbe3b05ddfed4e1461b0e6ef7849076b750f426e1b520396a61a242007b14e4fc09635cb629e4769873ff932460ac2f16fe336e7de2d3a18b0164b630e1d15f5c17daf5a95b4ad26e8493aeb9d5b3b4a9a679b5a0eca77b42923ce569d1adf32a7b66df9d9381801f2ef26e42e2e9988f47a7445e5e49b6e110d6aaef2cf34d543fe776f32ae3e028df1ba1356b882d4b11073f927d4daa59b52328ca3886d2944cb582d5c33f3ece1f5c2ea3afd158e97e4069eb52acd0463dbc9b9ed383e731d00ce7be9b96145d1436560c3594486f060ac8cfcdc99aab0ca8bcf3529571264cfb0f66859151f473bc6c235b98a61168b1f74d8a18ed2f82c158e9f2db430738a1c607381eb8a561d1fc575ca24b9f4f45ac43f83bd299e043c05313070b328ab0dcb9be1ddfe4afc52d33f5358a86c7d39db3c867621efab95d0b8bd4ae4e797c87e81adec10e391d3a4d0e3d924db69db2b2cdde3d043f18348eca0df873ad93ef18fdc8eb4222d02446d5d3b605d8185f39b2c13dae720c5c4354f9c14e4de79f1b81d6cabd956349d310c32747cac2a165c16dc3c40bf376b77ba007e12a00f3f5df9aa8fe62e7fd210e2dc11bc66c70563afaef680de624236c31a9f641b6f072f7ea516322ef956a8c8c97f9d778a8d0407702663623c366ea243994a19dc32dc655269cd63da627fb7801a43296506161818b13e220964b3296363c9933225332b4775ec7849cb43d2bd32942c4ca05560553abd718d840fbca51ddb29835b45b0637e065797024f17a3b411aa112a9a6c95fd44404611ac2c86834c0076787f5f91df1d24355921a34923e9fe6aa3795c2500b3a7a2e814790b95089bb7bb086af245912ae10b91f40c54867d375a53836324ce465d0a05ab9cfbf6935cf881e285ab1ae0630bdef8310c082bb6581ef2262cc214b942ba56f203f21c06bfcaf94db4757b9ad4b6a304aae5be0a1df9d5bdd3a3a4750cecf02573c82a50903d7ba1a1d5a7b28060d05c0f19e85154fbbaecc623accdec25ed9e0d7e04d6cd2b321a0e182d7592eef18704b9ce12f407b71afdcbfff07deaecd0d4e5ab46c13a09f4fab6f10c3461d8b80b57d031f750003fbb51b63227038245ca4362a83669b6a6268e22d250ed5443957e87a67027ef6b24389216cc2ba63a1873c2907973af8bdd391b027bcb369dad0e6b854f2a0e228a0b22b2c486d5d3ccae066ede2554e68b1dc37d28b249230099636ff73eb5848059cd20223c02a724ff9448d33c2171ae2111199c5d5e43f979206e898f08146546b0c11bb929ed2893d0aa38060b0319ce95c99a26837bdd6ddd37239dbed981b608c48775863a3f7414af89ea7889dff0a5f8d25a186072f55e1dfbbc515698d29b7be7c00cf530ed93da19726856b62c684a0ef858520ab9981b22d3f77e5acd5f88ed4cff6fa9b4b8fd70fda236f11c3bc21160c6fe9d3bbca0aa60d8f085c9194342f77c681c26c6d75176052671da4b1cdaefcd01d341ddefac3de9ed1998ca5940f330fd8dbf5aca72e58a49288802f49673bbb07d41e8d8a6819c60ba0f328fc5953e9a67404080b87a61741f0244fe06a7341867e8fab6b43e7a9f940cab578ce557570e2a1cbea5b792339ae7e0cf7f39efc6b8df00bee34fc21ec5fe6722c5b8e3e18009ff98edd920d731998c09e2bf024dd7270e7413943b0bc6b1618dee032228847925884f9e90046aac9714667b71eab0bcbb7ef30d4dad58265da00e8de71457164256afee31fc618935a75ae00108fd5c93ebf90ba89518cad5aaf455fa5c5426c057e62c11bbf3d658243f90519a5557bed6f746bb75eaa59148bf01863ac6b79c4cee26128ac62d8b99a413538b7204781bd30c52db5a1ea83732b88dda8fe8289b1aee57f805370e6d38328a35a74bd25ec239f07815287880ef834490a61888ba02b0869717bb0b66e19e5d49f2377237e0b8ba2cd5d5347c0188fcfe5bca8121207ae4a12dc6df0c34d128ecd595c08ce68512c67c2cfeacfb1574084a8b6f8a2292cbaf57e0f0e2fdfc5680ffeb8f3eb2ec0bbae2644c4080c892cefbed95dca9787ab6299a2e9a30273632b1e7d91cb70523105e27dcc9406922a6da55058eab148efbce693fea0d6cd1e09d8774dbd5a7f2a743124a415074dd39accdf6dbf2041eb253be947fc187d1c7ca315df3f594f5a361fc9aef99c5ca911e6a0738b17fd08b7690ae7392c762093024d587f94f8cbb5d61a97369b108846905de918e4b6318f7b258b72f9b1a888427f35b7f125ca2b554cffbba37a233ea6049434c7460f18440ea99f1a671d1cc52c9331aeba10c5030fe5e6e6e066960b91ec3adf5df2bf710e21f5bce9ac04029ba3d6f0a67fe39f810200f65cea6ac2050436260de4b4e7f219520b6d5e14a2354161bcef385ae8a60c6883c96bdc1307c47b924602abd375252f7b4d0fab7e6944a1b24181eb2d4e1ab7f977e445cdea67ed45938bdf84ef74c03303fdb75eb03f8ce7d3354fa359c05a2e14e61ea8d2062b4f68f2430cf2c3d0062c2b450ab421a702d0fd563b54c7272f3b05630efb9ad828599504ff900f16b1ba08b5dd9e90a360f1d28b1c430acf189ebc91f827b75663b4bee348308f4536aba05e10cf1d79d26d08bd3dd5d4d1d19e77eaf548fd97790ce40791d790f9c0bc1f78ba9373089f7fa5ba72599a99b77e1489958afb7693d667739ebdaa261b1e9786de8d4f1c000c1293aaf4814d7d9a91aa868c4c51bb6f26d354855585289ab65f27e7f228d52e8e363c700111865578c09c2dd66c6a2561b30b9f15254d58698f533786cf0634135fff1a363dbe4b32cb54917b4c50fc535d591d1268c988453da2d5b9d03e71fb4eaf6fbf26177387a66d575368b9a1c8b35eb1899f1f9723e5d79cbe35eb0a171888d1facf59331be91e677fb92fae3397f925f7c99b926624e0a0c70b2a5a5f7882cc2516a8db28ad06368842ec50aeb91f1be4e09c37a7950945e412d68e28f008ec4697930a466d3e7e8e3ebbbe9244a784d1ed4eed1a1a00d48757e7d34203d13fd12d566ace06192d1e8b06a8370ec45992c610d81116d6ee098f6e5e8b3e8e35f34537a46528e4c7a533d3319b8eb935667aff2623d32abb443d76859a7b205440f8ff4bd95c64bb1cba6ee546d245e50f1c79a4713ded305f84277beb65c3f086fb05b4ee74213f72652df8f4856d2010f3276a4f3567f8676cf3cfdff3df5b1d08c4b4f20742a70cdfdd2226e241c9c1ca94768729dcaeb90f58f1fbb1596b190c698b7337ec9b17507bedb6ea8ead00751c69df9a53630931fab19a60e514dcf1407fd8340f488d0d9fb63ae367f78c5919a692875e45c36f15219f5212df7512f583564f670f70347ac8d235e2cbbd4cc3be4f50216026910fb914ce986eab0028545128169bacb0b07cd84294e15583e85f1faba4a9d17f7dd8335452cf28ab65cd690a3d8e456d432d42d36e1e7b2af1d70376f7024178a0dbefd8638e0638197611181b2852bd4a5b8d2b53b04d01b51fc493f0d7c4bc3a149fb82cdf7fc79a8d2d07c7e8a7f35b8fef89226d17a11a9d3bcd01705c7272408c9e79ef6e8e8db815d6c1b34922db19a3337835e145a37b141aef35cfe20d6b59635343da481f0c362457b21b2335baa507506f906664d21bc76e736b1e858f4db505c4ebbfc14f35332bceb0592d4e0ff47ef87ca67986bc7a0ac818cb7f9a05e953261da3cca14c00deb1ae7c10ded4fe039b7f95a918682deb25445c3f91e15a07dc9a1780dfa86eb8a019553f42500ef3903747938f7932c8dda6d70a10f55a0eb9f8fe5e100d26e22cebbdcf2c91536f36b0c5e20c62734f22a01bfb6c1d4ac0b5b50f34374441f48640fd36321f965d357b5526349112eca37f3a918c5e5e6b25dda46b8425ddc00f63ca6571226312bea6909faca403f6d1781551e6cd7dbf16b24f4680c51f95a7a32fa40ece45d3e06a6db5b08c409105f1c0a87695c387b92ee1917cd878d60cef3ec7543e9e48625f54ec91492455b737429f201f68f8d66a961b53473c06e1d999177914bad616b7122911859c2b933ba3290c41ef509b01415b6b8eff2216a8f5eea57c46b214f1b21a54ca28af97c1066e0c8f2e691da8e8201d4f55c90376c04af57c70080852b7805f7afbd2c1d21407daa33622d08178c66bc3887a56eb458e44f35c529a1312a4f1976b6ba59c01df6e7ea332e549a548395cc982c0571be4cea2ff157d0279cd848766a11a174f", 0x1000}, {&(0x7f00000049c0)}], 0x4, &(0x7f0000004a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x98}}], 0x2, 0x80005) close(r10) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r10, &(0x7f0000002340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40510100}, 0xc, &(0x7f0000002300)={&(0x7f0000004b80)=ANY=[@ANYBLOB="68000015aaeeaf790800", @ANYRES16=r14, @ANYBLOB="000026bd7000fbdbdf25030000000500060054000000050006000200000014000400ff070000825c000005000000ffffff7f0500050003000000050006000400000008000200eb000000050006000300000005000500000000000800040006000000"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r8, 0xb308}, &(0x7f0000000140)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) r15 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x20d02, 0x0) write$UHID_INPUT(r15, &(0x7f0000001200)={0x8, {"1ac1818116337fa3a7842f0536bce4e173b8da8380b94d0ee960d31061cc638a0c36948335a85711b796cf9d72db68a802a8b05902dcd5e1ff30bf829c1e3bab131cdc79110bb0b41b7074b210a024db25c150e64777e240ea1c252156472bd345f676eccf6f2ceb1c0bbdabcda1175799caad74c4382920a61aba61dbefba4a4dffdea65ea621770166865716b39e4d9e8cf502ba62dbdfbf508c3daa805dfbbe666ff12cdcf81882f569aeacc0ffefe84af7c069327905060b75bc0016e6babd6ab86768c08700125704ed55e12b23392059e44f4c6c517765f0da244bedf4f80986fb24d96a4f41825019664ea57adceb7f0d0932f19c836bda7f51346a72282b6ad0211394dd4fbcf9f603b388bad55240e97fb13d3b51ff621fde5b0b96e37acef69822f0f14432268f7a560564fa12b18f9a54c4e4755963cb463422f3e95718db6f982fd2ea2c426ac7f302e76e9ca73d0aa0b2f59b5e39cc354a397b9040a8418e6217918c2888cd9bda1dbc72478051aa981dde6ebb35c5e544868784e836535474d144779eaceec433db0c10dc4d3a64978f9cb769c7dad72ec439b1d2e19801d6b868069a42343fab6243bfb5381f6232d363505b15734c81d14f3bc1de7a74acd9755d72fba50a81c8027962389b804befd9e8f19a47e9f0fb39e38ab441696f099cf9529644c64b09f9e4edff87d5cf1826d52bf966ebe23e8ee1a9934e87a928946b6dac1e981a20cdbe9ee052a4776b37fe6fb2d2cc864df1bbba3a6751c559b3d6a12149d74b28b383935a05f8dba71f59f7e4f11b58e0cff6da030ba2d14c2f1a46b46101d834f1f5bcac188e188f96a20f0fd2edb8ba1ca9f01dbd7089435979ca6370881a2bac336bc428fadc7000f16039e99aff6529f306cab6fa02aad4753e59a7a14dec8830344239302955d0743620480d00deee29ed565f45144caa0c2c1cd87afc0aeafa01b9290fe417a3842cbc987b6a7ea73935a2078e8e1eef6e0e07e21564d86b1ae836a2b29ecd7f9018d4d794c4cc160158089642a2c3f13f6e48b0fb873d9ac6d98d6ea4444ec9ed858f40c42446c86053df2b64cde89b1b3ed9a626ead127d9d96afc8001af2f9fe02aac357ed5dd38760648122b777e8e025c08b3f8aa8711149f8ab3be16d119c77b4695c43f20bd098e7edf632be8a1a9114b3fc0d2bcbb76e80c3d946ecf9af4c606956b4a5c1d608ccd2c22f5df539c0613857672906fe9d99d6fadc59559dce941cc93b10e2701615d4aeacdb53217efb340a0645f3ba596650abfe7202dd80aa0dcc440d5e0480fb1d15ffc40fdb6a0e73c10e74d8bd02a6100f80ae70946f85122b4779a2ba242478b2675a4cc0cf957739927f0efba874ca0ab6d8daba3d4ec279bec5c54513c8a1684e3441d3c06990a6fd1dcf34f926c2dd13f7b5b07481fdfc0c1ee6da8718e455cad55632fb9ceec2667067d9972415e373139f631b22527f8390ce9b754dea95a760ca19b86342efd804f407012879401045f6f294a46f9ae328d11c65608f9bd5b0f23af0b42929ebe230ebc91644ef78900149b10fc2d7e4fb4654ec470b66628d93d46135e21b53909fbfdb230449859f34e066ed399d3672e4baa502b63c8619c377b25c08df44734a281075a38f20926ac16080b0b206f5a3a3eb0393756ee0166e2390b7810b536928c619dc961f59f500c898ea0f72d903da98e9aea435284b16db6816c4e61ab06efcb3d24fc27660405f69457d8c31bf7ba70814f4b80e2cb044b763a13241c90968a6cb36c54577b3e841499e95efaca49afd881797c4ba877dfc31ceaaabcf026d181735d0031811fc835396acea13b1fa001d07c279f47fe14c78a006354f51f5a077d76da062576721bf9fa1382a74906542a58f344cdb8da45ce3749f9669f34fa4d47864895b2f0cf67d9661f77eee8f5313692a53eed4136e6fea5288ecf4b45716595c8ba68f248ddf79372800246c45cbc16e8f5ab0e21cb435a7843ea3404e979997a63b3c2bb85cc15043e30ffe6be64dbabd0bd6248cbdedc2bd0224beecda52689f62de9cf77c36dd3971f5a8dc0bf40493b571f0e0412879d791747fe48b0d9ac609baf83151e5d88ad674c1628f1b1597ef3b93634bb38ffc18d1f7b40366badbbd5a5273a7be90465a0475bcbb0ad510e1c26c1258036e9cbf4aaafd08c618592a1c902779384d65f336e5ca7e801cd3e7b773bcf605bbe5cc26c41ad3d09d3421bea3b63765cb7a532a9718b60bbf8422c0f7d8bcbd706d23ab6342569d44e4b16d8ba058f25b6a1d82e7a57fa9ce9774e81dcf6cfdfe4b8ea2f462d626f89d7f113692f200b8ee0e3aef49fe7723763419c21455d46d3e2928adbc6611c861240f108d0fed16c3e99f22dc14489bd2a6ff5545944f024c1d0954dde4764ef47e0b98fc71b93427994930155f67f63cf098b0a85b1cd69d0494f9f251ab28e4faa2ab9e16c41d247ca43aac7aa4c1127865c3c775c52ff09b4c2850832185d7087fec557a415723e72c656d12f37d290f5e01e38f0b27b91c63d11bcc150fe5e97aac6b8521174925a8f95f3231012f249223550d83e8bc52a709258ce4e06d3340fce14927b5278cc44bb8d2d20d4d78e91254f8892ed4d2f9e5ddedfb83736c740a866e9c5a14f811237aea2b57cc52ad9f4a4b04b15dc7259a1d8582b1e093f84ba47c5711a0459ec00c35502b787ebb99d69927501ad3aea2c6b79ed97add65c961b59e0ee1ce9e6b533b9a5ea3fec85bf3f19f7380b73943f75478c1e6f1a3e5c2ec0646812aac5c68471eda3dc8917a08d6c432212c5d90466eabe39cbc252690218234d6c170eac5b3c02a8395eccf6fd3ce584bd7bce2c236025afc4e941e2098c619130099b80e9e4dee91bd2d0caa433cfe695896194fcf8b82dff79c458e2a5c3499aeb54fed1fc0a8c557da6afd93fef8b8cd958d745cdcf70aea1cc3753ad60ecf2124198840928cdf98c6b44894c913de0984785f1f8dbdcaa7db5cca0388df78e958a690e8c31c6535d8865289dd39195fa30e3c30f27471d8f2c50882986ab494bcf0189d9256999817b531ba283cddd719b993ecc2845d272271c14c6491a3357ab768c277130c3bc53e861f35fb328d21e0c1e0808f10017a68b4f65d0981039eeeb391231046df1f7352b0da51c5241f1f329f4fac494eff246c199fb2305c0ba78ebd822227b68e397c748ec05e0f7f2d40d77c315e82b669cf5cfa8231eafa98f71ac1d4f1eb93e9b26f9b02361c55779c74ed325cad56197e63776497a288bb68a7b5b87378b834909af0f9393ea8a7a18838b59368037881c1a123755cf831f8192def6f70ade4394a6ac6aa0b5974acb9c679855f851c2e89fbfcfafa6ee19b429cb6bd18b9beebc52b41ebecca6472b5e8a8f5efe2340b83a1265eb258f2406d4221a9140c47d29c7b44cd5b9dd27d0d8dff89ea94f8fe597f5fb9a212d28c65fa1ffd3649776a4a6b49749d1b48a56445ea8f70465bad22794af343b0accaed385ce1bd90b4b3c9b7bad0b6adac64465303b44f1ab3efb9c28aa763e42b4482cab82af4d8d5cd9369aa95ef0ec25f2d970cff9d7fffff1a73709efc6ac268eb36102026eeba6b6ec08b397b2ef1ed7fecb8d6a5d166c5c8b61c2ce278cdbeab5f1afafe275ef04295a880f542cf1a148b5274a89f486622cfd7caba297e6b61b2cc5b8027735c4019fcfb224fca780a742a2e039ece7d0f638dd733c35802ea986836b25c3f5f6b8855459103aeb116c57cae495e37d947f9c4f0a12ca784435eae00d04aefd80a7c59e3f44fcd5f1d544d1bc5e78182a89b3a75e17526131f8a5d98509edd9db77d4d593e2a71e20a23b4c7d893138af329e422cd43bc216870bb205806a8e57a5b92aa9651fcedcd51ba25d482a9474c246c4f8da6b64a069cfcabcbf45c7e07e6a061b11d7808170717ef5d66aa1222350cd000a67794c6309348c4cc060f2505a60db0dd2ca2f97a46219a9fa3b0b878419ed869e29300903387f6193427a02a7b404bf1ab6d0e579869fa2293788ff4d6049c9cd18cac36b308f2e21bbce4f32dd739e77a45e7a3015f11f9f6c056c25bd7e5cb36e549ef6615c1fd413e1811999a2cab5fdce01cf5058cdbda92d6c02007de4c6c4676df48f5668dfed2ca3132f3a958ce2fbd08f2061458dca1892de1a6ec3647e67cfcc3cdb9aa20cbfd7f3545cf5611dfe9991fbd2d6ccd6799a47837c82fc5b48eb0d0cd71877ed8a64505c0ed31c6621a0176ab028c122c8690ba44f398926a2fff0ade322c6545b280e1c7dd5023b3c80626d730c4f2b5ed67a042748399edf237045e28c4d0f48d6ba9a9fb594bdbeab0b0138f207928887ff8f9be6d9819eb465bf3c25f436d786348f83c84ce28e6144472a2ba08edea3ac1df2467463e27b6729d42cfe026d22a9ac5036eebff23a9364088f2d1263055821a31fc40557c07c3283dcc556580d20bc6f6e7b8b6c1f2c60bf738c319e4343e7c12ea6a0b2c0b17e32cebcc1d388f51154aad6670d1d943f184aee4219291fbfd1d17b43fd28964823d87a51cbb762913e6b6ae425a972ad75c8827203f7b4669091768fc7841cfc2096ccc28effefa093b66e0ec7a0b6f1a2bb950b6d27b35b6fd84b609c0b81246f5e2542ca8d084ae94c0e7bfce7d0ac0b5b3bf0dd0ecf6d33d0373434e25ae77661e62ba332ab0ee6cf675a401a6fedce13c5fc41e719e76eda78ab45ca5d1182a3805e3741b1a9f5bbb5b657ba57c20867b968f91d4a2c6aee2ced4c5d2b000770f2800d48a9c72fcac7f6d454f95cff3fce2125bef0aab6b7af3b23fb6f1fb1c8f02063be66342f76eaf39cfc2296db7e18d0dddd260e420d97ab946f58abc252b5073346f748a7dce476852b4750205b0545c121e83eda21c3a02b794e246d3a06bd914c07935d4876dabd2e3d8767c3457fbef074e1eef2d9bf831c0bcfcd49dc63f31c915731468e459196d574cadd40fa2f90006d845a7bd57bbc2f0c5a82a8c2af8156eef0fbbb47312b2ce269fc283dd4a9a7770d4dcb764bc823ab47ad68fac8d1622b6295ee35cdc5dd2dbe42375fc6eab52791e22ab0464e27470545014f60924427bb8b419a4b5c340e3944c648c842e601e27fe157b547673ae4cebb1591083ac8026c2a696daeca9f0d579b5057874dd10f6869a6194499dce94c4f16f8e0598f604b756ee72ffda711b85b78a7634d011b09f889a802bb5ebbd0b4ef57126da9d78ff0250dd8b783d662e193aadf64ea8f1b3fc7f1ed541c7d1f5e73686acd3874c9e1b5dbbedd56b39b4c69c3e96dabb2214ece9a3960c1642c199e8ddface44f697d46dfaf7dca42597b7aa637045285d7e6400642140742869f148224a154175ac289f310fb485748c4c1eccf4028c06c3fb870c77450bae44ef3f5373be6e27831f020bd769874c9206bf27c38f2bdd924b5baeac2fec48b05c65fb68a49defff0f250fc3fca029b516e7614eeb30007ebdda6cc80a46c5f8690d6d18dcf4df1fadd3f85f4739620bf982361756e983aa05e4cc8964100f3823e82029533a077c3aac1883267efae4991fe11c8c86ad9f6ba384440804b921792ba580c42bdd0bf4f43ffc4c4c67538ad0da13fd798047c3c8338d9bef3c8e3eedc53a793b45611131beb4a545b4b408432581583f0240404b14ade8f1fa3bbb028291e9c229d15ebcabdcf3c407cfdf77cb3edeff2e61512b6375b3f1df760aec09e80ab2e6a4d6c6c4d92356348cc60356a637c", 0x1000}}, 0x1006) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r16 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r16) [ 1006.656123][T14902] 85921 total pagecache pages [ 1006.656130][T14902] 0 pages in swap cache [ 1006.656140][T14902] Swap cache stats: add 0, delete 0, find 0/0 [ 1006.656145][T14902] Free swap = 0kB [ 1006.656150][T14902] Total swap = 0kB [ 1006.656157][T14902] 1965979 pages RAM [ 1006.656162][T14902] 0 pages HighMem/MovableOnly [ 1006.656167][T14902] 344638 pages reserved [ 1006.656173][T14902] 0 pages cma reserved 00:33:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r2, 0x100000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x404003}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x48}}, 0x20004080) 00:33:45 executing program 2: clone(0x94063102, 0x0, 0x0, 0x0, 0x0) [ 1006.943494][T14960] validate_nla: 13 callbacks suppressed [ 1006.943505][T14960] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x500, 0x0, 0x18, 0x14}) [ 1007.046312][T14974] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:45 executing program 2: clone(0x94063103, 0x0, 0x0, 0x0, 0x0) 00:33:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x600, 0x0, 0x18, 0x14}) 00:33:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1007.234942][T14986] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x6, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:46 executing program 2: clone(0x94063104, 0x0, 0x0, 0x0, 0x0) 00:33:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf20c, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x700, 0x0, 0x18, 0x14}) [ 1007.534191][T15003] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x7, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 1007.687959][T15008] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1007.819267][T15021] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1007.927890][T15027] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001bc0)='NLBL_CIPSOv4\x00') r5 = syz_open_dev$mice(&(0x7f0000001cc0)='/dev/input/mice\x00', 0x0, 0x40000) connect$inet(r5, &(0x7f0000001d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0x12b0, 0x14, 0x391, 0x70bd27, 0x25dfdbfb, {}, [@nested={0x1299, 0x18, 0x0, 0x1, [@typed={0x14, 0x26, 0x0, 0x0, @ipv6=@mcast1}, @generic="0c0bfa4c9297a451e1a6d632953e3241d10b7fdad9c4dfb4219d875d6132cc8dc095497c8e851f32b0b22dafd81584f9a9d8e12adf9ceb8495569df1517e9204bfda1ff5630602afc3241e02e174e4abf630e26b07297b87824e624f7accff8c902a1fbc3eab6ece24e786a3d4908580b3eb87504d1c6d198c789003da8d615ed3111442dfff6124d1d043d9048c8776797d5ad8d6bce6157759fd35da187edefd8878ef9b443793edb0bd4588", @typed={0x8, 0x3, 0x0, 0x0, @fd=r0}, @generic="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", @generic="fc15ccd12e60b68c2d234d942a5e635468779efdb025f1e62766696fcfb0bd3d98154c8020b3fabe9abda4224b9f24c53324a3449ef3327e90d6f2407fe0", @generic="b85051b9bb9c3e06e4ed5973e557218c86ad27410c1c06ff1aee8b11e0b1cada8bd290af23795400ba30431cf6640da6cb7557076971507575a9f6d4824fee4b97dac56583ec41418a94ca664b2b30a4a4a18934f97d86f4c99a7149ab1f25ec011f8ef341348b96610ae7fbafa99e28b75898b09c9980002b2205fc388365a817c21d4adfce8977e9c989af4edb4463b684604bcb69893b4038f5c6d50004e38937016a6943758037dd4f8822f6744cf0967edd0e2273fae70c346831934256cbd60268f1019ed53d8ce428634224f1e89d1c1f4acdd019a5b4506fb7bfc128798ce0ddb08715b7f7aa43735c3733b616702556dc990f36f3badafc641d03c3bb9c93dfe32ac66c409438c9b197956ee616c4570cea55908f8718e571cf79294908129520282d391a6b9f9af46330517031dc6d164a1789d9e9cbc087ac040a7947637a45b7a6e63f3a630a688ce33fb7e1488d3c3a9866aa4bcf24977f22ee86825c5c9bee64ba205fc6680749c54ca43012a58af2bc4f3f6c03890e8ad22594c7e76d174df956dd3b38d50749bc3782896342fcf38adfe0677b73183aa47b667080f8fbc0c11def0bd6093eb6f72925eae292a41dfda9349c4ec7e47aa14e09c66e38aaedb00ea18313ec401915baf88631b0bfb8373baf14c53c731d1fc72753cc9b25f1b86a1c1a0abe6fdb6ed93480ef21a36d9ad4049e58553cb1f7e7c9ec55cc425433ba1be21e6eb22abeba09e5e226af9480ccae9466f46cef93ab3bb844250e991779dd24b17649c637f0c747b83887064f94a2893b4f5731fc459df1518f68d4e4d42efb346be54ddf28aebde656acc4487cd980ba44ee95c49c8f099a04297a417c5304bfb57cb90ba89caec46979a2ee7ea8ab71a71ad123511f35df351edff276808288faed1b309e9aebcf51de67c26e00d310bb25f594531147eee62f3d341574abcec79f48df491cefa4797681b58bb86055822963a3f848b4de24c62fb35fb31c98fe7183a258a6a1760bd12aeddb31a6804b70a6c12c7d15d1117e482f210539c41318b881d64b879e9705af2cf9a212e0e0bf74bff71136eb596418eed1b254267b4bb0fde87d47ca64eeb64e1ac64f4a5002f48189910b4dd3284e6abe5892bcc93790e17c4858d78ff3deb2bd2d2e9469350aeeb17da82469c09dbd473ee5fd97878be812b6c2472e29770ad88e08f89888e8119bc5429dca817330891111496bdb8304abb25460a7ee7f0bd1036be93084f5e255b1af44e491a7db09ea4846650b4a239483fba2f57f3568cc5f4c4310a6f126a9e5fd651409854d01a864de794708344c345ad52b20c7a4df6044d06646c23766cc794c3f68db3cd5ea7fc85ccbeeb047285b596916837ff3cbb7a5a78844a936208e0f8d58ca81cb176a7b87952cdd44b5e058cd040928108880addc4ebc34e746cb809958c6cc1c04791b1f97b69de5e1f3c88f7762c1236e001b0bf5ecff07afec7f74529fc4ef9ed93c8b6917af7910c3bc0d8b608919d21dcf30e7575709cf15f3fc80ab49cfd838ed0445a3e423326dc9c7d65a71c2e6973a3a487e72b1ff0b8f8a825c3226baad77aac346a31b80a7694c5f013fdf1e7706b55a6f2e3f63f67a6e4006f9e9f5b5e232f7bce6a99c69e7cbeae13b7e9325989d970790c085d48b0aca640a97c894b7285e861ad567cc5412d85202278263a8cc0f0ca5c455ce5ffea66244f7e31ff94c1f526bd31490e2c6e1575ae4805c26e32eef40d07c0890784809f9ff7654b192c3b8e24422efdfedf51a38819f2825a17c2a7fef8ca4c6880b391e9cbb56474d242d0651d7ea45f61b0d51857c5afc44833aaee699bf178fbe2ac2753f06fe8c8f9845a5a825f7509f3f7af6961e25ac322b442c8fe1d43b55bb818f539730e7e9682da3916eacf8acada5ece1b819ac78059bf5591dc62ee0c42b24160d1386eb4666f0f8c9707e40d177f87605fd7a9f44cf3526ce7b929ac9bf9771da413d463ceb77973a866d4df3c426178a1f173de66e6451c0d2a868a8287a6490bc1f287f1a4683cd03b482d53c98a0c02d3f116f21df170496d58509db1338cbce835013b75818b6764e7eb1334763cd507e4201a71c835874746dbd60442cc6c1312e5183c3cc1efe10aeb1d5594bb9645884e962c8428704e973421ce1e57da16daab176b44a61cfe750af197fe08cbd8e0f5c93d2ca242aaed157e23c0445b7c7333381d741f3282e123e1e8e2ce4ae87d038cf6534b8b3501b210a926012a5bbd80f6ffa0ce8aed8447dcb091001737ea41d4f736e110805be78c9a966fdd8b06216ea7ce921ac3d91a2e7992431180872ea4d15dd773ec21d05c015d2b29167914ebedff8e3db06f224e392b4410b28949e45bb8c8a37061996c39c5e048f64bb2209a0d11b88a902da6a0e119fca059d9b30195213588510b4fbf746186bf086b58aa2878150f5d7c4e8f98b3f8128f37f531b4f9325b655779a29fd4600483b28ab44856a235f55a93cf369c4645839be1209985729c975b8489eed02e2c3de9fbfca949699dd3b75699e458d4ab1794f75cc83a960754a94a7fc9fd9d8dce17a2fa763acea0c052c3c63982b28e6b67404fde0d26b71370b3d94e2de777140b37cf15514a6a96a54a2a9ba86b322e558fffc9fd370ba1263198760584e98acaa6f275eb408231210fe450462425bea11fc843c00b06b68531727a023bea8a1b890f63bd5c8de0198fc5733f85ec392d67a4dc1cc1e31c173b33629e528f590c241d6293983e3b4be82a55577b1076a561762bd9849686e2efe801b2425b54b048c28e3c391995688ad72fc43920a3555eab1700213ebbe965c5ad4cd7dc764dff6eb55d50072aa199eb2b41c5d3d2fa98dfc0558138b077d23a08426e48dd8530596d79b0cac9fb151e85f1b42f332ff7ed6ce2b6c1fe71789a26913119ac431a78e83f9f8df277ddc0bcaf0581bde8997b3ffd82058c96670692a5a5d56383a37d01cdee21a220c65884d4736fc5ba37bbe7859fd19eb873688275cf35dd45c0c495d6ebbc0692be2f9131de65ef43f7d394b8862da7bf54c028bbc29758f6ce93e78652ec2aa86e1440b4eab8ee0711dc4aeef25e3ff0c2a5c69d9b437d302d087366fa563af8d7dc3379c64cd13e035b0e7313e415c7d68e9a22d28131e55d300846ad5da0a56c722b2342d989f981a69a02185ae9f179d80248eaa2459f335e2954c080610a229119ce0f51266aa9a83758ddc1a096db6fdb74381195f38495e188d021565718c35404e2b8128086c58a930211c619ba99700ca0cc8a8bda105581f2143e4cf1115e2eb3c0419184cf621a8af4d57c2a6d951ca38934389cd1c1d23377601065ada2d8eb396154b44d02746a757d26bab528b300a149b1a6d10551237388f55257b15710d6dac49298ff3bee40554112882d3ebfac8d824e7e0e635946706b758e52db4a2dfe99369c910e4d665cee71bc42383c0eb415d6273d854989037a2b6e5e21cfb998fd2fe705aa629b7c7c914de1b8635107882079464f05551525ac36d4be58912241bd9100134d63e2e227d684670dccf502f8f553e690087469b6fd07982513dfad341f6afb47eca7ac4d852f6c4d586d4a780c4bdf97190d88c120b75684beb70779b07f662f5714363f2a75a65047686b5314f1b3bc978a50f0da6db93d5411e926f12076b0bdfda402ae5e25fb2a1e31003a2cc221b5a67f5755bf6af08683dd086d37531af3ff325a7df00121b8be91ae11b6c33f2470923540a6ece233d1419f13b3bc1311e5019f88f8e270cd29e54d8ac89eb9d0c82311cf2722c06d8516fd7e7b8078d5ece762082408a0ada1a216486a7f3fef9723370690b597f1b8ebd1bdbcdd66e84176d2ade42d67acff69c1c5cde156793e2aac327fc02e42a50f6bb531cc6cad0469e5d4f29745b197e0e59527630f780c5106689b7f1ffbd406ef43d45634d009471f8d8a92db9253fcb5a776655172d57f78810ef5a92e9670a5868f6fb3ace0e4175b5399d7c694044782072cc3d00c70b86a4dc88fea40fa01ed171a0e96990428f313486b72e355375045f10721c820351c6c6d771184b7e947930a83c24c71df22d9e78c968a0862f9e60784614b17f5ae72d2b94449356728b4c8d5054e2b2bb55d57a96cbfbb61f495b5c0416ee612eda7aca2b26eaeb4bfa553939f4ce290b6ebcabc04a621f8cf50bf07d8f6529514e11f32120255ef28bcd4f4bd0651e86fc99166e1a35fbcd71ed040ffdda3de8404f50432719202c0f1ac31bbba50a2c9613f6cabd4e38d6a288b12ed0889f848b03cb5445ade8d769364d96c668e0d48a0c77dc411aa3e1cd92ddf484a24a57dbf5a5c749f83d3bb51e900ddef76cd6a497256a0a6b6f9ebc584b4d8c29d2aec09bc2b0a1841a547955490a6b224574cd15b9574ed49ef55c3a72273004ff1309b486c3b202774a25b9dedbece05b56488b9c5e46c0cb425172a23815b1da286795e96339df3c8e250056e98a78a327b54d32a21af9c4a68dc61505f563ef5896e8abbbb55e6ac827b5673cde561847103a2d6b0f36ed8d181d7093a0e94385011dc513fd1be8f20226ba2f71b40c0851602d7e0b3b07795ebfc09654f4b929f5cabc548334273709321f225f16d2cd77675c22e17cf2ccb5fbb7d09eedc1fd9fc31acf1c2d26208fa91610fd47a822c4160ea66e66116f7f5d354609fad849e0e48b936bfe367eaea300620bf2cc2999b16f74bde514991acb8524ef88ba93d2a67b4fbb0026c2bb83221c932b8721d835f6db2fafde6dcbaa4dcacf7b89ce2bbf147798bcc8dc3bc08772bba2fdd7bc376eab037d5defb07bd10b32e3686c45a21e85c5501833384dac704757269061051253a47e585d01f13d56b196ff48043d4bd6b2ba1896182eb07e9538f3208d1d9fd9f109d46f28372783bfe1a8df0de8ac46b68ecb66bec05a955bbddc702379e62db4844b87537b6dcfe0f00ef4367df4721261ad93c5eb10147907b00efe6f60884f3954719366363510c044ad474193820dcdc7ec21ee34ac9ec8f830ba4a8365313cba1b2b8026a5762698f633b7372ecccc599d3dcfa805ac2781d4e2f652a6c966cca76cb3b2fe3c49db0c78eaf4978edd1124b4dee641c9fab551a7c971399df3d7c84a6cb1f3a433b01224a3893b88178648a318401332af5013daa39c56923b9e956e19b40c1406f9d8cd62feb7a340b9120d4188b0039fba0c036b0d28f035eed58b849a399a1906e72b24b5b4d8bfd3d2b24afca979f60bcd5dbd9599ab51b075d18a55e083954bfcd413e051dc6853fa28061213631a38f06baa46f20682d01cd960f96f4635e644060ddd200cf1127088a964f8478418c44169200e6cd7083b59dbf10677686046f7a92b15e7ba027b26faa3158c290755e874ada2b9fb5bdf099282d596e24df94d7f5d80801a2fbd42e5af9759822fea5761364269d346b75cfd65fdfa6550769e9f4bd5dbf09ed6da8cd511150f165374d50dd61380aac61f6bae852e8af85414c1988e66c4136772617daf3b4c557428324af8a29a8706a5d85f490e0bf930f866360754c8b94c396f7bc0ffe12f938a3dd7bc9cb8dad4de93657838bd328cb37fbac82917f7a958aea02d65213ade1c22ffe463b62c9e7cff15cb2403c4368c72352d56742deb3559fc1182806d083342bee3cf39570475fa1245f7cc867d93892f0c431fb5096986d140c76dc647491961829e654e1462c600168f47cc1d018d3fd2c9846e216a", @typed={0x87, 0x3e, 0x0, 0x0, @binary="1c1ebc2a2ab34e7d62f73509153d95bb6330846219a06327dd927253707334ac1205cba18238afb49088687665684cd349a417660ca26d12de05aa744fe5ff289a0f2f61313d10c2e6d15abd5d9407571ba3db6dccb554184d4d26bbb29e9826c9cb21df3ee79906f3d5d443892c606116c5fb37c4d54ede0b7190e0dc274b0cff6e21"}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x80}, 0x4002805) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x5, 0x606, [0x20000240, 0x0, 0x0, 0x20000406, 0x20000554], 0x0, &(0x7f0000000040), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x8, 0x8035, 'bond_slave_0\x00', 'rose0\x00', 'ipvlan1\x00', 'team_slave_1\x00', @dev={[], 0x1b}, [0x2bd214cdb6f5060e, 0xff, 0xff, 0xff, 0xff, 0x1fe], @broadcast, [0x0, 0x0, 0xff], 0xae, 0x15e, 0x196, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0xe3fb45bf4dec19a9, 0x9, 0x0, 0x35, 0x6}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x3, 0x4, 0x0, 0x0, "26446e0824e02541a67375bad85f5ac57062ad42139be3a6d1a93b3f59fa26dd69f6b3bcebcdcdee70da1b4899ac507b141567a25cb2d68677b5e13c2e89f47e"}}}], @snat={'snat\x00', 0x10, {{@link_local, 0x10}}}}]}, {0x0, '\x00', 0x1, 0x3, 0x1, [{0x5, 0x14, 0x88be, 'syz_tun\x00', 'erspan0\x00', '\x00', 'gretap0\x00', @dev={[], 0x18}, [0xff, 0xff, 0xff, 0x7f, 0x0, 0x1fe], @link_local, [0xff, 0x0, 0xff, 0xff], 0xae, 0xe6, 0x11e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x3}, {0x5}], 0x0, 0x1}}}], [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x19}}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x19}, 0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x11, 0x0, 'caif0\x00', 'ip6gre0\x00', 'netpci0\x00', 'vlan0\x00', @dev={[], 0x11}, [0x0, 0x7f, 0x7f, 0xff, 0xff, 0x7f], @empty, [0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', {0x9}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x5, 0x3, 0x8808, 'bond0\x00', 'ipvlan0\x00', 'batadv0\x00', '\x00', @broadcast, [0x0, 0x1fe, 0xff, 0xfa1ec39abb87a5c8, 0xff, 0xca14c56366d7665c], @empty, [0x1fe, 0x0, 0xff, 0x0, 0x80], 0xa6, 0xf6, 0x12e, [@realm={{'realm\x00', 0x0, 0x10}, {{0x0, 0x200, 0x1}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x5, {0x2}}}}], @snat={'snat\x00', 0x10, {{@remote, 0x2}}}}, {0x3, 0x4, 0x6007, 'veth1_to_bridge\x00', 'vlan1\x00', 'team_slave_1\x00', 'veth0_to_bond\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}]}]}, 0x67e) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:46 executing program 2: clone(0x94063105, 0x0, 0x0, 0x0, 0x0) 00:33:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x900, 0x0, 0x18, 0x14}) 00:33:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xff03, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x8, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:46 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1a6000, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x34, r6, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48080001}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)={0x80, r6, 0xa24, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24000011) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) 00:33:47 executing program 2: clone(0x94063106, 0x0, 0x0, 0x0, 0x0) 00:33:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0xa00, 0x0, 0x18, 0x14}) 00:33:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x33fe0, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x8001, 0x2, 0x4, 0x20, 0x2, {0x0, 0x2710}, {0x5ce1298adc7ce093, 0x0, 0x12, 0x2, 0x0, 0x1, "08b3a8f7"}, 0x0, 0x1, @offset=0x7f, 0xf0, 0x0, r0}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) close(r7) accept$ax25(r7, &(0x7f0000000180)={{}, [@netrom, @bcast, @default, @remote, @remote, @default, @null, @bcast]}, &(0x7f0000000340)=0x48) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x1000, &(0x7f0000000240)=""/253) [ 1008.273055][T15048] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:47 executing program 2: clone(0x94063108, 0x0, 0x0, 0x0, 0x0) [ 1008.469755][T15063] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 1008.489909][T15052] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:47 executing program 2: clone(0x94063109, 0x0, 0x0, 0x0, 0x0) 00:33:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x9, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x34000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0xb00, 0x0, 0x18, 0x14}) 00:33:47 executing program 2: clone(0x9406310a, 0x0, 0x0, 0x0, 0x0) 00:33:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x40000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xa, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0xc00, 0x0, 0x18, 0x14}) 00:33:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(r2, &(0x7f0000000040)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x7fffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000100)={@rand_addr="5054a5e870fe1a727b3d14721df870c6", 0x7, r7}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r9}) r10 = geteuid() r11 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r11, 0x0, 0x0) getdents(r11, &(0x7f00000003c0)=""/183, 0xb0) statx(r11, &(0x7f0000000380)='./file0\x00', 0x4000, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f00000004c0)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x5}}, {@common=@access_uid={'access', 0x3d, r10}}, {@rq={'rq', 0x3d, 0xfffffffffffffffb}}, {@common=@mmap='mmap'}, {@common=@uname={'uname', 0x3d, 'syz'}}, {@timeout={'timeout', 0x3d, 0x1}}], [{@fowner_gt={'fowner>'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r12}}]}}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x7, 0x4e24, 0x7fff, 0x2, 0x80, 0x0, 0x8, r9, r12}, {0xf1, 0xf7, 0xdd, 0x200, 0x4, 0xfffffffffffffffd, 0x3, 0x41}, {0x2, 0x8, 0x1f, 0x8}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d3, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x3504, 0x3, 0x0, 0x80, 0x7fff, 0x2a, 0x3}}, 0xe8) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:47 executing program 2: clone(0x9406310c, 0x0, 0x0, 0x0, 0x0) 00:33:47 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080), 0xffffffffffffe33) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xac4ec54a877bd086}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x20008000) 00:33:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x400300, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 00:33:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf0ffff, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xb, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0xd00, 0x0, 0x18, 0x14}) 00:33:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:48 executing program 2: clone(0x9406310e, 0x0, 0x0, 0x0, 0x0) 00:33:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xc, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:48 executing program 2: clone(0x9406310f, 0x0, 0x0, 0x0, 0x0) 00:33:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0xe00, 0x0, 0x18, 0x14}) 00:33:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xd, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:49 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7ff, 0x339978140327fb1b) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, r0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) 00:33:49 executing program 2: clone(0x94063110, 0x0, 0x0, 0x0, 0x0) 00:33:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x2000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xe, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0xf00, 0x0, 0x18, 0x14}) 00:33:49 executing program 5: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) connect(r0, &(0x7f0000000240)=@hci={0x1f, 0x6, 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@buf) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000100)={0x1992, 0x3}, &(0x7f0000000180)) 00:33:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1100, 0x0, 0x18, 0x14}) 00:33:49 executing program 2: clone(0x94063111, 0x0, 0x0, 0x0, 0x0) 00:33:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x3000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:49 executing program 2: clone(0x94063114, 0x0, 0x0, 0x0, 0x0) 00:33:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xf, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:50 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000040)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) 00:33:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x4000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1200, 0x0, 0x18, 0x14}) 00:33:50 executing program 2: clone(0x96063101, 0x0, 0x0, 0x0, 0x0) 00:33:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x10, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:50 executing program 5: socketpair$unix(0x1, 0xe, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x25, 0x80002, 0xe5) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="793497fe2e11241d110b48", 0xb}, {&(0x7f00000002c0)="5c0b6930589e3f187913a0aeef4e74498e1e11f94631aaae2779a4595cb0da242872b7bd0dd58f2cbea06d4ddca18906a8d048c0fa8081faad54fe7d4d3a19c0526250fcd69febaf313749b36a67d7af831f94baec99", 0x56}, {&(0x7f0000000180)="62bd42959e33bb5ffafe53fd49e802d62d3f59a779e22cb6ea2bf82b5c8f684f1b9bf670d3be93e243a2006d74e3a9aa160dab64f82312a7c4b892725416998797d336bf15b841e71a7dd4331a529e5004e870eff53643c1df666defb6552ece6604318f6f311bfd673902", 0x6b}], 0x3, &(0x7f0000000280)=[@op={0x18}], 0x18}], 0x1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x1d) 00:33:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1300, 0x0, 0x18, 0x14}) 00:33:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@local, @dev={0xfe, 0x80, [], 0x26}, @ipv4={[], [], @multicast2}, 0x81, 0x7f, 0x2, 0x100, 0x2, 0x1c00081, r3}) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x5000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0x400, 0x400}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r6, 0x3, 0xffff3a97}, &(0x7f00000001c0)=0xc) r7 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) close(r9) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x11, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1400, 0x0, 0x18, 0x14}) [ 1011.798161][T15312] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. [ 1012.032161][T15383] validate_nla: 23 callbacks suppressed [ 1012.032171][T15383] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:51 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r4 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000100)={0x40, 0x4, 0x4, 0x200000, 0x8000, {r5, r6/1000+10000}, {0x0, 0x0, 0x7, 0x5, 0x1, 0x9d, "9dbca63e"}, 0x7, 0x1, @userptr=0x7f, 0x1ff, 0x0, 0xffffffffffffffff}) ioctl$NBD_DISCONNECT(r7, 0xab08) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r3) 00:33:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x6000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1500, 0x0, 0x18, 0x14}) 00:33:51 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0x8, 0xc, 0x4, 0x0, 0x9, {}, {0x1, 0x2, 0x3, 0x14, 0x2, 0x6, "a909a6ff"}, 0x10000, 0x4, @offset=0x4, 0x8000}) 00:33:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x12, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 1012.423296][T15395] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x8000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1012.481762][T15402] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1600, 0x0, 0x18, 0x14}) [ 1012.697788][T15515] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 1012.705161][T15517] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:51 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:33:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1700, 0x0, 0x18, 0x14}) 00:33:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x9000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x13, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 1013.025766][T15534] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1013.105404][T15539] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:52 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:52 executing program 2: clone(0x200a00, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/212, 0xd4}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/126, 0x7e}], 0x4) 00:33:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xa000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:52 executing program 5: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x20, 0x3, 0x2}}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0xfffffffffffffd46}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xffff, 0x2000) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) 00:33:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1800, 0x0, 0x18, 0x14}) 00:33:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x14, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1900, 0x0, 0x18, 0x14}) [ 1013.675525][T15556] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1013.784240][T15590] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xb000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x15, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xc000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r4, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x8b3e) readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1013.978457][T15679] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r5, 0x96}, 0x8) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) [ 1014.343263][ T26] audit: type=1804 audit(1578616433.102:9597): pid=15711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir477032088/syzkaller.HvDLX1/969/file0/bus" dev="ramfs" ino=165127 res=1 [ 1014.457898][ T26] audit: type=1804 audit(1578616433.142:9598): pid=15711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir477032088/syzkaller.HvDLX1/969/file0/file0/bus" dev="ramfs" ino=165941 res=1 00:33:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x16, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1a00, 0x0, 0x18, 0x14}) 00:33:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xe000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4206, r0, 0xbb, 0x201ed58c6b352aae) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x70a040, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022abd7000fbdbdf250200000008004000e1030000140002006970766c616e30000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000000c0)) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x333, 0x40010}], 0x492492492492805, 0x0) 00:33:53 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80200, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0x1dfcbddbcb6c992b, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x50, 0x84, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, "f9760e0ccd916a2836"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfff}, @NL80211_BAND_2GHZ={0x8}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 00:33:53 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_void(r1, 0x1, 0x53, 0x0, 0x0) r2 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) 00:33:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1b00, 0x0, 0x18, 0x14}) 00:33:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:53 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc030}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000094}, 0x50004) 00:33:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@bcast) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x10000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x17, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1c00, 0x0, 0x18, 0x14}) 00:33:54 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x7f, 0x4) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000a40)={0x2c, r3, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcfa}]}]}]}, 0x2c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) recvmsg$can_j1939(r5, &(0x7f0000000700)={&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x5, &(0x7f0000000600)=""/214, 0xd6}, 0x24) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xfc, r7, 0x409, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xfc}}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x200, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbafe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x27}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x114, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e1a87ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x20814) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) 00:33:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1d00, 0x0, 0x18, 0x14}) 00:33:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x11000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x18, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1e00, 0x0, 0x18, 0x14}) 00:33:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x12000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:54 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) 00:33:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x19, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="6b0ab7b5ceecac01ae39e1f679f44c91180229cbed6ab6a4905251d48fcfe80d6b003b2a27ae2f5ffd23d8c91b0633a49b6ef70da64190a77b308747e9fb39006e594f96dac71ef6", 0x48}, {&(0x7f0000000180)="2b6280e09cecf9757d8a3517614b21643eb6e6745a4b637afb88e4e1e7e0d73f48a71dce12e4866fe5b1be6974ba8ad55b3d88dd23d206b19b5571bb210b9a642edfb38959e4073fc663397a056e599e3b89c48d2d60025598a0270b8ac7783d5e", 0x61}, {&(0x7f0000000040)="b10e147dba44e4", 0x7}, {&(0x7f0000000240)="c7608214cbe58b62c22ac6d369a6", 0xe}, {&(0x7f0000000280)="b83aa99a11abc2c2bc019178ad8d79f3f9226b8be4eebac8f358aa67a61925b1056b93b4758c659505f8f8ee6a9d955787da8be0a7b29b607770a2e61020ea34e38084ea553d47fdcf632a25e215bbd3720d296b205f096ce7bb0288a51d5fe359e0bc9b6eb566883713f8678b1da500aabf570656b217bdcb0588f227ec71e2be81692512988406306694915b323358602d", 0x92}, {&(0x7f0000000340)="3213d5b0393a3d67a2", 0x9}, {&(0x7f0000000380)="6e77b346aeeb105b2096f7a924187ef3745767d7d7e1acb9a411291665347a3fa1f34048430afe666d77d52fd9dc87108f639fd6ae370bdf5bd43ff41a80e6bad793d107c76b29aaa59fa51f7324e0152eff33339b668da987d5263528b50e73a75b8716d8c1bb64774acc2e8a40dba219dc1c5d545c465cb149a3d0ff1dd9", 0x7f}, {&(0x7f0000000400)="48259cc5e99836eb9b3bac6726f6a8674a0e2c393fba13ddc94bc439b2d469e5332e9b0dd2aada1bf1030542b6b1debe3936ccf1f91e3c37d95559629822a4bbe106a748fd7fb2eb370bb06e06f8e7f5458026aa80cee37835bd1b58a5e034030427f2dedede9c1c4790cd5906895b042a6e7ea33cbcff5241920a6c154fda22820722343da19da3f1e1f7f586650f3d5fc1b2ae273b83cfc556a747f1480e7b8b0c7345d8ba5fe5a1d09296bcc2289d2d40b79c59944034", 0xb8}, {&(0x7f00000004c0)="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", 0xfc}], 0x0, &(0x7f0000000780)=[@iv={0x68, 0x117, 0x2, 0x54, "3e2b4eb0c5c5becdbf29d290c8ff54866aeae919774f9958e6c3a6f88ed6d0ba539b2403b617638607bc2a34a5a57f3dd8802423a427c4db7a83835ba4cf6bf22c5df1787cb5e745e0cd8f19e0cac235336d21a3"}, @iv={0x18, 0x117, 0x2, 0x0, "abea3dcf262c9e7a68004191704ba3804cc3b0e24a724c88093913cd77d623413fec5f445384e483a8152373d6553c95a9087241c4563fb757591cdad6ab970a2476c356901da70b05474a649f4346c595fd2f6a718632a931b31b45477c2659ae9aafd6c17a8eb8e7ff83de5a4bea2b0e0dcfe5db32fa7d48d3365c662ad2c0a708cab369a8773ba0"}], 0x80, 0x20008800}], 0x2, 0x0) 00:33:54 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='&\x00', &(0x7f0000000040)="8276d5b6ce2564f13db686bfc946a75c8c48337f063ee4f712308c5d582593f48bb9ae5cf7207fcdd99dea804b4c47b9bd1195667495e7ef5a22d8c196628d695292ff81876106758c21187f1ddcb35c3a0bec7d071854a40060c9548bde56f2d20d66b0bd33f058bfcdf8b3fab9ce9e19eb0048fb32e19b9be27dd909c1f90e5629a5e000ff24b4d4bf7bc9048954afd1c105645e645c66d967ebe693dec9a9c78d0cec5640660970f7c8438898527e13f608131cfbec92bdc99f503d669f57da75257332b198c464eccf05b5865d06b68639aef07a66b49b941385083d627c", 0xe0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000001c0)=0x10, 0x80000) fcntl$setlease(r1, 0x400, 0x1) 00:33:54 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) r2 = semget$private(0x0, 0x7, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4, 0x3, 0x1000}], 0x1) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000000100)=""/144) 00:33:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1f00, 0x0, 0x18, 0x14}) 00:33:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x13000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2000, 0x0, 0x18, 0x14}) 00:33:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x1a, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x14000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:55 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 00:33:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x17e}], 0x100000000000035d) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) r6 = syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x6, 0x101000) close(r6) r7 = socket(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r8, 0x1dfcbddbcb6c992b, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r10}) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r12}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd0346d3593bf1462}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x80000}, 0x8000) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f0000000380)) sched_setparam(r13, &(0x7f0000000040)=0x2) r14 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r14, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r15 = open(0x0, 0x141042, 0x0) r16 = socket$alg(0x26, 0x5, 0x0) bind$alg(r16, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r17 = accept4(r16, 0x0, 0x0, 0x0) close(r17) r18 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') getsockname$packet(r14, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14) r20 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r20, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r21}) r22 = socket$alg(0x26, 0x5, 0x0) bind$alg(r22, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r23 = accept4(r22, 0x0, 0x0, 0x0) close(r23) getsockopt$inet6_IPV6_XFRM_POLICY(r23, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000a80)=0xe8) r25 = socket$alg(0x26, 0x5, 0x0) bind$alg(r25, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r26 = accept4(r25, 0x0, 0x0, 0x0) close(r26) recvmsg$can_bcm(r26, &(0x7f0000001fc0)={&(0x7f0000000b80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/186, 0xba}, {&(0x7f0000000d00)=""/29, 0x1d}, {&(0x7f0000000d40)=""/221, 0xdd}, {&(0x7f0000000e40)=""/153, 0x99}, {&(0x7f0000000f00)=""/4096, 0x1000}], 0x6, &(0x7f0000001f80)=""/56, 0x38}, 0xd9fbdd1941a8a341) sendmsg$TEAM_CMD_NOOP(r17, &(0x7f0000002200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002000)={0x194, r18, 0x20, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r19}, {0xf4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r24}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r27}}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r15, 0xc028660f, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r15, 0x6430) 00:33:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2100, 0x0, 0x18, 0x14}) 00:33:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2200, 0x0, 0x18, 0x14}) 00:33:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000240)=""/240, 0xf0) 00:33:55 executing program 2: clone(0x568c3200, 0x0, 0x0, 0x0, 0x0) 00:33:55 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f00009f0000/0x2000)=nil, 0x2000, 0x387b1d0849878266, 0xa031, r0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:33:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x3f000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x1b, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:55 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x2000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000a40)={0x2c, r4, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcfa}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2480}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffef}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 00:33:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2300, 0x0, 0x18, 0x14}) [ 1017.103192][T16355] validate_nla: 15 callbacks suppressed [ 1017.103202][T16355] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x40000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:56 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) getrandom(&(0x7f0000000100)=""/228, 0xe4, 0x2) 00:33:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x7f, 0x7fff}) write(r2, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x6) r3 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000240)="1c52207ec8f3511812842ef2f7c584610059b9a500be8c35614a01aa6cbbcdb34d521f0aec7f4a08c596d236ab3b7593b29749fe648c53a7d752f53ef3f3511b0c53c817e43935c63be08c6af2f687663facdc549d48b54b97b5feade558e57e6e54b7c4fcf80f5f4ab6769822658d3dc0e36b1ac27733fc75b880ead65d2c8e43d52942c8fec09ddaed753075b773e07607c8edd84e1dae8853570deaac5340330cfc935dd097b04efa3d8aeada65ea6d0dda7654b9f4a519f8d75750a562407eab1c617de2f9aeac93d4a6895d501bf16c21db6b77c33ae5dc9a2fa82fa83b84dab86c", 0xe4}, {&(0x7f0000000340)="2939373fb336415188e9bfdb6391241d952703fe7a891cb746fe83b6657d1adf45fe68bbde439bcf393d685a53847506d4bbde6077004d6d5d5bd6691bd3631cf825aa80e3326915b4343ab5a654f07e5a555b7991b11f0156c60e11c84659e034b6cda6dffcc0287cacaea93e00e7bb8e1a323d72ea994b5416b72afb718afceb3b1f1f966ef5de7d016758ca36710a332a81791d0ff16b951e820eae6f06a7128b86bd5a08c5a56c60732753996b39e297135c1a7cc2906d80bf3e62553bf85e1cbdbc7a2cdf83253edd5ad192b41a7b4a16ba0127a81f83575a010b2924847363e838b6f3", 0xe6}, {&(0x7f0000000440)="0da2dfd883601944a0fc0df401e544fb07fe19adc2466a36f46521edcfc5c9d0760549165fa28ef1aa4827c05a8b3cef0529c0cb0c82b597268199847bb7e3c6b1e5b014dfb4187c0144db0be1c076cc8522c63b82076067c478eb15e36bb3b85dbdb7e948d545191255b6debb5fec1a35c973cba804305a35e43be02931010446fa0e24086cb187cc2859cb570ba544cecd2c71325200cd12482434386efa4cadd05d2abafdc05e363cca8c523ca82cd0217144498179cfcafcb8255885851e2d6780733bc2", 0xc6}, {&(0x7f0000000180)="81c5b04d5ae1b2bf298b0b8cce3175c2247e4e100329d0195d13dcab0b878f141b6ba1d3115df279f6a157c9a1146432c0aedd66b4e6df67c274c3835c21f92be4d30f1320e3059b36e5a7d644fdf432162d83ac75c5ba02d0ebf2fcdff4f2894c720c9a", 0x64}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000640)="794132402ef43e11b045c79feb1d4744da38442b5b01719df3a5e9fbbbba44cd03feebc93908748bb7c9b3cc3feba3050451a6ca8e101d03c21dcaec4aac2de4665254c0781d", 0x46}], 0x6) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1017.338283][T16372] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x1c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2400, 0x0, 0x18, 0x14}) 00:33:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x60000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xe}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8000}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, [{0x8, 0x0, 0x7be}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xeb}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, [{0x8, 0x0, 0x6}, {0x8}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x7fff}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x8) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1017.654258][T16491] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2500, 0x0, 0x18, 0x14}) [ 1017.880584][T16496] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = accept(r1, 0x0, &(0x7f0000000000)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000840)="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", 0x592, 0xfa9f8eb5ee87b6c9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) write$binfmt_misc(r4, 0x0, 0x0) r5 = accept(r4, &(0x7f0000000500)=@ax25={{0x3, @netrom}, [@remote, @bcast, @remote, @rose, @default, @null, @netrom, @rose]}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="800228bd7000fbdb6e3602000000080002000000000008000c00f0711f9608000400ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1080480}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042cbd7000ffdbdf2506000000080000000000010000000c000300000014000600fe80000000000000000000000000002d140006"], 0x3}, 0x1, 0x0, 0x0, 0x814}, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x217bc0f92cc97688) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x65580000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2600, 0x0, 0x18, 0x14}) 00:33:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x1d, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0xff0a) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1018.009028][T16511] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1018.218221][T16618] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1018.276935][T16627] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 1018.318533][T16627] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 1018.429579][T16632] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2700, 0x0, 0x18, 0x14}) 00:33:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x7fffefb8, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) splice(r3, &(0x7f00000000c0)=0xfff, r4, &(0x7f0000000180)=0x4c6, 0xfa, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/95, &(0x7f0000000080)=0x5f) clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:33:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x1e, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:57 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) flistxattr(r5, &(0x7f0000000100)=""/149, 0x95) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r3) [ 1018.710408][T16645] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:33:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2800, 0x0, 0x18, 0x14}) [ 1018.768556][T16647] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:33:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0xc0, 0x1, 0x9, 0x31c5}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) syz_emit_ethernet(0xc0, &(0x7f0000000340)={@empty, @broadcast, @void, {@ipv4={0x800, @generic={{0x15, 0x4, 0x3, 0x13, 0xb2, 0x67, 0x0, 0x5, 0x5c, 0x0, @loopback, @remote, {[@generic={0x16, 0xb, "a8e99a5186b1fdf9aa"}, @lsrr={0x83, 0xf, 0xad, [@remote, @rand_addr=0x4, @multicast2]}, @cipso={0x86, 0x8, 0x2, [{0x0, 0x2}]}, @rr={0x7, 0x13, 0x9b, [@dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0xa2ac, @local, @local]}, @lsrr={0x83, 0x7, 0xf, [@rand_addr=0xc357]}, @noop]}}, "ed6a228b7fac2bfe0b5c2f902b8ae700cda3e5d8d8fbfc386ed1a1ac3d7527f8f73cd0c1bcd50c72fb238d172930cc13fe69df312dfead26ed7dedb5682ac2a28816a4cfe3abb2ccd585b3d617ec6e56e356ad1d04f00890c32677ddb7f5"}}}}, &(0x7f00000000c0)={0x0, 0x4, [0x711, 0x6f, 0x115, 0xf44]}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x25, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x81000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:57 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) 00:33:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x141c, 0x1, 0x9, 0x200, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x5}, [@generic="43ff86379ae8ebe850a7ab2638844045545206233971863ae4a8a6e75ec6b5ed9036e02215327e1caafe6a42f60c4a42ddcf650209af75d8b2236ef9a565d0", @generic="705cc5145ad855cb18935da44b3e9b1d1c4fc728e1dd2567f44ba7e27e1e252c8fefd1fc5f9df41085e1b39c4a40e25ef2c5af93bf7dca42d31c0873d74de4e8b0d476ecfa7384f4c1379ddbd5fcd838131a2178f19ab241a26e0c02fa27faae5805e27a00839e7a64525192abb0e6e747a0874a17d7b6019fea2c111d9d515e64e79766bc5a9fd8a0a3b139ce2a119e3fc689fc6eae7d9e8389cd3312d196522c185a4877c84a59a087986e89dd9333289552922544e78932f056c01b03317e01c51869bad9a889fce8954b920cf830b55139c170b8fe3d7999dd99dc8fdbb91f4d76f85b", @nested={0x4c, 0x17, 0x0, 0x1, [@generic="a70c1dbe1c186d31af673ba14c5f833ed4aaefe2fff2c61c4f578b67d638c03b9917d49579c3419a5acc0a75f1e9b24c0c5b7a735630a77594cbe5af823c679f4fe707f89e1594d4"]}, @nested={0x1290, 0x12, 0x0, 0x1, [@typed={0x9, 0x1f, 0x0, 0x0, @str='(*\':\x00'}, @generic="27699a6649d3bce4cfbbcb01060718adcf477750ba72dcdde4956e8d0437cd3fe1c3427343b6ec80fd1131bc1d1992728c46f78708e6ec2e02a7cf8aaf734b6572589c56d089f6bebfc5a9100602d143a21f4331dbba4a52bbc91dfed493829aeefd9f67b5b0a82fffe2c97add771f5fedd9600ab57f08e99452be0642d4b41c6b758b2da7111e42f27f91b92d7ec8a772f382c09ae92fcf4dfbe279b80895e3b61070a8cfd463244488f6e26c8b4c80da853f7dd8a71937477233ffbf7ec96bedc092504aba463bb96f45cd00ad3bd94d5df2929b9d1273", @typed={0x84, 0x24, 0x0, 0x0, @binary="d737c1a4dec20d6253f8f984937a6097d9bf7a483cedd9c33aab7255b7a23966507f5ccbf122fc746ad03f06cc73107ce568f8e873be8dc860a3fc2832b1fa149afb553bcfaa44014d81021013fdccb54a909ad430d1871eb7909e8734c3e4d35c05bf24421cc9487c4a258c07e1649f51f883a517c5a7241089a14ca8f471d6"}, @generic="516815ab49843ad82ab18453020794e6792f373817f800918b9ad9e091a7285bdbbb74f15153a0f542bf3f78a7706e0ad9da31f5c92148fa8bf049787d62f8e34e759efdef1e16a66631c3d205e1250aa15f9d4633d57dc31b8a10", @generic="ed98acf470787d06e4879d2c2cda96ff5b06e53e290c6ce449769b774f49bd5b1a54de22369e827ac4655250cc36baff7988b2f06245bf15d3ea06c76d1280b6e254c16e3cfeed0cb083adae583931a8d74d9d6fcb9b77b49a9858c0ff21cf97385bc586667637d1e0a63eeff87074153f82886448aea683ca44073e4cad5c2be8dfb25a3b412fad64f7c726940ada92598fa5bb621a224df5a247ae720ddc5361e3c6ad2b283671931f442c48b96985c808e955a0e3eb2b487c4b6d6871d4ff18c6a39649c9aaa33ff8199480c50e934ff8e58b2ebf56c4ab3d4b134836376636171be0dd02396b418b2b67ab94ca382c16e122082197de1cb60e1ce16c0204c3ee847ed7bda521aedeced00a18cd349cab9fefc92594e87c6fb4453d4a1d897eecc013bdf1b3dfd8cb3736607e190a56fdcd972bcc82388b340e21242f5aff886f6a1e7caec6999b1368de6e8749c728155381ec0669dacd43d4f7699e75ea181d1b9d1c0674c4118d2af35e119516589c754b9baf8a35e88f271526b91552d84de4db5d413339fe2adce1fec7f59918c1a2ec05ad97e7509d5d18a6f1d5ccb55604108ba120efc0061f2d166bf65011efab2650285169228d33df279df5392f0c0a36d7a2f3fe28143296fd024605d1a0e55a26e851df6624cb75993fea51b0184062d5544c5ea610dc9d0bccdb4e2bdd3b2c697e4ee160b26208f34bc765947e7ef7ce52a6d1b64668936fe37396eb3d1ebbb6efb5a6b33a78a7b09bc0f68f786713e01a7835debe2ef3bde4bb8b9358c7f1088613fbd964bc81aedee111eda4726c941bea98dff166d2f42a11800a29cf0865b083435db69e78c20ed13660d50ac4f9690d4d626b6f00d2ff9dd0f1fe5c44a989ebbe3bad047a3d1b6caf6a37bface91d2a4e9b3be0f34be1b98fda8b3d46211c57062305f249f37e7dd7edda30dfeaf2ba476bfd4cb652d899ad1a53c5cfab0356ba8819c61e4fe5022eacd775119d88fa3210607c2c509bb334bbb77152e57d25be432f537e435a2e2ee483fa209c5695b5d62e4a608073d244e056d4a37cf7a24100edbe4faae81f3d31f28a6755a0f0e101a5deabc25dd08f6e7dd31edab97def4e02b3d00443e38c5d8ed368856193f49ecccef96dbf2f10ee750395d336df24722ad2772af54bf1a3af38a4f442f2548704cb671578170e27cfc77a8e2cf9064eed0e473ff62ed46f8ea8a6c50bd132212b87a89190426ee200c4d3e98e5289bd16b0ad4bef881cbdb11119355c68c38973e365f95626c3ac38ceea796b56b583aa5c0523a6e141fe45a9baf5e7b6f2198be361d13c46a6ed415b1de554cd878b3ff5b654c8c3b2ca35f0e2d620c86848b20d2530e4fb5bcb222310c127bee3c23775a3e566ee8c829f92ce9418b724e81f11514538f447f0876fffcd333de5533447f0515640889ae4665f449ce663471f1bd4baa139312cdc19db90a60a126f35850649b896009c78b3abc0ceb8a6038098b1d34a48b42d42e9fa51d640f9196a4267385811df282fd7d8ea1f9585344fc7dd43064477cfdfdba22343235207ea0dbfb3dddeab8ca6c695cd35feb04db6807d2bb38d1a118e4a5f967ab1856c99d338445186d1e64913a4ee61c43048eb0a6e91077b1c7484a31aa04858412846f49144db6713671fa56205640435a7e97d512f3426eb6bcd4d0f6a782a13a9b803a66fa273a77bf8055587f2a12ff3fa40c7b6f298b4b12679996bc1de03164c2d4a409d9366928ace0d2eeb765a1ea22bc1849ff5c817c0e6b4eaeb1fda29db6904d0c310e12121665af1877ba8e3a0ea9ac9eb035adb60b412639b576e7c0e3e6ab9bdcfe509a1eeb6648bd91a73ec61d5a2fded52b70dcb9829e68cfcd557fedc0c01792d3727628551e68c172863cbc2db0b9df135fcd253cf8c609573f29f71c66343766959473042132424f7e695d01d846d4c2860c5a14e4a244cb3008685c10f3feaa8e5f6cfc0296f50513a9341f773627546e9dfe6dbcd85365a1a633463ddf81fccad29975d929de046f4ad0a0a5be98fe22e99348eff6b5223b531bc485e09967a1374131a3caa4c3e31609436b21155a740cceee3d97b5f45a4a78cb63f0e5565c240aff6d3856876f9b227a06660409f6075487985a1fa057ba74f6765e0f30ec17adb9ba1dd39660c3c3a40176afe237c3e4caebe0f07e8d8563e628c9ece8fcc428a332b039f2189336e4eb5189a072cb2afde236e9b52e98f473b90896ff14adb5fb1e10a751ce7a9441400486ab4a72730b98eccdf4b70541d181b9437d69c5c17f0b6efa8b58ec75a1200946f528235d8d74c26945a7cecdf88b38409c5dc0b867007f028cc4bb25acf09c36c2d91e047a6012388bb94a2cc9a08528aa41ec1c9067052ba8621f8a63aa754c7fea74f4cda80e5a5ca54b461e7e9077535a9c467698cafb809a4335d6fd5781b24c4720b8ecbc117e61269a4e6bd83f79fbbe5bb50a70ac44b4f123993325c83da09dde0f84f14aeaf6b8bf602077ac85f45c37bac7dbb49e382ccd7848e514bc15cd0e454c6b487f16ab3abddb4bfe5f728d1c53e50ed0301289f0c31fa404ff50865ad4c112f19ec4fd3740be21cab25d63ae19b547d8c3e7eaa14e63058a12fd8fec64ad0bc345085eb7a0725e2698b1b0118b83536af7f350a1d081c7570988aafbfb248246cb7f3f88018e2e59e1141399963b0679980bb528fdc76053c169075356cfc03c67fcb27be5b4936fa949017312e32184cec86567ed737fa8887777291566706c5ad2693be097d1ebe2146d8915fffa5dd8b6024d1e554352fd5fb4b13b18dd963b89029f46cafc021011b933234fd1b1351795360174832cae17ea2c088d6de64deae8376168b51283003a03a72952f5ba25d759652eb975df7f97a517a17d0defe153f14358e24cb5f366fea20fe12f3b851ffe95dee096726c316b59fbaaf33a7a9b4564b3f50a61235b75c81d27aa6139e7674db6c23bc0b9a1eb3663c4e8308e6cd1279c6246662a9b49967280922418cc02c91712405e6ca67b0d7c83c1f88d6746ca9a7ea043cda14e2ebb6e846f5ea624636317cedcbc4f017bdd24cb98310028e1f66e5f786f2ef261677721fad28103cbfa4b3eaa2bbc0d0bffb1263bc41a36f996c6fd025e38e6247460fbc547480a6bf9eed7040571eafde8694ff5a783fad846a5efb0ce181bb1aa2b5a5ae6aeaf8fd301cedb2e1623a345786d7a7f445ed696ad3d7e9a248a831db906586d754be1e6b534fd07f507bbb573bfaaf56be5c7f5961cd07bb60e3de2acfda823273afeaada9488fd141fdb6e215f80621f6e6a7e1e6a8220b7f675da97efa83b9e34788a7c22baff015afac968029119f95787b56348301ce16cb3021853205d4bd52a1ca12e6c3338d085f1caffa8df4389ee051571b2eb88fa500c5cb3e4727e2a567eaf6df0da28861f41bd0d495c95f6e2952dca2c405a68c6b3a5f8a372e24e8be770714d085b93af7d2abc2a599a21862a10e3f06a3d47905f6ab9299c65fac8b0fdc075bd4a341ab6cb2c6b04cf59888a43cffb279f18260462014bbac071c238aa6758b8217edb81e693571d6294641342ab07dc913916d4ca3735dfe731d2563f35a4e5b349e0f38a13e8b19965e3c3c297596a811af7a6134c75ad427a4b1b48937c852ce1271b78d876aab26df5eaaceab63230475fbd2f5677259810d2fdaacc727c5cc083d3b0d5da80630fad3d9d0f22e4f2b8845dbf122868735e76413b32b7c7b2091e20000844745e9f2e0c596721c321dae067210684c8cde968ce9b87edf456d2e60b0f972e7fc7d2ee5b8900914c5ff09336ec1e4730b3d3bda4c0fe83de3b80cc8babd677105409eafe3de6abe841f206201f5ec4f65c5348a87a7f4096d54ac41411533680d330953761418e270b68ff793b2a8b112932cc9059207c3a390ae54ac00a325bd3a278209822d677ba82e652a3e175d8113e8eaf51fcc6b3e9ad38c80af60b4006d0c899433183eddbe7ce51ff4f5b30cbf55fc29ad6accb557f0360e608f409981ac0e0faf9519490ee9b5275d3cf255a4240f7b98818cc65d38cd81a99d5cb747ea7802b1956a6f6dfde3cea09434fdc54e652729a0727ecae6e080d6a07845e3b440c5e0bae7dd5fffbcb1da82b7baf4d4a0890e25435d30d4901c6a1689427385777392db895eaccad7deaa7c2cca4306d5a7e33ff92a75aba0b398d3830984b9910ecf10b653aee82e4eecc33c2e57e169c2c9a19d4b8c7f3d12fb82e18703a586e1a2d6ac981255720c7f5d5a4bb39af34a5622bb6ad1aaaac86848721180bc7fa6a7560d692ffce9b43738d14aa6f99e891d52b220b5a00011ede3b00099768af834257040b89fc93812482713adf91c669b8fede21e69e898e6a442a8a548f939285fe4be37b73656231b3b47b5a537b5843b173037c7071e5cce131b9be6583a2b164b9f58cb8471f4069bcfd46c4e6b5d00f09f0e7d36850c2cadca5b018a8f9cbf48842e454715483074a0e99569cafda90db5f0d0b74a39452edd9a537e6e34724848d32ba68684dc6f0b50a260233bb9a05666ea06e53c53835cc517dfa59a128f24b2bb8791d61f5ab9f0e9cd443a4c8cd7e490e92fd33409252137a7ff34e5d4bbfa93f14d7a480fbf1d908f3e60821b1ac772056b7f6759d879985284536ae7ba7404196cacdc54b04c5a088e8ee43ac576f7b6a71ba83d12e856dd7df4dbd6d14118a1f6fe3c49763523fd31ed3d92c5ecf9e1df6b7b565a1d006f317f7dffa37216fd9b4098b7d5d56f4d8c41ec02746c8c6437fa49d9766f38afb9e2ecb7c05f9df24636ba50270486db78079755e573e54b34d1a90709dc5e0082849cddae1bf39d2a7bbf386d20582a38f96974a0746554a8a488caf64cf8a4196016f21b9fa6f814862c9ad302aace17f0c139a681a0ad5023e194b7f6c9a511b9a5290e544ab8a779705048aa2a3e08450c905a0b923c5d324f653e6d31afadff212aecd7a142c4b28aeffef9c1c1b6247843048f8baf5c63038b82459504221aeae0c8e59f51b0e7ab329ddf4f3f36c34c955c6514b8b14030e5d86ade69d89f4537e8aea546a36b57d795f45118a61f912762517e2a9d79dfc44d1cbb05a00799d6a51a5e06613dc6c709f5104ac5533ae8d04e1cde66e4b3aa37915415f4e34e56317156409b6fcc937f6f0ec2cc0b950c6d6160aedf2ae6bbe99d8e7f0f9d78d80d853d1d5e7df9bdb402f9c49c11727efc18048b83cfbe68ddb519915397dd27ac57abbb78c4dfd0809c83ad295577472ae2a7c554e39a4836b95be4fa2d3b6191720512a256beb0692344350312a945378b8ad0c5d3273bac4935b9dbc88e91bf9f52a7848da6ef4ed3d7fbac560cd71bbd8eeb7c0ae0688a527830f6296dc0163036113438d20fdc25a5b93fdbba4047b2eb858e036a08f7b5bef5da4853714717eda58ed19be9d6c13723a3242b1d1c7998d419d7747df8cd9c514d8cf44c22f642cba5e5899fe1deacfa652223b49d1820ca86c8969f40a148949d303af45cd567898a423863f7929ae2a3d91d13cd2928fd5b44addf7bd54c8bb6a8e2674e850256ac1c745cf00d9bc06c4d303dc407661c88dad354dab5722a441a1016f012159fcc1c86933d4c03a6d2409a529439bce2b6c19d553fb84b3d90150c38a6c7d5edfb0f34c24cbc95d3ec928320d476bd3ae44b5ec78dc724c6b99ff058602b29b44c840c955b04746db3453c2e0524f4fb4b0c579d3c4778f05bc349", @generic="b5a372a8a5b36a34219020b8621441b7dd863415cd8a05a5cab772e505c894916a93ffff54b3b222f3c73be7d9ad7cda534ad8dd36da560870e422c44f18f4bdbc5d86a4c77376ba8f5276c5cff8dcada69e2ea8710ce577e3ce144f03eb993d6ad0b132fb347e90e17e58eac6975a708e19cabb2811cdd5fb7282e81105c2726fcb68b31b43d3cdeef3ab47d045b8ccb09fcf8ce0c179ab123bc70623d558230ec75a4fa1dc49ebff387d7e02e1640df07c847fc6be259261f8892196cbc4ea79", @typed={0x8, 0x30, 0x0, 0x0, @pid}]}, @typed={0x8, 0x27, 0x0, 0x0, @pid=r3}]}, 0x141c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000014) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2900, 0x0, 0x18, 0x14}) 00:33:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x88a8ffff, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2a00, 0x0, 0x18, 0x14}) 00:33:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x2f, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:58 executing program 2: clone(0x3047b2e38c88c9b3, 0x0, 0x0, 0x0, 0x0) 00:33:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x9effffff, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) close(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r8, 0x9, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r9, 0xd2}, &(0x7f0000000180)=0x8) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2b00, 0x0, 0x18, 0x14}) 00:33:58 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x400) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x6, 0x814}, @window={0x3, 0x6, 0x200}, @timestamp], 0x3) 00:33:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3e, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xb8efff7f, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2c00, 0x0, 0x18, 0x14}) 00:33:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xc0000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0xfffffffffffff3a7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:33:59 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800006, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e22, 0x7ff, @remote, 0x5}}}, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x6, 0x4) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:33:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x4a, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2d00, 0x0, 0x18, 0x14}) 00:33:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xc00e0000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:59 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, 0x0) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x0, 0x80000) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, 0x0, &(0x7f000034f000)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80045400) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) 00:33:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2e00, 0x0, 0x18, 0x14}) 00:33:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:33:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xe03f0300, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:33:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x2f00, 0x0, 0x18, 0x14}) 00:34:00 executing program 2: clone(0xa1188c00, 0x0, 0x0, 0x0, 0x0) 00:34:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r5, 0x4d05d78}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r6, 0x40}, 0x8) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, &(0x7f00000002c0)="718b4a3adb98c1da92155ec5560e4854888c2187d0f839f4eacc4624f3dfa8ac3cd24d30eaec47dfdd612d449dea8c7ddbdf23adbc773302cd9f2c5b729426cd83a17a4788c7377e1d1b3b931bbf56cd9477a457f52bad0ca19ceb22e1c8d93561717dfc876e3f4b198571cb4dee0d", &(0x7f0000000340)=""/145}, 0x20) 00:34:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xeffdffff, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3000, 0x0, 0x18, 0x14}) 00:34:00 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x9) clone(0x4000000, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000100)={0x3, 0x1}) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffffffffffffe, 0x7}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) 00:34:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3100, 0x0, 0x18, 0x14}) 00:34:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf0ffffff, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3200, 0x0, 0x18, 0x14}) 00:34:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xc0, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xf20c0000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130009000100000000000000eb00804806000000c60001070000001419001300", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x3ff}, 0x8) 00:34:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3300, 0x0, 0x18, 0x14}) 00:34:00 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) [ 1022.322608][T17325] validate_nla: 22 callbacks suppressed [ 1022.322618][T17325] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3400, 0x0, 0x18, 0x14}) [ 1022.394510][T17332] netlink: 'syz-executor.5': attribute type 28 has an invalid length. 00:34:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xec0, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xff030000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3500, 0x0, 0x18, 0x14}) [ 1022.686168][T17445] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:01 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r4, 0xff, 0x20, 0x7f, 0x4, 0xcbf}, &(0x7f0000000040)=0x14) r6 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)) ioctl$SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, &(0x7f0000000200)=0xffffff81) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={r5, 0x0, 0x0, 0x7bf, 0x8, 0x4, 0x2, 0x2, {r9, @in={{0x2, 0x4e23, @local}}, 0x7f800000, 0x9, 0x64, 0x23a, 0x1}}, &(0x7f00000001c0)=0xb0) [ 1022.743915][T17338] netlink: 'syz-executor.5': attribute type 28 has an invalid length. [ 1022.849141][T17449] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xffffa888, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3600, 0x0, 0x18, 0x14}) 00:34:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x2000, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xfffff000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1023.194119][T17571] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3700, 0x0, 0x18, 0x14}) [ 1023.356503][T17579] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd75, &(0x7f0000000080)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020700006f10b500002780cc08001c00", 0x20) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000a40)={0x2c, r6, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcfa}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xd8, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xfffffffffffffd51, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9978}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x40008) 00:34:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xfffffdef, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:02 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x220401, 0xe8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000080)=""/144}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) write$FUSE_WRITE(r2, &(0x7f0000000180)={0x18, 0xffffffffffffffda, 0x4, {0x1f}}, 0xffffffae) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000240)={0x9d25dc76dcf1cee, @bt={0x7fffffff, 0x7, 0x1, 0x1, 0x24b6, 0x0, 0x20, 0x0, 0x7fffffff, 0x200, 0x5e, 0x1, 0x6, 0x1, 0x0, 0x10, {0x2, 0x1}, 0x9}}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = creat(&(0x7f00000006c0)='./bus\x00', 0x4) fcntl$setstatus(r8, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x10000}]) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) close(r11) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r12, 0x0, 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) close(r14) r15 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r15, &(0x7f0000000280), 0x1033b) fdatasync(r15) r16 = socket$alg(0x26, 0x5, 0x0) bind$alg(r16, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r16, 0x0, 0x0, 0x0) io_submit(r7, 0x3, &(0x7f0000000680)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x4, r11, &(0x7f0000000380)="3e5b9ee367bcd746fa67996c871db2b7242c40ce30c866c1ac010f219aab797e67739b0830a5c9f825bcaff111bd01a5afd533b8a5b6aac2aee0b2d850b67f1e702720a57c1abf8b8b994d0ec109455d8da5681e09bef6564c837cd3aecb3ff5e9", 0x61, 0x4, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7, r12, &(0x7f0000000580)="9a41c847933cc1d6280cf6c80c5e3fb6861f3265d88bdb2e91a4bfe82cd6ea7be3e54b9a3b8120290776dab3dd02d21678927355e81e7d5c3e21a7430d41f3595ea3867317b8a2d8390a9857df5a8653b1013822f405c1bd10dde8f24c208c9a04662406b4095f9753de2f397108bac1a6c802c8a6f18160c46e26840bb4e2b066051b5354e5bc90c3aca1ddf3c6bfea6f6348a50cc815751c813439917b52269ca130cd8706b6f26e89d2ef746b46efe34fc89cf6ea1ccb0ec851023aef55fde219196dd56fe03dccce15e3be0ffb62c08c80d3db16e3228e697cae9448bada13982a6b1f2431873b031ba04ec000"/254, 0xfe, 0x200, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x6, r16, &(0x7f0000000480)="a9c39c5da7", 0x5, 0x10000, 0x0, 0x0, r15}]) epoll_pwait(r6, &(0x7f0000000300)=[{}, {}], 0x2, 0x7f, &(0x7f0000000340)={0xfffffffffffffffa}, 0x8) 00:34:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3800, 0x0, 0x18, 0x14}) 00:34:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x33fe0, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xffffff7f, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3900, 0x0, 0x18, 0x14}) [ 1023.695174][T17599] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1023.833972][T17601] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:02 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00005b3000/0x4000)=nil, 0x4000, 0x1f4a641172ec6501, r2) 00:34:02 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3a00, 0x0, 0x18, 0x14}) 00:34:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xffffff9e, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20000260, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:02 executing program 2: clone(0x1818a500, 0x0, 0x0, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/61) 00:34:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3b00, 0x0, 0x18, 0x14}) [ 1024.152389][T17726] FAULT_INJECTION: forcing a failure. [ 1024.152389][T17726] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.229169][T17726] CPU: 0 PID: 17726 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 1024.229889][T17729] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1024.237893][T17726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.237901][T17726] Call Trace: [ 1024.237924][T17726] dump_stack+0x197/0x210 [ 1024.237948][T17726] should_fail.cold+0xa/0x15 [ 1024.237969][T17726] ? fault_create_debugfs_attr+0x180/0x180 [ 1024.237993][T17726] ? ___might_sleep+0x163/0x2c0 [ 1024.279064][T17726] __should_failslab+0x121/0x190 [ 1024.284023][T17726] should_failslab+0x9/0x14 [ 1024.288540][T17726] __kmalloc+0x2e0/0x770 [ 1024.292796][T17726] ? mark_held_locks+0xf0/0xf0 [ 1024.297557][T17726] ? mark_lock+0xc2/0x1220 [ 1024.297574][T17726] ? _parse_integer+0x190/0x190 [ 1024.297596][T17726] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1024.297617][T17726] tomoyo_realpath_from_path+0xc5/0x660 [ 1024.297637][T17726] ? tomoyo_path_number_perm+0x193/0x520 [ 1024.312607][T17726] tomoyo_path_number_perm+0x1dd/0x520 00:34:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3c00, 0x0, 0x18, 0x14}) [ 1024.312624][T17726] ? tomoyo_path_number_perm+0x193/0x520 [ 1024.312646][T17726] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1024.312661][T17726] ? __f_unlock_pos+0x19/0x20 [ 1024.312703][T17726] ? __fget+0x37f/0x550 [ 1024.312723][T17726] ? ksys_dup3+0x3e0/0x3e0 [ 1024.340876][T17726] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1024.340895][T17726] ? fput_many+0x12c/0x1a0 [ 1024.340920][T17726] tomoyo_file_ioctl+0x23/0x30 [ 1024.340938][T17726] security_file_ioctl+0x77/0xc0 [ 1024.340958][T17726] ksys_ioctl+0x57/0xd0 00:34:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xfffffff0, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1024.340976][T17726] __x64_sys_ioctl+0x73/0xb0 [ 1024.340994][T17726] do_syscall_64+0xfa/0x790 [ 1024.341015][T17726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.354236][T17726] RIP: 0033:0x45af49 [ 1024.354255][T17726] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1024.354264][T17726] RSP: 002b:00007f3f53457c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:34:03 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x5, 0x9, 0x1, 0x1, 0x1}, 0x8) [ 1024.354280][T17726] RAX: ffffffffffffffda RBX: 00007f3f53457c90 RCX: 000000000045af49 [ 1024.354291][T17726] RDX: 0000000020000440 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1024.354300][T17726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1024.354309][T17726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f534586d4 [ 1024.354318][T17726] R13: 00000000004c424b R14: 00000000004daad0 R15: 0000000000000004 00:34:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x7ffff000, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3d00, 0x0, 0x18, 0x14}) [ 1024.686352][T17726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1025.251353][T17713] cgroup: fork rejected by pids controller in /syz1 00:34:04 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0xffffffff, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x5603, &(0x7f0000000500)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x1d, 0x6, 0x1c5, &(0x7f0000000000)="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"}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 00:34:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3e00, 0x0, 0x18, 0x14}) 00:34:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x2, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:04 executing program 1: r0 = timerfd_create(0x6, 0x1a8a272c4dcb307d) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:34:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x3f00, 0x0, 0x18, 0x14}) [ 1025.433437][T17976] FAULT_INJECTION: forcing a failure. [ 1025.433437][T17976] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.461535][T17976] CPU: 0 PID: 17976 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 1025.470236][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.470244][T17976] Call Trace: [ 1025.470266][T17976] dump_stack+0x197/0x210 [ 1025.470289][T17976] should_fail.cold+0xa/0x15 [ 1025.470311][T17976] ? fault_create_debugfs_attr+0x180/0x180 [ 1025.487978][T17976] ? ___might_sleep+0x163/0x2c0 [ 1025.488006][T17976] __should_failslab+0x121/0x190 [ 1025.488024][T17976] should_failslab+0x9/0x14 [ 1025.488036][T17976] __kmalloc+0x2e0/0x770 [ 1025.488055][T17976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1025.488071][T17976] ? d_absolute_path+0x11b/0x170 [ 1025.488084][T17976] ? __d_path+0x140/0x140 [ 1025.488106][T17976] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1025.498482][T17976] tomoyo_encode2.part.0+0xf5/0x400 [ 1025.498505][T17976] tomoyo_encode+0x2b/0x50 [ 1025.498521][T17976] tomoyo_realpath_from_path+0x19c/0x660 [ 1025.498544][T17976] tomoyo_path_number_perm+0x1dd/0x520 [ 1025.498559][T17976] ? tomoyo_path_number_perm+0x193/0x520 [ 1025.498578][T17976] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1025.498592][T17976] ? __f_unlock_pos+0x19/0x20 [ 1025.498634][T17976] ? __fget+0x37f/0x550 [ 1025.523435][T17976] ? ksys_dup3+0x3e0/0x3e0 [ 1025.523455][T17976] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1025.523472][T17976] ? fput_many+0x12c/0x1a0 [ 1025.523494][T17976] tomoyo_file_ioctl+0x23/0x30 [ 1025.523515][T17976] security_file_ioctl+0x77/0xc0 [ 1025.538119][T17976] ksys_ioctl+0x57/0xd0 [ 1025.538137][T17976] __x64_sys_ioctl+0x73/0xb0 [ 1025.538158][T17976] do_syscall_64+0xfa/0x790 [ 1025.558826][T17976] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1025.558843][T17976] RIP: 0033:0x45af49 [ 1025.579144][T17976] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1025.579154][T17976] RSP: 002b:00007f3f53457c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.579168][T17976] RAX: ffffffffffffffda RBX: 00007f3f53457c90 RCX: 000000000045af49 [ 1025.579182][T17976] RDX: 0000000020000440 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1025.599073][T17976] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1025.599082][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f534586d4 [ 1025.599092][T17976] R13: 00000000004c424b R14: 00000000004daad0 R15: 0000000000000004 [ 1025.699335][T17976] ERROR: Out of memory at tomoyo_realpath_from_path. 00:34:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x80000) r6 = getpid() getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r8 = getegid() r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x1ad181, 0x0) sendmsg$unix(r1, &(0x7f0000000600)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="c3fd59b6eb8f217f2d1fc8571d7c02c1a4d0fd7e5a8267564e306c754ed77c74c3f91231b7ff02338e316568ac0cec05c505", 0x32}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=r3, @ANYBLOB="23094a658eb1fa31bca84b01824c73fcf15a340000007e53f33e745ec45b00", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4000}, 0x800) r12 = accept4(r0, 0x0, 0x0, 0x0) close(r12) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8983, &(0x7f0000000040)) r13 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r13, &(0x7f0000000280), 0x1033b) r14 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r14, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r15, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r14, &(0x7f0000000000), 0x10000}]) ioctl$DRM_IOCTL_ADD_MAP(r14, 0xc0286415, &(0x7f0000000640)={&(0x7f0000ffb000/0x3000)=nil, 0x2, 0x1, 0x20, &(0x7f0000ffb000/0x3000)=nil, 0x10001}) fdatasync(r13) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r13, 0x4040534e, &(0x7f0000000000)={0x398, @tick=0x1da, 0x6, {0xf7, 0x8}, 0x0, 0x0, 0xff}) clone(0x94043101, 0x0, 0x0, 0x0, 0x0) 00:34:04 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x2, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x3, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4000, 0x0, 0x18, 0x14}) 00:34:04 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20001, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) 00:34:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x2, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x3, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4100, 0x0, 0x18, 0x14}) 00:34:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x4, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x10, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x400840, 0x0) mknodat(r5, &(0x7f0000000200)='./file0\x00', 0x8000, 0x80000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x281a02, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) unshare(0x40000600) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x10000000280, r10}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={@local, 0x4, r10}) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x9, @local}}, 0x0, 0x0, 0x44, 0x0, "ac6cb32ec0684949ccc7b646d15244716c589717007300a9d20dfc3dcfaafe1791efb4b5784d0939cdf924a1af8b191a03201db5495158e101434f282bb391cffbee6c1b9bef4c126eb981e267fd3335"}, 0xd8) 00:34:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4200, 0x0, 0x18, 0x14}) 00:34:05 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = accept4$ax25(r2, 0x0, &(0x7f00000016c0), 0x800) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000001700)={@default, @default}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x29031, 0xffffffffffffffff, 0xffffe000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r5 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x100, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000001200)={0x7fc00000, 0x0, 'client0\x00', 0x7fffffffc0000007, "c9ff01b41c470aa5", "cb3a9c6f04855a1595fe549a5a1d6076bbcc2d5177a10eec8a34db82d1f11232", 0x81, 0xfffffffd}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x21e3, 0xc, 0x4, 0x80000, 0x6, {r7, r8/1000+30000}, {0x0, 0x8, 0x20, 0x7, 0x81, 0x1, "45275cf1"}, 0x3, 0x3, @userptr=0xe92, 0xfffffff9, 0x0, 0xffffffffffffffff}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f00000012c0)={0xd000, 0x8000}) 00:34:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x4, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x227d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4300, 0x0, 0x18, 0x14}) 00:34:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4400, 0x0, 0x18, 0x14}) 00:34:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x5, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4500, 0x0, 0x18, 0x14}) 00:34:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1027.265453][T18444] IPVS: ftp: loaded support on port[0] = 21 [ 1027.431074][T18579] validate_nla: 9 callbacks suppressed [ 1027.431084][T18579] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1027.609513][T18585] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:08 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/185) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:34:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x7, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4600, 0x0, 0x18, 0x14}) 00:34:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x6, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:08 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001200)={{0x0, 0x0, 0x80}}) 00:34:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4700, 0x0, 0x18, 0x14}) [ 1029.772603][T18600] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x8, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) [ 1029.963091][T18607] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4800, 0x0, 0x18, 0x14}) 00:34:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0x73}) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) 00:34:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x7, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b34, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x9, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1030.335039][T18734] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4900, 0x0, 0x18, 0x14}) [ 1030.645606][T18833] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:09 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_create(0x4, 0x80000) clock_gettime(0x0, &(0x7f0000000040)) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:34:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b35, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4a00, 0x0, 0x18, 0x14}) 00:34:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x8, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xa, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:09 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x1000, 0x1]) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)=""/176, 0xac}, {&(0x7f0000000100)}], 0xffffffffffffec6) 00:34:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b36, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4b00, 0x0, 0x18, 0x14}) [ 1031.029116][T18870] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xb, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b37, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) [ 1031.203016][T18938] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:10 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x218600, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x2, r1, 0x1}) 00:34:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x9, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 1031.567104][T19073] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1031.715938][T19105] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xc, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4c00, 0x0, 0x18, 0x14}) 00:34:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:10 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) times(&(0x7f0000000000)) 00:34:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0xa, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:10 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x1, 0x23, 0x469}}, 0x19) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:34:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4d00, 0x0, 0x18, 0x14}) 00:34:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x111, 0x4}}, 0x20) close(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0xfffffffffffffc69) r7 = accept4(r0, 0x0, 0x0, 0x0) close(r7) r8 = accept$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', r9}) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8020500}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r11, 0x19d, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY={0x0, 0x50, [@NL80211_KEY_DATA_WEP104={0x0, 0x1, "d7781d06c1339c402366ed5795"}, @NL80211_KEY_CIPHER={0x0, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x0, 0x9, 0x1}, @NL80211_KEY_TYPE, @NL80211_KEY_MODE, @NL80211_KEY_DATA_WEP104={0x0, 0x1, "fc450e0b6ec7e4fab066ef4bc8"}, @NL80211_KEY_TYPE={0x0, 0x7, 0x1}, @NL80211_KEY_TYPE={0x0, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x304}, 0x1, 0x0, 0x0, 0x400}, 0x20000000) 00:34:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4e00, 0x0, 0x18, 0x14}) 00:34:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0xb, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xd, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:34:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x4f00, 0x0, 0x18, 0x14}) 00:34:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) [ 1032.529231][T19265] validate_nla: 2 callbacks suppressed [ 1032.529242][T19265] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:11 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000001000)={0x9, 0x7}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/4096) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ubi_ctrl\x00', 0x80400, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4203bc6b8880671e, &(0x7f0000001440), &(0x7f0000001480)=0x4) 00:34:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5000, 0x0, 0x18, 0x14}) [ 1032.801447][T19343] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:12 executing program 1: r0 = timerfd_create(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x600000, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x6d5e9d411dd5a153) pkey_free(0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x2080) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:34:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0x2}], 0x492492492492642, 0x0) 00:34:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5100, 0x0, 0x18, 0x14}) 00:34:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0xc, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:12 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000280)="cc395b35861dca748e898adf12a0e0c74d14f015c4d38b2929ea7f1627dbde51577009dcde12a774dd68291c6cf61e20d17ec6bf8f9b65a9889af63dae2f3547905d1b7459319690379ee98fbe47acc5e3517ce57e5ddcc2ba2bf875ee328fd97fae5345a26958b8b275b58bfe2af3f7a5287de5976714072d149e77f95737ac47f0d9e8e98f76abb6ec46e70997b97c16a8985e5cf44def0f2a37b85a8512f86600dbda89ce63e697a9bf2b012a2bfa9f23758dbc545f0c8ceb8c2911d4e7d1ac5eeea9c699", 0xc6, 0x800}], 0x1040004, &(0x7f00000003c0)={[{@uquota='uquota'}, {@mtpt='mtpt'}, {@noattr2='noattr2'}, {@inode32='inode32'}], [{@dont_measure='dont_measure'}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.,systemcgroupselinuxmd5sumX'}}]}) [ 1033.286516][T19584] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5200, 0x0, 0x18, 0x14}) 00:34:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0x3}], 0x492492492492642, 0x0) 00:34:12 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x1f}, 0x8) accept4(r1, 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x49, 0x3, 0x7, 0xff, 0x2, 0x3, 0x401, 0x2c7, 0x38, 0x138, 0x3ff, 0x8, 0x20, 0x1, 0x8, 0x7, 0x4}, [{0x1, 0x80, 0xc5d3, 0x2, 0x2, 0xe3c1, 0xfffffcfc, 0x9}, {0x6474e552, 0x9, 0xf3a5937d, 0x9, 0xfffff472, 0x87, 0x5}], "8c3eb838c81d333cc3838edaeb465c9664a8511226ec01faf75a30d8d87cb6fcc8ebab08b0ce0fe7b1924c7c56c9326d2d4ec0e2e97d56c8db09c723e6de1d3be3d457a31275942a79e956b5b921db0f273893aea0b2aed32cd0127fa7672d302e4cae11e04c4eb9a29e510e9e837195eba4fddda0c08d24b711b5c1cf4a4f9a3642c255b385af683a4c6c7a56676ceaf18c215f4732b1b5ad3541e3329624048885c07e703b2d41f2c77dc1e90c7faa3af0af9a63f8381da15cf93ba1b1cf3d916f551bf6d8c2e24f3b"}, 0x142) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1033.537512][T19591] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5300, 0x0, 0x18, 0x14}) 00:34:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:12 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) dup2(r0, r0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:34:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0xd, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0x4}], 0x492492492492642, 0x0) 00:34:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5400, 0x0, 0x18, 0x14}) 00:34:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:12 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x8, 0x800, 0x8de, 0x9e, 0x7a0, 0x10001}) clone(0x94063101, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x5, 0x0, &(0x7f00000000c0)={r1, r2+30000000}, &(0x7f0000000100)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 00:34:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5500, 0x0, 0x18, 0x14}) [ 1034.266602][T19834] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) [ 1034.395564][T19883] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0xe, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5600, 0x0, 0x18, 0x14}) 00:34:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0x5}], 0x492492492492642, 0x0) 00:34:13 executing program 2: clone(0x94063101, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) [ 1034.574281][T19954] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1034.677254][T19963] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0x6}], 0x492492492492642, 0x0) 00:34:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5700, 0x0, 0x18, 0x14}) 00:34:14 executing program 2: clone(0x44270100, 0x0, 0x0, 0x0, 0x0) gettid() prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1e) 00:34:14 executing program 1: r0 = timerfd_create(0xc, 0xc0000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) clock_gettime(0x0, &(0x7f0000000040)) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000100)) r2 = socket(0x5417b373b82bc0ab, 0x800, 0xff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) pwritev(r4, &(0x7f0000001640)=[{&(0x7f00000012c0)="b37661d23ceddf15efa9c51e26863b172b7637982acdba7fcc73e00c5d4eae26db03b5071058b49048f986b1a97c48f939b08da19865bd584249ed9700fad080c0419998c6956643c5d773edf9fa7addb7428f4caf6373738f8776d613c01cac908f453836082b8749ec0f68f76f4d1c3f97bfca290da75b471ab8cfee6ef78d06896677a835a5c12f1a30ade75975fa8819eaa7b7d5d077560fb69a453ce5573b5c11134308101f6934bfa3dcd596262f95b9fb029ad08ce34b32395dcae6911a865772563dd5e41717c5aeacd31f907371114106c0b8a885", 0xd9}, {&(0x7f00000013c0)="475d72648428de4947b915c4ad47273836733c502693a0348075adf51fd0b65914a5119fc786056ee445e68730782aecddf6e2e4c92df1c2115a5b77dc780384e92cb0ae4af3b1e2691f85092b6a222e2f02695b6755ef7c66b978996e0883d221eae6abd5e43c508d195cff0c9fe1da89d2977600a150675d10171c5b9e546282a3558d88e68d5f85c05b1c3a039dee30218cc6a3f318f1789c0c5b586808dd899e8823b451ed7e72b0a64ee3a28e8d36653a99d4d0bfe9ba13159cb7b7addb0e3b504038501c944937141f6859ef3b3675ca5bf44575", 0xd7}, {&(0x7f0000000180)="a3475ddac1f8f275f6bee3c394b221eff80d76dc205658de434ac32d250e81e88fd9320ab841db0a840e55485e2203a76eee324b82955effe9ac1bd10fed34807c1fe30a502c7c191334020b874ee6d2ff7efce934cdedee1c174c7f8f7e94", 0x5f}, {&(0x7f00000014c0)="d238bdedeb1c1a64b8d86e4c7ea944c80dfe034ec40af6e20f02ddc63856058db86ed340aa62377791b24b505f7cdf32aaa6707683b7b55fec109f9cc5271429495899a6da73ab4bed62748c543c2606c621bd7ae8bdbb8003bf7eb72d3f3f28901a0ffb3cdf4867c958fb284a2d2c5454de19b159d197c2d342f286e32f09e897d03a8e8706e5fadb6e69867f2057db742ba5a7d589", 0x96}, {&(0x7f0000001580)="c79dccf8bdaba4a7df2f03fb53225aea397eab3b14e7ed336c43b86840913656a28dbdc0c84a40272fab0ec4506c49d32aa5ce4427aabff362b7a09b50050c273ff015f7d31ec4fde8e6c7d1435625092ce552f5459fe554a3ad2d01133f42cabb078ae8b65ee3c92e229297d37f379da4f1e6bc6adf36ad97e76ac00aad8dd6ca19", 0x82}], 0x5, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0x8, {0x400, 0x5, 0xfffffff9, 0x8}}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000001200)=""/190) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{r5, r6+10000000}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r7) 00:34:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0xf, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) [ 1035.355316][T20132] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0x8}], 0x492492492492642, 0x0) 00:34:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5800, 0x0, 0x18, 0x14}) [ 1035.466993][T20194] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:34:14 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84000, 0x0) r2 = geteuid() r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) getdents(r3, &(0x7f00000003c0)=""/183, 0xb0) statx(r3, &(0x7f0000000380)='./file0\x00', 0x4000, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,timeout=0x0000000000000005,access=', @ANYRESDEC=r2, @ANYBLOB=',rq=0xfffffffffffffffb,mmap,uname=syz,timeout=0x0000000000000001,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f00007072616973652c7569643dfcba3f15376df25d0c45ec75c7c646cfcef7e6c94e315fd31e7f3114e49965edca544747c7adbc7ddd13219edbb79c0fa49b177dacefdd868391fd76f4a459fd015a1e94a4e44698d31d1f58a80b36f56f49928d6aabe34b349b4fa05fab43d2404e601e286542717b7dd6d7565fcd044a2b7b68307fdba3de2ff70e877630b588936edf6173a843a158d4b113203863739f9be1f1ef5b343ee418cb20e60d8233bbbd668bbdddfcb9d490f03bfe75a3d3c3cce92be3aa13e145a028d86dd5182be4b78987ee6925dbe1aeb738b135e4b838f458980070b7ddee8a06", @ANYRESDEC=r4, @ANYBLOB=',\x00']) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r5) write$FUSE_ENTRY(r1, &(0x7f0000000040)={0x90, 0x0, 0x8, {0x5, 0x1, 0x100000000, 0x0, 0xfff, 0x6, {0x0, 0x8674, 0x0, 0x7, 0x1ff, 0x100, 0xdc9e, 0x8, 0x0, 0xe9, 0x80000000, r2, r5, 0xa42, 0x5}}}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) close(r7) fstat(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x8000, 0x8000, 0x0, {0x3, 0xfffffffffffffffc, 0x9, 0x80000001, 0x3, 0x5, 0x645, 0xfffffffe, 0x420, 0x1f, 0x8, r2, r8, 0xac0, 0xbaea}}}, 0x78) clone(0x4063101, 0x0, 0x0, 0x0, 0x0) 00:34:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x25, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5900, 0x0, 0x18, 0x14}) 00:34:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0x9}], 0x492492492492642, 0x0) 00:34:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5a00, 0x0, 0x18, 0x14}) 00:34:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:15 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x40) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000100)="cbc50d72fe026000841b94577ce5f27f83e1acaf45a17445769cbd577478df2585e7b0b4037ecaa5a7a7996c0574b5a2e7d6b3496a92b3493efda63aafbdb9d562e2c3c79a5cd8b13b9c407d6da61092809f402f168878aac4601f7de69c2cd5c697963cb27ac88d274a2a16a0ed0f27228c53d9e5a745cd6024", 0x7a) r2 = pkey_alloc(0x0, 0x4) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) 00:34:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x2f, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0xa}], 0x492492492492642, 0x0) 00:34:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5b00, 0x0, 0x18, 0x14}) 00:34:15 executing program 2: clone(0x90143801, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x4000, 0x6, {}, {0x3, 0x0, 0x62, 0x2, 0x3, 0x1, "c0c419ad"}, 0x80, 0x2, @fd, 0x80000001, 0x0, 0xffffffffffffffff}) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x1, 0x43, 0x8001, 0xbe26, 0x40000000}) 00:34:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5c00, 0x0, 0x18, 0x14}) 00:34:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x3e, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5d00, 0x0, 0x18, 0x14}) 00:34:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0xb}], 0x492492492492642, 0x0) 00:34:15 executing program 2: clone(0x94073101, 0x0, 0x0, 0x0, 0x0) 00:34:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5e00, 0x0, 0x18, 0x14}) 00:34:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) clone(0x42804a00, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x130008008}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x246}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d91200d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 00:34:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0xc}], 0x492492492492642, 0x0) 00:34:16 executing program 1: getpid() ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000400)={0x990000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000000180)="be6c525210e0fd73d747cc70d72e8109f2353c41561a693cbd49ea28ee83c590cce98798ebfdafe9a50b44f154dbdb3f42adf8b455cb3eb6191358161ddd172f6ae163e9f70758", 0x47, 0x814, &(0x7f0000002480)=@file={0x1, './file0\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)={0x2, 0xd, 0x9, 0x7, 0x20f, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_nat_t_type={0x1, 0x14, 0x5a}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x3, @local, 0x3db}, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2b, 0x3507}, @sadb_x_nat_t_port={0x1, 0x27, 0x4e20}]}, 0x1078}}, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001200)={0x0, 0x0, 0x4, 0x0, [], [{0x5, 0x7, 0xffff, 0xda, 0x500000000000, 0x20}, {0x30, 0x0, 0xaa, 0x9, 0x5}], [[], [], [], [], []]}) ioctl$TCFLSH(r4, 0x8910, 0x0) dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000bb", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fd00000055e19dc0c30616da"], 0x48}}, 0x0) r5 = timerfd_create(0x0, 0x0) r6 = open(&(0x7f0000002500)='./file0\x00', 0x21000, 0x8) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000002540)={0x4, 0xb, 0x4, 0x80000, 0x2, {0x0, 0x2710}, {0x7, 0x14, 0x1, 0x9, 0x4, 0x1, "b5e0875c"}, 0x401, 0x4, @userptr=0x1, 0x2, 0x0, r1}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r5, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d084b878266, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000100)={0x8c02, 0x3, 0x61b9}, 0xc) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r7) 00:34:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x4a, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x5f00, 0x0, 0x18, 0x14}) 00:34:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0xe}], 0x492492492492642, 0x0) 00:34:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) clone(0x681bf100, 0x0, 0x0, 0x0, 0x0) 00:34:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x63, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 00:34:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x6000, 0x0, 0x18, 0x14}) 00:34:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b60, &(0x7f0000000440)={0x1, 0x0, 0x18, 0x14, 0x1fe, 0x0}) 00:34:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002400071e0000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000303001ee4887e58e89c3e6050aaf227589a5e62b9b3ae0e9032ceadf555b77b45e3c502d70acb9395cd667b770a3e7e2c9dcf28"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0xf}], 0x492492492492642, 0x0) [ 1037.875127][T20724] validate_nla: 8 callbacks suppressed [ 1037.875138][T20724] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1038.038382][T20835] ================================================================== [ 1038.038571][T20835] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x2b2/0x5e0 [ 1038.038587][T20835] Read of size 28 at addr ffffffff88741078 by task syz-executor.5/20835 [ 1038.038591][T20835] [ 1038.038609][T20835] CPU: 0 PID: 20835 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 1038.038619][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.038624][T20835] Call Trace: [ 1038.038644][T20835] dump_stack+0x197/0x210 [ 1038.038660][T20835] ? fbcon_get_font+0x2b2/0x5e0 [ 1038.038685][T20835] print_address_description.constprop.0.cold+0x5/0x30b [ 1038.038699][T20835] ? fbcon_get_font+0x2b2/0x5e0 [ 1038.038714][T20835] ? fbcon_get_font+0x2b2/0x5e0 [ 1038.038732][T20835] __kasan_report.cold+0x1b/0x41 [ 1038.038750][T20835] ? fbcon_get_font+0x2b2/0x5e0 [ 1038.038768][T20835] kasan_report+0x12/0x20 [ 1038.038785][T20835] check_memory_region+0x134/0x1a0 [ 1038.038800][T20835] memcpy+0x24/0x50 [ 1038.038817][T20835] fbcon_get_font+0x2b2/0x5e0 [ 1038.038836][T20835] ? display_to_var+0x7e0/0x7e0 [ 1038.038851][T20835] con_font_op+0x20b/0x1270 [ 1038.038864][T20835] ? mark_lock+0xc2/0x1220 [ 1038.038881][T20835] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 1038.038897][T20835] ? con_write+0xd0/0xd0 [ 1038.038940][T20835] ? cap_capable+0x205/0x270 [ 1038.038964][T20835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1038.038981][T20835] ? security_capable+0x95/0xc0 [ 1038.039001][T20835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1038.039051][T20835] ? ns_capable_common+0x93/0x100 [ 1038.039072][T20835] vt_ioctl+0xd2e/0x26d0 [ 1038.039090][T20835] ? complete_change_console+0x3a0/0x3a0 [ 1038.039105][T20835] ? lock_downgrade+0x920/0x920 [ 1038.039122][T20835] ? rwlock_bug.part.0+0x90/0x90 [ 1038.039142][T20835] ? tomoyo_path_number_perm+0x214/0x520 [ 1038.039157][T20835] ? find_held_lock+0x35/0x130 [ 1038.039175][T20835] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1038.039193][T20835] ? tty_jobctrl_ioctl+0x50/0xd40 [ 1038.039207][T20835] ? complete_change_console+0x3a0/0x3a0 [ 1038.039226][T20835] tty_ioctl+0xa37/0x14f0 [ 1038.039246][T20835] ? tty_vhangup+0x30/0x30 [ 1038.039261][T20835] ? tomoyo_path_number_perm+0x454/0x520 [ 1038.039286][T20835] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1038.039306][T20835] ? tomoyo_path_number_perm+0x25e/0x520 [ 1038.039327][T20835] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1038.039366][T20835] ? tty_vhangup+0x30/0x30 [ 1038.039384][T20835] do_vfs_ioctl+0x977/0x14e0 [ 1038.039407][T20835] ? compat_ioctl_preallocate+0x220/0x220 [ 1038.039429][T20835] ? __fget+0x37f/0x550 [ 1038.039452][T20835] ? ksys_dup3+0x3e0/0x3e0 [ 1038.039477][T20835] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1038.039500][T20835] ? tomoyo_file_ioctl+0x23/0x30 [ 1038.039517][T20835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1038.039532][T20835] ? security_file_ioctl+0x8d/0xc0 [ 1038.039551][T20835] ksys_ioctl+0xab/0xd0 [ 1038.039571][T20835] __x64_sys_ioctl+0x73/0xb0 [ 1038.039594][T20835] do_syscall_64+0xfa/0x790 [ 1038.039616][T20835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1038.039627][T20835] RIP: 0033:0x45af49 [ 1038.039644][T20835] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1038.039653][T20835] RSP: 002b:00007f3f53457c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.039667][T20835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1038.039676][T20835] RDX: 0000000020000440 RSI: 0000000000004b60 RDI: 0000000000000003 [ 1038.039685][T20835] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1038.039694][T20835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f534586d4 [ 1038.039703][T20835] R13: 00000000004c424b R14: 00000000004daad0 R15: 00000000ffffffff [ 1038.039723][T20835] [ 1038.039728][T20835] The buggy address belongs to the variable: [ 1038.039741][T20835] fontdata_8x16+0xff8/0x1120 [ 1038.039745][T20835] [ 1038.039750][T20835] Memory state around the buggy address: [ 1038.039765][T20835] ffffffff88740f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.039777][T20835] ffffffff88741000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.039789][T20835] >ffffffff88741080: fa fa fa fa 06 fa fa fa fa fa fa fa 05 fa fa fa [ 1038.039795][T20835] ^ [ 1038.039806][T20835] ffffffff88741100: fa fa fa fa 06 fa fa fa fa fa fa fa 00 00 03 fa [ 1038.039818][T20835] ffffffff88741180: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.039824][T20835] ================================================================== [ 1038.039829][T20835] Disabling lock debugging due to kernel taint [ 1038.040004][T20724] kobject: 'tx-8' (00000000ca587043): kobject_uevent_env [ 1038.040044][T20724] kobject: 'tx-8' (00000000ca587043): fill_kobj_path: path = '/devices/virtual/net/bond207/queues/tx-8' [ 1038.040141][T20724] kobject: 'tx-9' (000000004c0ddbdd): kobject_add_internal: parent: 'queues', set: 'queues' [ 1038.040281][T20724] kobject: 'tx-9' (000000004c0ddbdd): kobject_uevent_env [ 1038.040319][T20724] kobject: 'tx-9' (000000004c0ddbdd): fill_kobj_path: path = '/devices/virtual/net/bond207/queues/tx-9' [ 1038.040423][T20724] kobject: 'tx-10' (00000000a505d500): kobject_add_internal: parent: 'queues', set: 'queues' [ 1038.040573][T20724] kobject: 'tx-10' (00000000a505d500): kobject_uevent_env [ 1038.040613][T20724] kobject: 'tx-10' (00000000a505d500): fill_kobj_path: path = '/devices/virtual/net/bond207/queues/tx-10' [ 1038.040704][T20724] kobject: 'tx-11' (00000000fef712ff): kobject_add_internal: parent: 'queues', set: 'queues' [ 1038.042439][T20724] kobject: 'tx-11' (00000000fef712ff): kobject_uevent_env [ 1038.042482][T20724] kobject: 'tx-11' (00000000fef712ff): fill_kobj_path: path = '/devices/virtual/net/bond207/queues/tx-11' [ 1038.042580][T20724] kobject: 'tx-12' (00000000eef1cb2b): kobject_add_internal: parent: 'queues', set: 'queues' [ 1038.042726][T20724] kobject: 'tx-12' (00000000eef1cb2b): kobject_uevent_env [ 1038.042765][T20724] kobject: 'tx-12' (00000000eef1cb2b): fill_kobj_path: path = '/devices/virtual/net/bond207/queues/tx-12' [ 1038.042857][T20724] kobject: 'tx-13' (00000000043681dc): kobject_add_internal: parent: 'queues', set: 'queues' [ 1038.043003][T20724] kobject: 'tx-13' (00000000043681dc): kobject_uevent_env [ 1038.043042][T20724] kobject: 'tx-13' (00000000043681dc): fill_kobj_path: path = '/devices/virtual/net/bond207/queues/tx-13' [ 1038.043131][T20724] kobject: 'tx-14' (00000000c6791514): kobject_add_internal: parent: 'queues', set: 'queues' [ 1038.043277][T20724] kobject: 'tx-14' (00000000c6791514): kobject_uevent_env [ 1038.043314][T20724] kobject: 'tx-14' (00000000c6791514): fill_kobj_path: path = '/devices/virtual/net/bond207/queues/tx-14' [ 1038.043417][T20724] kobject: 'tx-15' (00000000bce21864): kobject_add_internal: parent: 'queues', set: 'queues' [ 1038.044776][T20724] kobject: 'tx-15' (00000000bce21864): kobject_uevent_env [ 1038.044810][T20724] kobject: 'tx-15' (00000000bce21864): fill_kobj_path: path = '/devices/virtual/net/bond207/queues/tx-15' [ 1038.045749][T20835] Kernel panic - not syncing: panic_on_warn set ... [ 1038.045770][T20835] CPU: 0 PID: 20835 Comm: syz-executor.5 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 1038.045779][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.045784][T20835] Call Trace: [ 1038.045802][T20835] dump_stack+0x197/0x210 [ 1038.045820][T20835] panic+0x2e3/0x75c [ 1038.045835][T20835] ? add_taint.cold+0x16/0x16 [ 1038.045852][T20835] ? fbcon_get_font+0x2b2/0x5e0 [ 1038.045868][T20835] ? preempt_schedule+0x4b/0x60 [ 1038.045884][T20835] ? ___preempt_schedule+0x16/0x18 [ 1038.045901][T20835] ? trace_hardirqs_on+0x5e/0x240 [ 1038.045916][T20835] ? fbcon_get_font+0x2b2/0x5e0 [ 1038.045930][T20835] end_report+0x47/0x4f [ 1038.045943][T20835] ? fbcon_get_font+0x2b2/0x5e0 [ 1038.045956][T20835] __kasan_report.cold+0xe/0x41 [ 1038.045971][T20835] ? fbcon_get_font+0x2b2/0x5e0 [ 1038.045985][T20835] kasan_report+0x12/0x20 [ 1038.046000][T20835] check_memory_region+0x134/0x1a0 [ 1038.046013][T20835] memcpy+0x24/0x50 [ 1038.046027][T20835] fbcon_get_font+0x2b2/0x5e0 [ 1038.046042][T20835] ? display_to_var+0x7e0/0x7e0 [ 1038.046055][T20835] con_font_op+0x20b/0x1270 [ 1038.046067][T20835] ? mark_lock+0xc2/0x1220 [ 1038.046081][T20835] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 1038.046095][T20835] ? con_write+0xd0/0xd0 [ 1038.046109][T20835] ? cap_capable+0x205/0x270 [ 1038.046127][T20835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1038.046139][T20835] ? security_capable+0x95/0xc0 [ 1038.046156][T20835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1038.046169][T20835] ? ns_capable_common+0x93/0x100 [ 1038.046182][T20835] vt_ioctl+0xd2e/0x26d0 [ 1038.046196][T20835] ? complete_change_console+0x3a0/0x3a0 [ 1038.046208][T20835] ? lock_downgrade+0x920/0x920 [ 1038.046223][T20835] ? rwlock_bug.part.0+0x90/0x90 [ 1038.046239][T20835] ? tomoyo_path_number_perm+0x214/0x520 [ 1038.046250][T20835] ? find_held_lock+0x35/0x130 [ 1038.046265][T20835] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1038.046280][T20835] ? tty_jobctrl_ioctl+0x50/0xd40 [ 1038.046292][T20835] ? complete_change_console+0x3a0/0x3a0 [ 1038.046307][T20835] tty_ioctl+0xa37/0x14f0 [ 1038.046322][T20835] ? tty_vhangup+0x30/0x30 [ 1038.046336][T20835] ? tomoyo_path_number_perm+0x454/0x520 [ 1038.046353][T20835] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1038.046367][T20835] ? tomoyo_path_number_perm+0x25e/0x520 [ 1038.046383][T20835] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1038.046404][T20835] ? tty_vhangup+0x30/0x30 [ 1038.046428][T20835] do_vfs_ioctl+0x977/0x14e0 [ 1038.046446][T20835] ? compat_ioctl_preallocate+0x220/0x220 [ 1038.046460][T20835] ? __fget+0x37f/0x550 [ 1038.046477][T20835] ? ksys_dup3+0x3e0/0x3e0 [ 1038.046495][T20835] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1038.046515][T20835] ? tomoyo_file_ioctl+0x23/0x30 [ 1038.046532][T20835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1038.046547][T20835] ? security_file_ioctl+0x8d/0xc0 [ 1038.046563][T20835] ksys_ioctl+0xab/0xd0 [ 1038.046579][T20835] __x64_sys_ioctl+0x73/0xb0 [ 1038.046595][T20835] do_syscall_64+0xfa/0x790 [ 1038.046611][T20835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1038.046622][T20835] RIP: 0033:0x45af49 [ 1038.046638][T20835] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1038.046646][T20835] RSP: 002b:00007f3f53457c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.046660][T20835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1038.046670][T20835] RDX: 0000000020000440 RSI: 0000000000004b60 RDI: 0000000000000003 [ 1038.046678][T20835] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1038.046687][T20835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f534586d4 [ 1038.046697][T20835] R13: 00000000004c424b R14: 00000000004daad0 R15: 00000000ffffffff [ 1038.048189][T20835] Kernel Offset: disabled [ 1039.088563][T20835] Rebooting in 86400 seconds..